Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: 4gaiN8DwwmcX+GagXEJCl8cwPLhjzM6IeINHZzcllXA=
Subject key identifier: 77:69:15:AB:4D:FE:59:01:9A:9B:CC:37:00:42:3F:9F:F2:8F:59:07
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 019A4EF4E3B189EF183CA803EC278BCA7E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 12E4
Signing time: Tue 04 Nov 2025 13:01:03 +0000
Manifest this update: Tue 04 Nov 2025 13:01:03 +0000
Manifest next update: Wed 05 Nov 2025 13:01:03 +0000
Files and hashes: 1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=)
2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: m6L7F+qb5Bp6EMx4eReHohHnAWSqQexW4Ggf2XDMpnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e3:b1:89:ef:18:3c:a8:03:ec:27:8b:ca:7e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Nov 4 13:01:03 2025 GMT
Not After : Nov 5 13:01:03 2025 GMT
Subject: CN=776915ab4dfe59019a9bcc3700423f9ff28f5907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:53:66:44:68:2f:7b:a3:04:eb:aa:d1:49:
9a:aa:a1:ae:b4:31:cd:be:45:ac:63:d8:ff:55:3c:
25:a9:fe:86:16:a9:ec:d4:32:5b:36:54:93:49:ed:
2b:d6:5b:85:10:49:36:59:04:35:cc:92:b4:fd:40:
48:48:3b:1d:b7:ab:34:5b:41:f4:5f:bc:1b:91:de:
8c:35:fd:74:62:29:08:6b:df:db:94:e0:e5:14:b6:
44:10:88:93:11:6e:3d:b8:1f:14:bf:5e:50:ce:d5:
92:8a:d8:a7:57:f6:94:bc:e5:f3:20:f4:95:5b:6c:
68:fc:07:7a:20:48:b8:fb:14:29:cb:d8:5d:7a:c5:
70:e2:b5:60:77:ac:c9:29:af:5f:ac:94:56:98:ca:
16:31:f1:46:2e:57:64:d8:9f:e6:a0:5e:1f:09:85:
38:22:b2:18:ad:c0:2a:1d:b6:a5:67:c4:43:f8:24:
ee:fc:75:e8:ca:bd:e8:5c:0c:ad:76:08:5e:43:62:
28:5f:ca:a7:46:dd:0c:fd:29:7e:49:32:1f:6e:42:
ab:e7:97:4b:f7:d5:2d:a7:7b:13:2e:14:d7:6e:0d:
cc:93:48:c3:6a:12:45:0b:24:40:f2:e0:02:65:cf:
5d:24:92:46:15:85:e1:5f:08:2f:1f:fe:a0:5d:a5:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:69:15:AB:4D:FE:59:01:9A:9B:CC:37:00:42:3F:9F:F2:8F:59:07
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3d:8e:58:b0:97:9f:b2:32:e5:48:77:7f:29:bf:07:3f:50:
f3:34:c7:d9:af:2e:1d:b1:37:86:8d:8e:18:ec:32:d7:2e:74:
38:1e:26:70:dd:0f:ac:2f:c2:d4:26:51:10:38:76:79:6a:44:
5e:76:a6:9c:af:09:7c:20:3b:0c:10:13:8c:07:b5:ed:8f:b5:
ec:4e:ab:43:be:c2:25:9f:a0:b9:42:e7:b5:a4:8d:c7:87:bb:
37:d7:e0:df:fa:dd:ad:dc:55:ca:61:36:d7:b3:4a:8d:68:e1:
35:03:a5:65:05:99:96:8e:55:29:a4:93:62:cd:78:0f:20:2c:
de:f0:c0:3d:75:6b:a5:f1:ee:dc:ee:5f:1c:5b:17:d7:c9:ac:
45:15:8d:43:ea:78:04:9b:9e:fa:fa:90:4a:d9:8e:c1:80:c2:
90:bb:02:23:63:0a:ce:25:cf:fa:8e:70:f0:bf:3b:14:03:d3:
25:6d:1f:cb:bb:6b:0e:85:e5:34:f3:46:82:fa:6d:1b:77:f8:
81:27:c0:05:23:b4:be:d8:9e:79:5b:8a:1a:3c:4c:b6:b5:d5:
cc:d9:09:53:a4:21:d8:30:07:a2:f7:46:74:d2:0f:fa:1e:94:
fb:a2:79:3a:51:3b:82:bd:3e:e7:7d:87:a7:7b:53:8f:73:37:
b7:34:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:42 2025 by rpki-client