Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: XgpBDCdhIw5LX1J3VIiNMST/jUmbP9av+JTtf7OT+gw=
Subject key identifier: E7:2D:EE:67:C5:4C:1F:A8:36:B9:6C:92:70:41:4C:44:9D:87:E9:86
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 019A4EF4F67350B1219FFC857C9EA2DA87E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:07 +0000
Manifest this update: Tue 04 Nov 2025 13:01:07 +0000
Manifest next update: Wed 05 Nov 2025 13:01:07 +0000
Files and hashes: 1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: LpGLDigluGuidb94LYL2oUZpEqkm1DzGcoEaW8UROB0=)
2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f6:73:50:b1:21:9f:fc:85:7c:9e:a2:da:87:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Nov 4 13:01:07 2025 GMT
Not After : Nov 5 13:01:07 2025 GMT
Subject: CN=e72dee67c54c1fa836b96c9270414c449d87e986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:53:21:d8:9f:d3:e4:43:3f:27:a9:76:18:
10:5e:77:49:87:63:15:ac:e0:72:93:7a:e4:c3:b1:
76:8e:31:cd:8e:ff:d9:70:49:fc:1e:a2:95:3f:40:
19:e2:f9:a6:7b:cb:3b:c7:01:da:3a:bd:71:3e:0f:
27:83:4a:ab:8c:05:a8:10:f6:2e:e7:74:21:61:cc:
b3:cc:2d:6d:dd:8d:16:95:a5:f7:68:75:b8:ab:d6:
f4:0a:cd:4e:9d:7f:57:9b:39:78:cc:b1:70:f4:7e:
ee:e5:c8:c4:3a:a8:1f:31:46:a1:b8:a3:0b:15:fe:
8e:66:c6:56:6e:76:bd:5c:13:c1:ca:3f:25:64:2c:
27:8e:fb:49:89:66:71:7f:7b:95:ab:4e:86:72:cc:
f8:7b:da:b5:de:d8:1f:d3:ce:93:6d:cf:c7:16:c2:
0e:17:35:b7:27:ce:01:f3:79:68:f0:84:17:d7:1d:
e3:a3:ba:58:97:e6:24:af:be:c2:4f:e1:ba:6e:2a:
97:e7:22:be:75:65:66:e3:ea:95:c2:4b:9d:2a:1f:
d4:6b:22:67:6b:9d:64:b4:7e:3a:02:c4:ce:07:fb:
26:a6:62:ff:da:e2:18:f6:c2:0c:02:34:0e:87:10:
d6:79:bb:96:04:d7:4b:16:9c:86:52:ff:67:68:95:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2D:EE:67:C5:4C:1F:A8:36:B9:6C:92:70:41:4C:44:9D:87:E9:86
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:19:52:ea:69:84:1e:29:b3:e1:a8:32:0d:a7:ec:5d:bb:39:
7b:15:85:9a:91:6e:5a:01:6b:44:51:0b:6f:c3:b1:4b:c7:0a:
a2:44:9c:1b:b4:03:c1:28:92:36:77:1b:ba:e2:4e:93:fc:ee:
1b:f9:f7:43:08:85:c5:ec:28:4a:29:67:a4:84:a0:bb:d9:f6:
84:35:83:3a:dd:5b:e4:8b:f0:5f:2e:2e:66:3c:59:42:98:62:
fe:26:82:f3:5a:b7:8b:78:9b:d1:53:c7:e2:87:d5:69:6e:5e:
39:ed:d7:d0:cb:09:c7:04:72:09:e0:dc:76:b1:4c:95:12:28:
99:72:5f:5c:15:6d:ee:96:c2:93:e8:cd:a7:5a:73:e3:e0:a1:
6f:b2:b1:49:dd:65:a7:fc:05:b8:26:35:a3:94:c7:11:fa:5d:
f9:02:12:50:7c:83:78:e7:83:68:60:ad:ef:27:9d:dc:ac:0a:
b3:ac:fc:72:33:ce:92:d5:0b:9f:b0:6d:5f:ea:be:5d:7d:6a:
d9:dd:ef:56:b2:38:46:ef:47:33:c1:b2:31:4e:c0:14:05:32:
8c:52:2d:1a:7c:40:80:8d:86:26:5f:7f:59:b3:6f:79:36:b6:
b9:8f:3a:ea:26:23:b8:15:c2:b8:16:c7:e5:3f:4c:36:29:01:
3f:8f:9d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:13 2025 by rpki-client