Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: rrLtn+lCSwO2EqfdkdP9oJOhQ9VDg9Q3AfKlmCUtOds=
Subject key identifier: 1C:5B:29:81:56:92:8F:7B:D7:AD:9A:4E:73:0B:A8:DD:8B:FE:4F:27
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019A4C9827834242DCE50FA1F9B2C716D81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 02:00:31 +0000
Manifest this update: Tue 04 Nov 2025 02:00:31 +0000
Manifest next update: Wed 05 Nov 2025 02:00:31 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: JfO7nMu/iIgtWYvQ02cxQK48k9PnilsTDJbGmsz3skE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:27:83:42:42:dc:e5:0f:a1:f9:b2:c7:16:d8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Nov 5 02:00:31 2025 GMT
Subject: CN=1c5b298156928f7bd7ad9a4e730ba8dd8bfe4f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:72:ce:08:8d:87:db:b7:3a:ab:d3:f9:3b:
fc:78:98:89:90:a7:d0:4c:9b:27:1f:dd:fd:8f:97:
ed:a5:9e:aa:9e:b8:77:fe:4d:7e:ff:1d:27:93:45:
dc:ee:bb:5a:f8:2d:a7:9c:dd:c1:aa:af:2d:90:64:
6f:63:d0:23:b7:fd:5a:de:8d:fb:cb:46:08:e7:b0:
b0:3f:39:92:dc:1f:3d:f6:80:15:2a:b7:3f:a6:b6:
81:46:4f:fb:4c:26:74:eb:a9:f3:55:1a:9d:a4:01:
d9:a4:0f:cf:80:2c:c1:63:5e:d0:01:f1:7d:29:fd:
cb:f4:bf:90:40:83:38:4e:71:6f:17:24:e2:01:66:
e7:f0:89:14:58:13:d5:08:20:63:f2:7f:af:65:94:
5e:04:88:e7:22:09:00:88:de:07:f4:51:84:72:7a:
f5:cb:db:dc:fd:49:1f:d6:e0:c7:86:88:15:dc:36:
91:22:f3:a3:9e:22:75:b4:f3:8a:55:5d:2f:e7:ba:
6e:a0:0e:98:fd:73:4a:5e:0c:07:9c:ef:43:23:e6:
cc:9e:e0:c2:d6:1c:b7:5c:ff:35:bc:22:93:d8:e6:
bd:55:bf:e0:8a:8a:a6:35:5f:3d:e8:a8:bd:7d:2f:
ad:bf:31:60:fb:94:c2:7b:d3:7e:40:3f:d4:27:43:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:29:81:56:92:8F:7B:D7:AD:9A:4E:73:0B:A8:DD:8B:FE:4F:27
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ea:c5:d6:7a:b9:6d:6d:bb:6e:23:4a:98:34:28:73:3c:07:
24:5d:76:5a:71:67:41:db:72:74:5f:09:11:6e:be:2d:9b:f9:
9d:8a:9a:8d:bd:a2:47:db:96:1e:8f:5f:cc:7f:e7:41:7a:f2:
db:6a:95:73:8f:e3:26:26:af:29:09:bb:b4:99:61:1e:04:e6:
a6:22:a6:73:fa:46:a2:b2:74:66:d6:90:de:05:48:96:84:13:
b1:fc:f6:4e:bc:1c:c4:7f:fb:db:77:4f:21:09:eb:36:52:a6:
4a:bd:f9:3a:23:6b:32:4f:69:50:4d:41:9e:0a:04:95:f5:3a:
f6:f1:20:cc:a5:42:ba:26:a9:f4:5b:04:f2:23:04:80:ca:33:
d2:41:37:17:45:35:b1:ec:13:d7:f2:8e:e4:5f:77:1c:88:4b:
c1:99:0c:3e:71:10:b5:e6:f5:aa:d9:50:c7:ad:af:9a:5c:c3:
ca:22:79:a1:5a:23:f1:5d:3e:6c:be:51:2e:df:04:2c:87:a2:
94:66:cf:50:3a:6f:ed:a4:23:58:3a:36:72:ab:b6:41:9f:b7:
ad:c3:9f:f5:a4:b0:2d:ed:b9:56:ca:d8:2a:d5:aa:1c:d8:e1:
aa:78:7d:ad:41:28:4d:9a:09:55:03:af:ca:9d:69:a0:3c:60:
e9:36:fb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:17:51 2025 by rpki-client