Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier: D/HMnuyEMOFvk2tqascRmTZjsNEpPs7kRTgRII5kJXc=
Subject key identifier: 59:67:EB:06:5B:23:33:99:6B:F8:0D:7A:3D:16:CF:3F:21:60:6B:D4
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 019A4F61F28F7EB06909FC58AF9A8E816B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 15:00:10 +0000
Manifest this update: Tue 04 Nov 2025 15:00:10 +0000
Manifest next update: Wed 05 Nov 2025 15:00:10 +0000
Files and hashes: 1: 08KPrzvK2WRWpD6p5CJ-Ul7cl9I.roa (hash: sfh9qqw8GmrlQX4Jo45lPqyd4sncTsU6nFud/SZKyQU=)
2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=)
3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: GSAmL2eDl5AFbSZZt8xI03ZRS27NJcHkJv6ciRPvaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f2:8f:7e:b0:69:09:fc:58:af:9a:8e:81:6b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Nov 4 15:00:10 2025 GMT
Not After : Nov 5 15:00:10 2025 GMT
Subject: CN=5967eb065b2333996bf80d7a3d16cf3f21606bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:63:85:0b:b2:c3:e9:dc:9d:ee:cf:cb:2e:
c9:85:ea:c8:53:df:6d:52:ae:8a:1c:7e:21:93:fa:
be:03:16:5f:37:ec:9c:95:60:30:51:64:6e:f7:03:
5b:21:06:ba:aa:47:3e:1b:17:20:db:38:5f:a0:18:
29:47:2c:6c:3f:f8:99:7b:f6:10:41:f6:45:c4:c4:
87:bb:b0:18:c8:cf:b9:e7:b2:23:18:39:9f:33:7e:
e3:b8:72:8b:2d:4f:37:a6:d9:26:48:38:de:3d:b5:
00:1b:f2:b2:9a:b3:ca:c8:d3:cd:69:31:a4:47:6e:
e9:68:71:60:11:c5:db:4d:40:08:06:b6:31:a3:f4:
7c:80:44:60:b3:45:57:af:43:ad:0f:7c:84:b6:e1:
5a:2d:d7:39:38:3e:10:a9:28:5f:be:67:e9:74:35:
af:16:b0:ae:0b:7a:44:a6:57:99:b8:e7:cf:bb:3c:
a9:8b:16:86:de:e4:52:c1:56:0c:d9:92:63:5c:dd:
4c:4d:45:45:81:e5:a6:b3:d2:f8:ce:08:9e:02:af:
ba:39:bc:a6:48:4f:93:9b:3f:43:0b:c2:3e:5c:1b:
2f:09:8f:2a:09:02:9e:b9:f9:42:59:83:d6:40:5d:
56:d4:bf:cf:13:84:ff:f6:22:90:8c:df:6f:1d:65:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:67:EB:06:5B:23:33:99:6B:F8:0D:7A:3D:16:CF:3F:21:60:6B:D4
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d6:46:22:da:10:1c:96:59:08:33:63:3c:1f:14:20:6e:2c:
81:e0:56:36:13:a9:b0:10:d6:43:7f:a6:19:d5:7d:a8:c2:fd:
ba:64:0c:28:11:e9:f1:f3:99:52:54:11:52:23:f6:c7:78:41:
92:7c:fb:ae:79:e6:45:23:4a:fc:8f:7a:3e:ea:f2:75:ff:35:
c7:81:67:c9:90:9a:2c:51:3d:82:0e:9b:5a:a7:89:31:7d:89:
d0:d3:68:92:96:6d:ba:90:cc:7d:27:ce:d5:8a:81:b3:7a:78:
3b:b0:f9:0e:28:7c:4d:6e:90:61:5d:cd:a1:ea:26:df:a4:0a:
bb:56:34:54:43:c3:84:d6:dd:04:44:95:36:1a:fd:f9:5e:f6:
7b:0d:53:43:92:e3:e2:0d:d6:47:e3:12:01:85:e5:e7:80:c6:
fc:b4:e0:0c:5d:6b:d6:6b:34:01:52:18:4d:d7:8a:4d:19:61:
05:8c:7b:01:12:9a:87:71:b8:0f:02:35:9d:3c:e9:58:cb:43:
84:d7:42:12:3f:56:95:ed:a4:1b:c4:e8:a6:e8:60:5c:04:0f:
cb:10:43:a9:83:31:88:b5:8c:42:13:12:bd:25:46:33:5a:ce:
ba:fd:39:cd:27:d9:d0:d8:93:f2:ed:43:da:4c:84:0d:67:1b:
99:8f:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:46 2025 by rpki-client