Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: m1c94KAQSRj0mSY30Eq6KAFKKug5TOpxnmjTtNFuaw0=
Subject key identifier: C4:67:C1:71:CB:EE:A9:5A:69:22:24:67:2B:5C:EC:C4:31:0C:D6:78
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 019A4D3CE2339A431DDC386AB2B960D7A39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0E45
Signing time: Tue 04 Nov 2025 05:00:26 +0000
Manifest this update: Tue 04 Nov 2025 05:00:26 +0000
Manifest next update: Wed 05 Nov 2025 05:00:26 +0000
Files and hashes: 1: y7pqrIfOM4grpXfLN2-wf1fCTBM.roa (hash: v2U5GSWu/G3ebOQx0tbHDGLoLjB8X7C4XKiRyj7FSr0=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: C/Lk6wAKGjLwM9UnfJmp2q3EaQBT9E0OywBJRH36a7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e2:33:9a:43:1d:dc:38:6a:b2:b9:60:d7:a3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Nov 4 05:00:26 2025 GMT
Not After : Nov 5 05:00:26 2025 GMT
Subject: CN=c467c171cbeea95a692224672b5cecc4310cd678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:7d:cf:c8:88:cf:56:c1:d9:f5:d3:e2:e0:
3c:0d:a7:c9:f5:02:d4:f3:20:81:a3:6f:7b:70:e0:
08:84:03:89:b8:c5:9a:e2:f9:fe:c0:a3:dd:ea:ff:
83:91:88:e2:9d:6c:24:c0:e7:54:df:64:2b:8e:e1:
57:b4:10:3d:ab:c4:6f:ae:16:ee:9e:8e:ba:21:60:
80:0a:80:cd:6c:26:52:6e:90:28:39:db:c0:e4:5b:
4e:18:f1:20:b8:2c:00:24:f3:77:69:6b:75:d2:3a:
9d:7b:f0:bc:68:cf:29:f7:17:ef:a1:12:7b:cd:f7:
48:f3:1d:f1:55:88:89:9f:b1:ac:c5:88:71:8c:b8:
96:f0:92:f8:14:dd:b4:fb:38:f0:a5:8e:2c:bb:1f:
5b:dc:e6:69:62:0b:ab:09:3b:cf:d9:db:24:b3:5b:
c0:ec:46:d9:9e:67:77:98:8c:76:56:42:96:6b:80:
13:53:29:b2:fb:24:d1:a6:c3:d1:d1:06:c0:18:d8:
b4:fe:13:1d:aa:fe:60:df:9c:8f:c0:10:b1:93:d2:
d7:ab:1b:20:73:84:e8:de:ca:f0:1f:1c:32:0b:e1:
01:ca:30:82:c4:ad:cb:66:22:16:ad:1a:45:ca:1d:
5d:16:70:1a:c9:9e:7d:fa:98:79:73:e1:fc:4f:b2:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:67:C1:71:CB:EE:A9:5A:69:22:24:67:2B:5C:EC:C4:31:0C:D6:78
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9f:00:16:d4:4c:3f:ab:77:70:c1:c1:5e:b8:cb:9f:da:3c:
8e:97:aa:67:20:70:89:03:75:90:54:5f:3b:bd:70:b0:ba:89:
53:df:5b:04:a7:33:db:9c:47:c9:3d:c3:c6:6f:12:0a:51:65:
be:2f:84:c3:57:09:13:01:d3:12:27:80:10:9d:d6:28:ff:f1:
5b:98:9d:e5:88:0a:42:68:e3:02:42:2c:97:a2:50:75:4f:e8:
c6:a5:8f:45:8c:9e:28:f8:22:e5:63:ba:b5:fe:02:22:ed:60:
df:37:f8:a5:64:00:20:02:1f:a0:b0:13:bf:1d:9c:3a:77:ef:
aa:83:d6:b9:ab:54:99:4f:b8:19:03:91:1b:38:1a:29:94:77:
37:73:ad:eb:c6:de:69:50:c6:9f:16:b2:7f:54:e5:fb:89:6f:
59:6c:8c:0e:fc:66:69:3d:7c:15:ef:df:0b:29:76:0b:93:1d:
da:d8:e2:f3:26:c0:20:45:0f:02:a5:5c:2c:53:99:cb:55:40:
f4:85:5a:4d:da:20:37:93:da:16:ac:8f:d6:3e:15:57:84:f2:
fe:28:b4:f9:11:28:89:b4:42:af:4a:aa:44:07:17:b5:fc:2f:
a8:9e:1c:3d:e7:78:44:95:54:5e:46:97:fc:22:e9:32:3d:a2:
5c:6e:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:48 2025 by rpki-client