Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: peSJ4QWHBifWv/u+9Jpyio85kONezOm6jf0cQr6Cgb4=
Subject key identifier: 1B:8E:5E:8A:8D:74:E7:00:39:70:FA:1D:40:87:EE:67:90:97:42:F7
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 019A4E8641FB69D2B48AB09B3467F229C4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 101E
Signing time: Tue 04 Nov 2025 11:00:12 +0000
Manifest this update: Tue 04 Nov 2025 11:00:12 +0000
Manifest next update: Wed 05 Nov 2025 11:00:12 +0000
Files and hashes: 1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: +oeAjRM2HqFs0+zbQ2BehnhMJ7JoEzxM0ESVWxAZ7ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:41:fb:69:d2:b4:8a:b0:9b:34:67:f2:29:c4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Nov 4 11:00:12 2025 GMT
Not After : Nov 5 11:00:12 2025 GMT
Subject: CN=1b8e5e8a8d74e7003970fa1d4087ee67909742f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:e5:96:4f:c8:e2:07:e5:73:bf:9e:c0:0d:
b8:c2:0c:bc:40:4a:4e:89:c0:23:2c:e5:3d:9c:1e:
c3:2a:ad:86:1c:02:c5:37:ae:45:9c:32:d9:0c:0c:
90:b2:b7:97:d8:24:91:7f:c2:66:61:31:fa:4f:38:
59:ab:01:ac:a5:cc:38:58:79:99:d9:e6:6c:56:56:
b2:87:f3:1d:7a:16:20:33:8a:d1:e3:e9:58:39:73:
65:39:f5:82:a5:aa:86:18:3c:a2:ad:60:2f:e3:ed:
4e:e8:eb:65:45:1d:a1:1b:9b:84:f9:81:90:b9:f8:
4a:fb:24:5b:de:cd:04:8b:d9:bd:bb:cc:40:71:e1:
14:02:e0:2e:ae:c9:f3:92:1c:f4:91:54:e3:ed:7e:
89:91:13:4b:b2:91:80:d7:f1:b6:45:e9:ba:d4:af:
5f:78:af:3b:fc:f1:6a:f2:c5:88:90:d0:58:5e:57:
f7:a9:7e:ac:85:20:00:13:fa:29:ee:ef:35:5d:b6:
86:85:d2:02:cb:89:3c:e5:a3:d5:6d:cb:75:1c:79:
90:05:7e:22:c2:a4:d9:d0:50:89:3e:39:34:01:f0:
e2:2a:bb:d1:c9:dd:c8:2c:ea:33:d1:3d:11:32:a3:
30:b5:c2:8d:3a:28:8d:dd:af:9f:08:dd:9b:a1:f3:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8E:5E:8A:8D:74:E7:00:39:70:FA:1D:40:87:EE:67:90:97:42:F7
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:42:42:65:d9:46:9d:ab:5d:9d:a6:09:9a:f8:7d:94:28:6d:
70:91:d4:da:ef:02:a1:07:25:f2:ae:f9:a4:c9:d7:a7:cf:c2:
06:d7:ab:0b:9a:bc:a9:9a:7a:d2:bf:8f:3e:71:d7:5c:c3:50:
74:4b:7d:ca:15:f5:6c:d0:81:fa:16:c4:e7:0d:75:58:5b:84:
87:44:8d:52:d0:20:76:15:e6:1b:d3:c3:f6:98:ab:35:7b:63:
e2:ff:bb:f5:3c:ef:e8:da:23:20:65:9b:6c:f7:6e:70:38:20:
bc:8c:0d:69:24:fa:8c:7d:5b:ea:75:9b:89:76:cf:9b:3e:e3:
2b:15:39:a9:82:9b:0c:63:f1:2b:5a:76:02:c8:ba:e7:59:cf:
77:6d:39:17:b5:e2:4a:a6:7f:4d:08:34:3a:bb:68:61:f2:eb:
04:72:d9:3b:fa:15:94:73:e7:ae:c6:20:f9:19:b3:8d:be:7e:
a1:1b:b4:96:5d:b9:bf:03:0a:28:ae:8f:a3:4a:84:4f:d0:74:
3e:0b:a9:3f:b2:90:16:62:75:42:74:80:a7:85:48:8e:44:a9:
53:8c:62:6d:96:c2:96:13:94:2e:7d:0a:b0:c3:54:5c:2d:2d:
eb:b0:50:cb:0c:fa:1f:80:02:4d:05:ec:9b:d5:a9:c9:64:24:
f4:e4:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:23 2025 by rpki-client