Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
File: yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft (raw, json)
Hash identifier: o4ErMPprVUJ8dSXcVpSgde3qWxYaykRElEIcAFxPAD0=
Subject key identifier: 42:A2:81:7B:4E:97:AE:2B:5F:88:2A:78:B9:F5:EA:39:73:F9:79:E1
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial: 019A4F621F2C41C13942E7A813A4BB92EDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
Manifest number: 168D
Signing time: Tue 04 Nov 2025 15:00:21 +0000
Manifest this update: Tue 04 Nov 2025 15:00:21 +0000
Manifest next update: Wed 05 Nov 2025 15:00:21 +0000
Files and hashes: 1: 1-uz2QLGD_Zd1L5FYfBI3cC6XHM8.roa (hash: t1w40I15hLlr7dv8d0uJE/Dz2j4qqNVpP8R3SOXwVvk=)
2: yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl (hash: 9AremU0J4yoFOmfeQOMwnj6l4Gqe+iDcsstjUkj6Vbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:1f:2c:41:c1:39:42:e7:a8:13:a4:bb:92:ed:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Validity
Not Before: Nov 4 15:00:21 2025 GMT
Not After : Nov 5 15:00:21 2025 GMT
Subject: CN=42a2817b4e97ae2b5f882a78b9f5ea3973f979e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:d0:d8:19:31:90:48:31:3c:6d:57:e2:5f:
f4:e1:fa:9a:eb:80:3f:17:cd:64:3a:b4:27:52:a7:
fd:49:2c:54:b3:b7:06:49:46:ed:00:ab:93:93:4c:
7e:78:77:b8:ae:4f:33:11:81:12:c6:6c:2b:03:ce:
1f:c6:58:1c:a1:a1:57:c6:2d:6e:ad:86:79:5f:0d:
0f:25:73:72:b7:d4:dd:4c:ba:30:fc:77:59:5c:05:
a8:30:ba:25:65:79:94:ba:89:5b:6f:a7:be:2f:b1:
b8:fa:1d:31:18:b6:da:37:bf:ed:6c:19:20:1e:39:
d7:b2:af:c6:ca:b3:eb:36:c8:ae:22:4e:11:ff:fb:
28:08:47:ad:d9:21:05:8f:18:77:98:de:a6:ff:37:
85:ad:40:f0:f2:08:c9:04:fc:a7:bb:80:ab:74:80:
c4:6f:ab:74:29:cb:f3:d8:20:ae:e3:a5:f3:01:d0:
ab:c6:6a:f6:72:3a:bc:ab:08:c1:e4:cf:1c:87:d0:
a5:1b:50:5f:34:26:11:6f:32:20:29:aa:5a:0e:01:
bd:ad:3d:c1:e2:79:08:de:b2:34:29:2b:09:8b:4d:
69:85:2c:9b:9b:bf:ab:f8:65:a8:fc:d0:e1:26:27:
de:bd:31:6c:92:e1:45:44:8e:25:29:43:5b:c7:6b:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A2:81:7B:4E:97:AE:2B:5F:88:2A:78:B9:F5:EA:39:73:F9:79:E1
X509v3 Authority Key Identifier:
keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:da:76:98:6b:46:56:ed:fb:da:5b:8f:2a:01:60:af:4e:d7:
65:d3:12:8b:b0:03:9e:cb:8b:89:44:ab:e7:d6:b6:07:3a:12:
c7:cf:19:9a:95:aa:c7:57:a3:6b:08:9a:e6:be:e9:53:fe:fd:
bb:9a:b2:20:08:be:a6:9d:c6:fa:50:6c:a0:15:4d:c9:ba:c9:
a1:6a:1e:31:88:a8:45:d3:7d:15:30:c6:a7:e2:95:2b:c5:38:
67:e3:02:93:90:87:ce:64:b8:9e:df:49:65:e2:4a:d4:d0:dd:
f2:93:2a:8b:a3:e8:50:7e:e2:e6:98:15:08:2d:f6:e2:9a:20:
24:ac:97:63:e8:6c:1e:b0:ea:a3:56:85:42:0c:61:df:b4:b6:
c3:22:15:34:0d:cc:41:83:27:b9:1c:e1:bf:3a:5b:6e:fb:ad:
40:1a:30:98:e7:9c:9d:32:7b:a1:60:91:ba:43:c1:35:ad:11:
b4:8a:33:a2:0c:68:82:f2:c9:80:11:2e:a8:6f:14:ff:fd:81:
a4:b8:6c:52:f4:a5:98:d3:c6:be:e5:47:26:b8:7c:09:2c:e8:
d9:87:05:9e:c5:cb:f3:85:ab:31:f3:41:cd:b1:ee:83:1a:7f:
cf:64:df:ed:46:aa:85:10:a8:85:67:22:f7:4d:80:98:45:8d:
fd:e6:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:07 2025 by rpki-client