Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier: GwSPfoC9SiS6TSsxp4PrffNlH/fl5nXjpKnak9mh9ks=
Subject key identifier: CA:D3:06:B0:05:8B:28:94:6E:1E:C7:1E:2F:51:15:AA:14:B5:03:F7
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial: 019A4E187A14C4DCBAAA3A4B5830E3371389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number: 0560
Signing time: Tue 04 Nov 2025 09:00:18 +0000
Manifest this update: Tue 04 Nov 2025 09:00:18 +0000
Manifest next update: Wed 05 Nov 2025 09:00:18 +0000
Files and hashes: 1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=)
2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: G8WZsnsu34HNdJku5MnY9R5N5wYVsHJYTkQQKS1hJ2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7a:14:c4:dc:ba:aa:3a:4b:58:30:e3:37:13:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Validity
Not Before: Nov 4 09:00:18 2025 GMT
Not After : Nov 5 09:00:18 2025 GMT
Subject: CN=cad306b0058b28946e1ec71e2f5115aa14b503f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:72:96:58:c9:3c:8a:b8:aa:71:16:ff:f2:
c4:d6:76:17:67:f8:8e:71:e8:61:25:58:62:65:18:
1b:e9:a1:b4:04:74:d9:60:d2:40:17:ef:62:03:85:
48:e2:23:e3:99:34:b7:ff:aa:12:f9:12:50:c4:c5:
a3:56:a4:c9:56:be:95:24:26:f3:3b:6a:f3:50:4e:
f6:e2:fd:fa:7f:b2:3b:bc:ea:e6:15:d4:c5:d0:ea:
83:e1:54:7e:cf:ba:b3:48:c6:46:57:a3:e1:e6:bb:
44:5c:07:f2:a6:32:c3:38:a6:ab:2a:a0:a8:9a:93:
ab:e7:78:10:af:65:fd:33:0b:78:44:d9:e5:7e:3f:
f7:3e:54:5b:8c:5f:7a:d8:ce:8d:85:23:01:f0:37:
4f:f4:f5:1e:8f:fc:6a:85:5e:ff:ea:e0:d7:1b:ab:
af:fe:1f:30:75:55:cc:8a:8f:cc:ba:15:8b:04:84:
9f:cf:96:0b:54:c7:42:d8:34:66:6a:2e:bb:8d:33:
aa:d0:d6:f5:31:56:db:08:2e:25:d9:de:ed:0d:2f:
03:37:8e:96:c5:51:d8:8b:c0:83:28:ed:97:b8:77:
72:60:b5:32:e4:74:e8:1f:fd:5a:e3:e6:3c:ab:d7:
49:d6:a1:50:e9:9a:e8:3e:76:ae:97:f3:67:e2:7d:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D3:06:B0:05:8B:28:94:6E:1E:C7:1E:2F:51:15:AA:14:B5:03:F7
X509v3 Authority Key Identifier:
keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d5:c1:9a:42:08:6f:4e:6c:9e:00:88:02:52:10:27:b8:c6:
48:1c:2e:43:5d:31:97:e5:b9:b7:90:99:fc:7a:26:cb:a4:2c:
1a:60:9a:7e:67:2d:c3:7b:a1:61:17:4d:91:1c:4c:99:c2:48:
d9:11:83:ec:ff:4e:0d:ba:73:84:fa:3f:09:b4:6f:e3:59:b8:
01:31:d4:e1:18:bf:9b:83:dc:a9:b4:0e:a5:ff:2b:a8:23:f6:
e6:a5:c3:b3:95:48:f5:d8:66:70:a7:a4:96:82:14:27:7d:a7:
40:47:55:b1:e7:4d:23:fd:1c:63:b1:62:4d:03:eb:4b:f1:43:
9f:14:19:35:7a:48:a5:99:6f:27:02:2b:a1:92:47:5d:94:41:
3d:f6:8c:3c:53:21:57:7e:37:cd:f0:ef:fb:85:70:14:55:3b:
1a:98:6b:f7:5d:5c:ae:0d:a0:99:6f:d6:94:d5:b5:5f:54:5b:
13:56:fb:59:33:d8:62:e5:0f:48:4b:5c:bc:eb:c5:25:a0:85:
5f:ab:29:b1:84:fc:39:87:f0:b4:e1:09:34:2e:43:99:d9:30:
e8:8d:dc:db:b0:e3:d8:c5:6b:10:9b:bb:4f:39:9c:07:4e:85:
cc:ff:79:99:45:8d:5f:97:3c:98:48:fb:10:30:4d:27:7a:95:
90:cd:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:28:02 2025 by rpki-client