Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: KMvL/tyEwdsZcbU7fcXs/3x/4kP/jYbj+BPYGNcyBVY=
Subject key identifier: B1:75:D5:D4:62:E9:2E:55:EF:10:30:44:7A:FD:33:B9:F2:88:E5:78
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 019A70A506964B2928ED774E932B83F9F43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 07E0
Signing time: Tue 11 Nov 2025 02:00:54 +0000
Manifest this update: Tue 11 Nov 2025 02:00:54 +0000
Manifest next update: Wed 12 Nov 2025 02:00:54 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: ypQ21SBd731LCOcq08yyugH7gKy8w033meVboZ34rKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:06:96:4b:29:28:ed:77:4e:93:2b:83:f9:f4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Nov 11 02:00:54 2025 GMT
Not After : Nov 12 02:00:54 2025 GMT
Subject: CN=b175d5d462e92e55ef1030447afd33b9f288e578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:c8:eb:44:7b:04:08:a6:09:49:d7:75:cc:
42:3e:8b:03:cb:a4:6f:24:2e:3d:d0:48:b2:f9:12:
85:ec:4c:dc:70:80:1d:bc:6d:cd:ba:dc:33:06:09:
d2:32:b9:c3:fd:66:5f:31:50:ac:9f:f4:08:64:a2:
20:c1:35:74:c4:11:cd:c8:da:47:3d:02:52:2e:f2:
e8:12:b3:16:55:49:a9:3a:07:fa:dc:bb:7b:bb:41:
9c:f9:f2:d3:de:2c:27:ee:8e:8e:0f:d5:bf:e4:8e:
de:d5:f8:77:cc:28:a0:9b:18:37:0f:8e:71:01:52:
e1:56:bf:ea:78:00:7d:15:5c:1a:a8:b9:b7:cb:e3:
ce:f0:89:83:9b:04:0f:99:ec:6b:59:73:6d:85:01:
72:07:66:41:a8:cb:0f:34:ca:85:3c:b2:bf:16:01:
9b:63:6b:64:5e:f9:07:fa:e5:0b:e4:f7:bd:a4:54:
e6:3f:73:a7:02:d1:10:b0:91:71:3a:3c:5d:5b:d8:
f7:63:e8:76:13:96:31:e3:24:8b:3e:b4:cf:5d:3a:
a4:5c:71:12:06:1c:a6:a2:41:89:02:11:51:36:56:
4e:a4:4d:d7:9d:a5:43:42:16:a5:c7:d3:a6:98:46:
31:08:74:ca:17:1e:08:b8:5c:ed:47:73:4d:fd:01:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:D5:D4:62:E9:2E:55:EF:10:30:44:7A:FD:33:B9:F2:88:E5:78
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b4:49:f9:ab:33:4d:c9:94:32:5d:91:a2:38:fd:ca:8d:3b:
1c:28:c9:6d:67:de:56:59:92:15:14:3d:6d:5f:d6:8f:8f:1e:
d8:39:dc:1c:02:78:0f:90:35:1c:42:44:45:9f:cf:d3:fb:8e:
29:8e:e6:e2:77:a2:73:48:c6:29:04:d0:12:51:20:5b:17:b9:
d5:b9:53:d0:bc:94:a8:92:ff:2d:ca:33:b5:52:d2:3a:ab:5e:
3a:94:ab:c8:a1:5d:d3:e6:39:2b:f4:94:6b:47:e5:bf:8c:f3:
36:9b:99:fd:15:cd:b6:a3:ee:0b:22:a1:35:1c:f3:eb:ad:99:
31:cd:54:21:e1:37:ed:fd:7f:2d:64:2d:06:5f:12:5a:f5:91:
f0:6e:af:a3:95:73:3a:43:e9:6a:f4:5c:a2:63:72:8d:1d:5f:
b6:cc:71:cb:7d:14:d0:fc:da:a5:a7:eb:b9:b9:c6:67:ed:11:
69:68:d9:02:42:1a:a2:8e:c6:99:a7:c8:71:cf:d8:c0:db:3d:
08:ba:4b:68:9c:4c:23:18:7a:38:a3:85:ba:80:dc:cb:02:21:
a1:f5:41:af:0f:a7:17:63:03:ba:db:43:92:72:ae:7e:6b:60:
fc:ad:9b:95:e0:0a:37:a4:a0:35:12:df:58:e4:05:8d:ea:13:
bc:d5:6c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:09 2025 by rpki-client