Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: ec7wkYL+YnA7b49ckr/2TdOxVDH6UobYF1G+WfefjHE=
Subject key identifier: 75:48:CF:60:AF:5B:F1:BD:E5:01:30:33:CA:09:11:9E:B1:74:AD:18
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 019A51BECA10ED01C824360A0E879D579ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0B78
Signing time: Wed 05 Nov 2025 02:00:49 +0000
Manifest this update: Wed 05 Nov 2025 02:00:49 +0000
Manifest next update: Thu 06 Nov 2025 02:00:49 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: uDyBQ0UCuzzQwvV911lL/w1/bdVPUi/nz28mOsYhHNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:ca:10:ed:01:c8:24:36:0a:0e:87:9d:57:9a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Nov 5 02:00:49 2025 GMT
Not After : Nov 6 02:00:49 2025 GMT
Subject: CN=7548cf60af5bf1bde5013033ca09119eb174ad18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:c4:20:58:14:01:f0:26:0d:81:31:e7:38:
f5:46:6e:16:5f:09:76:36:62:db:f9:b6:81:3d:0e:
7b:7c:c4:0c:f8:2f:2b:79:48:a2:49:c8:39:70:c9:
b3:fd:a0:0f:a5:c5:a7:9e:c5:82:e3:e9:da:fc:4d:
88:49:c1:c2:77:21:7a:f0:2a:af:04:7e:1a:54:d1:
2a:88:e0:62:f7:10:6e:84:b6:0c:25:19:ab:8c:05:
7f:8c:81:71:9e:1b:59:db:74:13:7d:87:70:12:a8:
f2:fc:6e:a6:2c:37:42:95:78:98:cc:f3:75:95:98:
b3:3a:95:b7:67:ba:3a:51:3c:8d:28:ae:58:75:e3:
a3:0d:e8:04:f8:7d:20:9e:57:54:16:81:c3:0f:43:
0b:d3:03:f4:74:64:51:c2:ee:ef:86:f6:72:06:fe:
85:49:68:e1:cd:c7:88:04:bf:51:4f:04:79:9a:8a:
7c:68:f4:c5:2b:85:fe:f1:81:1e:5a:a9:23:73:da:
9d:fa:2f:ca:50:4c:d8:fb:ec:ab:0b:77:a1:b2:32:
cb:f0:b8:97:98:e2:10:6e:81:2d:93:e5:08:38:9f:
b8:4b:7f:a8:20:b7:e8:a1:2c:3f:f0:a9:4f:31:eb:
48:42:40:62:a4:7f:5f:1f:7f:30:74:42:00:f6:df:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:48:CF:60:AF:5B:F1:BD:E5:01:30:33:CA:09:11:9E:B1:74:AD:18
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0f:58:6f:7b:d2:ca:0a:35:bf:4d:4f:38:e3:81:fc:a7:4b:
54:5b:ee:54:34:91:f4:fe:47:d9:23:8d:2d:e2:9b:dc:27:bf:
41:33:c6:8c:3c:9c:81:e6:d9:03:97:43:48:c4:f2:90:4c:25:
ef:66:da:2b:2f:10:8e:e1:bd:00:a9:73:cc:d1:95:47:a9:ca:
4a:c5:cc:3e:7f:a1:95:54:c4:e1:3c:95:3d:8b:c5:35:08:23:
60:ce:4b:2d:1d:f2:78:2e:45:13:c4:03:8c:c7:cd:d7:87:6b:
01:2b:d8:81:b7:49:31:c3:1b:85:9a:ac:d1:7a:22:12:7e:96:
4a:0d:a9:5d:dd:ff:49:95:ef:51:48:1c:5a:db:4f:15:e3:2c:
5c:62:a1:8c:17:80:1b:4a:cd:76:80:aa:9f:69:e2:51:fc:bf:
05:d1:fa:2e:ca:bf:14:a9:26:17:30:d0:56:85:cb:a3:ab:bf:
6d:7b:2d:02:20:dc:47:33:69:4a:3b:c8:46:e3:5a:b7:b7:f4:
56:38:99:5b:3a:0c:77:45:57:84:3f:15:20:bc:2c:7b:6c:f4:
e9:b2:cb:f7:bc:69:97:1e:d0:43:f7:d5:d1:a6:ab:03:f2:b4:
46:d3:c1:4a:58:14:04:e6:72:40:a0:16:af:59:66:54:d8:61:
4a:a7:4f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:27 2025 by rpki-client