Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File: yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier: +eVfxwrbF+yu+D8M3at4i2xvySa+mceGHMCbnD6uVHk=
Subject key identifier: BA:B4:80:8D:18:7D:36:02:12:B2:37:EB:52:66:EF:FE:E0:AC:79:32
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 019A503DA85BD5954F2C418E5A2CC5EDCCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number: 0A0A
Signing time: Tue 04 Nov 2025 19:00:09 +0000
Manifest this update: Tue 04 Nov 2025 19:00:09 +0000
Manifest next update: Wed 05 Nov 2025 19:00:09 +0000
Files and hashes: 1: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=)
2: 95UXEF21gZ7flq3LIhzoSnMGHMI.roa (hash: G69a8tnacaWcTDuPydYIocEgi7cgOBN1HbyOI50NXo4=)
3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=)
4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=)
5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=)
6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: n1UbqVWxV3e4ZKTnfdzCYAofW8+nihxC5AEsx3pn4eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a8:5b:d5:95:4f:2c:41:8e:5a:2c:c5:ed:cc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Nov 4 19:00:09 2025 GMT
Not After : Nov 5 19:00:09 2025 GMT
Subject: CN=bab4808d187d360212b237eb5266effee0ac7932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:28:7a:45:0b:16:89:28:fc:a7:94:64:34:
db:b6:ea:33:f4:fc:04:21:96:70:2e:7b:22:0f:49:
27:2a:eb:82:ec:39:3a:61:61:b4:b9:cf:76:56:08:
2d:e9:86:c7:60:85:f6:ab:37:d6:d7:ff:ff:fa:6f:
2d:9a:91:ef:68:da:bb:10:c5:20:bc:4d:b1:79:48:
ef:20:19:35:88:91:d1:9a:8a:c7:76:0a:5a:21:ee:
2e:e7:ea:fb:57:ee:38:c8:85:dd:8e:05:23:96:71:
a1:7f:34:aa:ef:71:f8:39:bf:24:27:5f:37:af:63:
80:15:55:07:b0:62:25:87:f0:0c:5f:fa:b5:37:58:
0f:66:fa:02:5f:eb:82:10:84:78:5f:9c:29:01:dc:
be:ef:14:37:94:34:01:4b:ef:cb:dd:96:40:dc:8b:
9d:3c:53:70:f9:b3:76:dc:5a:40:74:3b:5b:00:de:
a6:80:34:22:fa:ab:8f:1f:3c:f7:4a:9e:08:a7:dd:
a6:7f:4f:bf:9a:ed:ce:6b:56:39:57:94:17:ad:f6:
82:1a:ea:5b:d2:3b:c3:fc:5b:cd:e2:26:49:78:0b:
72:d5:0d:73:e6:9b:0d:83:d1:cf:06:5b:90:32:f2:
8b:31:87:b4:25:c0:fa:91:d7:ba:69:9b:17:87:4e:
ea:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B4:80:8D:18:7D:36:02:12:B2:37:EB:52:66:EF:FE:E0:AC:79:32
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f3:4e:ea:7c:bf:84:f5:02:1f:5b:f5:41:5a:cc:80:01:dd:
39:6a:36:67:66:11:3d:24:11:95:a9:ad:a6:0d:c5:4c:f5:64:
5d:5a:47:e0:89:4b:38:64:a0:eb:79:5b:4d:8e:39:ba:5b:c4:
d6:91:f9:7e:6e:6a:a6:75:94:21:b3:ab:15:79:7d:6d:e8:6b:
42:60:f4:f0:9a:d8:17:1e:e9:9e:da:5d:ca:47:98:00:1d:2a:
29:51:63:c9:00:82:13:a3:95:38:66:16:6e:87:98:30:23:87:
75:4c:0f:ea:a9:41:5e:e1:ef:db:9c:4a:ef:d7:50:f1:9b:cc:
cc:57:7b:61:1b:15:50:c0:f4:ad:9c:53:aa:a7:57:18:94:70:
73:61:41:e5:b8:7f:d2:cf:9f:91:ba:46:c3:fa:41:17:bc:0a:
24:34:11:d3:5b:9b:c3:9e:80:10:e6:ef:04:a6:b1:96:03:8a:
be:7b:a1:bf:d6:07:0b:d5:47:ee:c4:7d:50:af:94:22:43:96:
14:ec:7f:07:84:05:c8:ae:f5:23:bc:79:14:2c:67:bc:9f:69:
87:19:91:c0:a4:5e:18:84:a9:a3:8d:1e:fd:59:dd:d5:4e:9f:
ab:d7:14:d5:47:e6:ed:af:f8:f0:be:ca:2b:ed:20:49:1d:ee:
25:08:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:49:36 2025 by rpki-client