Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: OJoinVfR0UQ7vyN5hxjfvqAEUnKVHFGFsLGLUZfAsoY=
Subject key identifier: 95:17:6B:2C:41:36:0B:EA:82:C1:DB:42:17:77:90:B0:DA:C3:84:DC
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019A51F5CBB917121568678D7E02EA543732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 13F6
Signing time: Wed 05 Nov 2025 03:00:54 +0000
Manifest this update: Wed 05 Nov 2025 03:00:54 +0000
Manifest next update: Thu 06 Nov 2025 03:00:54 +0000
Files and hashes: 1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: aUk7mWDyBIGMOS2C42Yrxuz3kL/1zQ/4++wZZbb6tdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:cb:b9:17:12:15:68:67:8d:7e:02:ea:54:37:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Nov 5 03:00:54 2025 GMT
Not After : Nov 6 03:00:54 2025 GMT
Subject: CN=95176b2c41360bea82c1db42177790b0dac384dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:97:aa:5f:97:fe:a0:98:a2:f7:d9:ee:82:
a7:78:4d:44:9b:a9:51:b5:ce:2c:e1:d0:92:5d:f6:
7f:a2:d5:ba:84:f7:23:9a:a9:3b:f5:ca:ac:25:01:
f8:e1:8a:67:3f:34:74:2e:49:70:49:a9:fa:c1:d8:
cc:83:e5:65:82:1d:91:10:ec:16:6d:77:e0:05:00:
d6:37:99:aa:de:ca:4b:da:e6:82:0f:6f:ab:39:95:
a9:0e:16:5d:15:1e:6d:8b:df:b1:df:b1:be:f3:bb:
d6:5c:9f:5f:e3:df:a9:7a:2b:1b:d3:84:5c:46:83:
b1:04:cb:31:24:81:de:b4:d9:7d:b9:5a:0b:f7:dc:
7d:01:ab:cd:d9:1f:3e:7b:f0:29:a2:6b:84:6e:61:
71:9c:ae:cd:32:da:75:17:7f:ff:51:d9:12:dc:23:
90:37:69:81:95:32:29:0e:5d:cf:cc:98:ee:c9:ea:
d1:e7:43:b7:db:0d:c4:d9:55:e2:54:95:0f:3d:08:
f3:57:d4:09:53:38:cb:a1:08:72:be:ce:1d:e2:0e:
7b:7b:3c:be:9d:34:e6:cc:0a:27:f8:30:bf:c9:e9:
c7:b0:ac:68:79:73:b5:a5:b7:3f:b6:d7:2a:b7:7a:
7e:9d:d4:83:8e:99:51:00:30:22:89:1e:5d:bd:23:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:17:6B:2C:41:36:0B:EA:82:C1:DB:42:17:77:90:B0:DA:C3:84:DC
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a5:ec:3e:d8:7e:0e:f2:ed:f6:04:55:a6:a6:f7:67:2e:59:
2c:da:86:0c:63:b4:35:23:cd:ee:1a:30:d1:71:c8:15:22:2f:
6e:d6:64:96:23:da:48:88:cb:e9:6c:c2:d1:84:e2:e6:4b:60:
1e:bd:f9:16:6f:96:8c:2d:2c:07:6d:2d:5c:be:15:01:3d:d7:
0a:15:33:aa:0e:3b:3f:6e:bc:4b:5e:b5:5d:d3:d3:ab:e1:70:
02:1e:9d:3e:93:40:82:66:a1:47:bf:3e:cd:0e:d3:3f:7e:6f:
64:94:47:a4:49:8b:16:ee:bb:0e:14:76:4f:4e:e0:87:fa:2d:
a3:0d:cc:7b:a2:07:3f:4a:ac:f5:0d:a8:d5:2c:52:79:df:83:
3f:95:d3:36:9e:33:4b:77:73:d3:76:08:03:2c:53:52:02:3a:
e2:bf:14:fb:31:c2:e2:4a:34:72:a7:d7:f1:23:f7:2b:09:08:
a7:3f:2b:ac:ca:68:69:f6:a1:ab:bd:20:45:6f:11:34:a6:a5:
67:e5:7d:b4:43:49:d3:8d:ad:e4:c0:d3:00:f3:d1:47:d2:f8:
cd:c0:7a:23:0e:82:c0:f1:86:79:3b:57:3a:f2:15:e9:2f:e0:
b0:c7:49:5c:a8:68:b6:89:9e:4f:06:83:88:79:93:ac:d5:fc:
a1:21:15:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:02 2025 by rpki-client