Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: 5GiRBAceA18Uy0bQQdZOqSncflfO1fKqplA2TnMWkKQ=
Subject key identifier: 92:3A:56:21:64:61:42:0F:2C:0C:F7:68:4A:64:40:8D:6F:F4:10:2D
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019A4C981E84C86748F82F18376BF33C24AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 02:00:28 +0000
Manifest this update: Tue 04 Nov 2025 02:00:28 +0000
Manifest next update: Wed 05 Nov 2025 02:00:28 +0000
Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
2: jECFVXifI2PML21GlnCLdBYUig0.roa (hash: 88xVe4+njhjbTw9qYTdy0ykyXz6/PEaM+aox252NmaU=)
3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: vOgafKNxytIZNV3731Wu7KcwoDBjt51Iqm5lc8RM3Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:1e:84:c8:67:48:f8:2f:18:37:6b:f3:3c:24:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Nov 4 02:00:28 2025 GMT
Not After : Nov 5 02:00:28 2025 GMT
Subject: CN=923a56216461420f2c0cf7684a64408d6ff4102d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:a0:a1:f9:59:09:76:0e:e9:d1:72:fb:a9:
d2:5a:97:2f:09:29:d7:2a:22:96:98:2f:12:15:df:
50:bc:bb:0c:e7:b2:e0:37:2f:90:09:ab:1e:c6:7f:
d8:d1:45:0b:e0:3a:73:17:0e:5c:8a:dd:0d:e7:ca:
3a:29:cd:5b:b6:7f:b8:88:87:3b:c7:c6:7f:6c:e8:
72:3b:04:2b:c4:86:90:b2:f3:59:71:5f:f3:25:3d:
f3:5b:9e:aa:1d:6f:92:42:b9:a5:3e:7d:67:4e:c4:
93:15:e3:b6:2c:4d:91:24:f7:62:0c:af:db:60:fb:
74:47:df:f2:06:bf:0f:f8:19:a8:a1:7c:e0:08:cf:
68:0b:90:1f:98:17:99:8b:38:e6:93:d8:23:12:a8:
f8:22:da:e4:e6:6e:79:85:00:7f:a6:70:d5:61:d4:
76:ca:4e:40:b7:3f:2f:93:71:d0:41:dc:22:49:cf:
29:6b:bc:9b:11:c2:8a:5f:2a:d4:3a:86:e0:ba:81:
02:e5:da:65:25:a5:96:2a:ea:c4:f2:9a:01:29:59:
fd:17:e1:f9:a5:ae:db:60:ee:9b:8d:29:8d:51:7f:
51:45:c1:be:88:c7:98:8c:d8:79:70:9b:73:f4:6d:
40:e0:55:34:4f:e6:cc:a6:af:c3:52:82:e8:b5:53:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3A:56:21:64:61:42:0F:2C:0C:F7:68:4A:64:40:8D:6F:F4:10:2D
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2e:38:ba:d0:63:e9:34:60:d4:7a:39:a6:f5:2f:40:89:93:
2c:f6:1d:28:a6:62:8a:1d:cd:eb:d5:56:7c:fb:b2:d8:00:f2:
70:4b:ea:fc:5a:8d:ba:11:3d:01:d7:bd:25:23:a7:6a:fb:0d:
d2:59:42:2f:01:5b:c4:45:ad:5e:7a:fd:c9:a5:04:67:e2:74:
00:33:42:89:cc:77:c8:b9:f3:0c:b5:c4:90:e2:91:fb:6a:cd:
ff:ca:73:89:e9:c5:e9:64:6f:0c:61:6d:76:6f:ca:5a:f9:7f:
a1:0d:5f:06:5d:ba:74:49:3f:20:99:79:e6:1d:03:61:c5:80:
15:14:20:97:ed:4d:32:8c:44:1f:83:70:71:c3:a3:28:17:50:
ec:91:e6:1c:f9:ef:ec:0f:a7:60:0d:ca:c2:5a:19:8d:3d:0a:
f2:50:b2:9a:de:ff:ea:15:5b:08:40:56:c0:a8:3a:e9:68:e4:
c3:74:97:6e:4f:bc:c3:48:a9:d4:d3:c0:d1:ca:c8:33:04:9b:
75:dd:51:c1:97:d5:23:26:40:17:81:36:6d:3b:dd:82:72:ef:
3f:d6:5b:27:03:33:53:f8:ea:8d:3e:cd:dc:23:cb:87:5a:fb:
e7:d1:8d:ab:22:ab:8b:e7:a9:ec:07:6f:2b:4e:a3:51:f8:47:
28:04:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:01:57 2025 by rpki-client