Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: svditwIx9pGZ3Z85cS/Dk5mRibEypVq6lI0+I1tzOWI=
Subject key identifier: 2F:04:10:E6:07:4B:38:21:35:F8:83:E3:8F:DA:28:F5:E1:05:FE:8C
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 0199C4FBBADC1C4C507DD61CCAF798F2A96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 05E7
Signing time: Wed 08 Oct 2025 18:00:55 +0000
Manifest this update: Wed 08 Oct 2025 18:00:55 +0000
Manifest next update: Thu 09 Oct 2025 18:00:55 +0000
Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=)
2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: A9Plm6QEoZ0VQ7NXZwie8fVy0VZJM43Hn8ml6BOUyYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:ba:dc:1c:4c:50:7d:d6:1c:ca:f7:98:f2:a9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Oct 8 18:00:55 2025 GMT
Not After : Oct 9 18:00:55 2025 GMT
Subject: CN=2f0410e6074b382135f883e38fda28f5e105fe8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:62:8c:a9:f8:3b:a7:cd:5c:e2:a3:4d:22:
cb:78:57:c1:db:21:01:f6:1c:90:2f:c3:6d:ce:2a:
e3:59:9c:39:03:b5:b1:dc:d2:e2:49:02:b7:bf:a0:
fd:7b:3a:7b:7e:f8:29:c1:fe:aa:1f:85:53:ba:0f:
5f:29:2b:fe:43:f7:0d:78:0d:7d:a6:b4:c8:c0:9d:
fa:4b:01:74:6c:68:e9:65:58:98:d3:b4:9d:95:1f:
e2:55:51:9b:31:fd:c7:46:da:47:a3:dd:92:f0:72:
c7:25:c3:81:41:f9:0f:57:e3:2b:d6:ed:33:49:c5:
dd:fb:ff:20:78:6c:e1:dd:a5:61:20:d2:a4:c9:7c:
1c:2a:10:4d:48:83:07:89:e0:6c:6c:ca:9a:09:85:
19:1b:49:bf:e1:5c:8f:52:bf:ab:19:39:db:c1:2c:
2e:10:78:94:fa:b8:77:eb:60:a1:ab:cd:61:98:65:
09:f5:c1:da:b2:b2:4a:4b:21:e3:0f:46:02:da:90:
cb:d0:0b:1b:e5:08:ea:7d:4d:9a:e0:32:81:d6:ca:
8f:34:7d:b1:c3:05:28:03:fa:0e:9a:e8:0f:5d:3e:
b6:00:f6:93:2e:72:8d:69:09:ef:cf:eb:5f:0b:81:
ca:6b:5a:29:8b:cc:b0:32:fd:ff:f3:c5:f3:4e:92:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:10:E6:07:4B:38:21:35:F8:83:E3:8F:DA:28:F5:E1:05:FE:8C
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:06:d8:58:62:d6:2f:86:ed:1a:21:d3:3b:d3:5f:10:32:00:
39:40:d0:2b:ba:d1:9a:02:cb:f2:4c:cf:5c:da:e4:c7:da:64:
9c:b9:a9:37:43:4d:99:49:b2:76:21:ae:04:47:28:00:3f:19:
92:34:fe:02:95:fe:7e:30:ad:bb:73:87:28:21:0f:ab:c3:5d:
d3:9c:65:50:c7:46:9f:42:8b:0f:55:80:ad:18:3a:41:63:df:
b6:28:f8:6f:87:1c:6f:e0:b5:3d:87:ba:cc:02:54:0a:49:73:
c5:2b:83:8f:c6:10:5d:20:5d:b2:44:02:45:1b:ed:0d:d9:6a:
79:34:78:e4:5c:f4:60:fa:01:e4:f8:ff:2c:a8:29:49:93:50:
fb:5c:7f:5d:9e:f0:45:5e:23:8b:12:e2:9a:99:44:f0:d0:25:
28:23:a9:b7:b2:73:da:98:a5:9e:ec:89:d2:e8:11:b7:48:2d:
9c:48:c6:94:44:00:41:99:8c:4c:1f:2b:f5:cc:0f:8a:41:5f:
8f:af:39:74:2f:d0:f6:4b:50:65:cf:4d:55:f5:6e:56:a2:45:
3f:5b:f9:66:0b:60:c0:5b:61:81:72:dc:3a:eb:11:11:ec:1e:
db:11:31:ff:07:67:b0:61:9a:ef:79:6f:65:5a:6c:da:0d:f4:
b0:ae:b5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:36:32 2025 by rpki-client