Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: o7nazStU0wxpcsr+u7uhqESJYlJ7L88Rm1R6eUZI0A4=
Subject key identifier: 24:2A:36:9B:23:5E:83:D5:22:3B:FE:62:E5:39:20:36:45:7C:43:F9
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019A4B1750F4CB681109CFC6856FA43F6A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 170C
Signing time: Mon 03 Nov 2025 19:00:10 +0000
Manifest this update: Mon 03 Nov 2025 19:00:10 +0000
Manifest next update: Tue 04 Nov 2025 19:00:10 +0000
Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=)
2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=)
3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: phcrEePDTqV0DokKNSJb/Uqf7fR0x8jJ4jM9sDTz06Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:17:50:f4:cb:68:11:09:cf:c6:85:6f:a4:3f:6a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Nov 3 19:00:10 2025 GMT
Not After : Nov 4 19:00:10 2025 GMT
Subject: CN=242a369b235e83d5223bfe62e5392036457c43f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:ad:d8:63:52:13:44:34:4e:78:cc:50:2d:
45:a3:5e:53:73:a2:2f:1c:00:d4:50:b5:05:2f:d9:
22:05:f5:f1:e7:86:2e:0c:d7:de:ec:77:85:ae:8a:
4e:15:2a:1c:87:8b:55:13:47:eb:6d:27:6c:ba:d7:
cc:3c:36:b1:12:a7:63:78:d6:ab:12:8b:32:22:1c:
8f:4f:98:b2:8c:30:1d:5c:0c:45:4a:4d:14:4e:77:
b6:e2:5c:10:75:7f:53:18:5d:cc:07:64:39:40:26:
36:99:9c:ff:17:72:8b:41:dd:27:9e:ad:40:2a:5d:
23:3b:e6:68:bb:49:db:96:7b:ef:4d:8f:22:4b:98:
ce:38:2f:18:06:63:41:a7:f5:19:ee:f7:bc:63:4f:
6c:ae:b3:04:8b:86:86:20:5b:34:b7:81:e0:cb:22:
a7:d1:f2:82:75:03:cf:a6:0b:fb:c2:3d:9f:b8:43:
0a:8b:c5:7d:9e:08:e3:65:7e:9a:a3:81:23:2c:b7:
98:e7:99:a6:e4:70:e1:dc:b4:a5:c7:4e:28:b6:59:
e6:6d:b0:b5:1e:d6:6b:39:cd:e6:34:3b:9a:67:0f:
74:85:fc:9a:62:5b:25:72:10:8a:89:02:ad:a6:99:
cf:58:85:82:bd:c6:d1:38:55:bf:c4:85:5b:9a:64:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:36:9B:23:5E:83:D5:22:3B:FE:62:E5:39:20:36:45:7C:43:F9
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:db:d8:f6:74:0b:87:04:ae:31:ca:ad:62:97:8b:97:ab:27:
24:94:60:9f:11:f5:60:62:23:79:1d:a6:b2:29:14:aa:83:14:
0e:e3:3d:94:dd:bc:fb:35:f1:33:14:ab:ea:b5:d2:a0:10:4a:
8e:4c:bb:88:9a:5e:cd:ab:e0:5d:18:eb:9e:64:ad:3c:9c:6c:
f6:8f:14:3c:2d:0f:c6:aa:8f:74:6d:61:4b:96:4a:68:8c:43:
74:8d:73:86:2c:05:8c:3c:0f:95:c7:61:2b:b4:6b:d3:bb:50:
f1:6c:27:99:50:d7:c2:f1:cf:fb:51:62:91:cd:12:db:8e:c4:
25:07:13:12:39:14:3c:4d:e0:66:d3:44:e6:ab:9d:88:38:55:
46:cf:51:90:64:fe:1c:ac:cd:45:45:c3:f2:ef:40:99:de:69:
d3:c7:3e:93:8b:5b:ea:1c:fa:e3:76:07:ec:ec:86:ad:86:0a:
ad:db:83:39:8c:dc:69:c9:c9:01:07:e3:bd:1f:0d:4c:b8:ea:
b4:38:14:6a:d7:f7:52:6e:b1:20:27:fb:3c:2c:6d:d3:a8:a7:
e0:6e:25:40:0a:fb:e1:e4:8a:53:03:2f:e4:d6:f3:01:0a:51:
16:bb:de:6e:84:a9:15:1c:21:28:c2:22:d5:ac:e1:73:12:33:
e9:aa:6d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:17 2025 by rpki-client