Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: TWaKBa6Slk9MuPELAtZU/LNLsmvxjHmV2XxAFHBVfyg=
Subject key identifier: 53:5D:AB:B6:A2:22:90:EC:72:8C:B4:1A:4A:18:2D:84:E1:05:26:B0
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 019A228A4DAE6EA4897E063D00946BE549F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 1369
Signing time: Sun 26 Oct 2025 22:01:20 +0000
Manifest this update: Sun 26 Oct 2025 22:01:20 +0000
Manifest next update: Mon 27 Oct 2025 22:01:20 +0000
Files and hashes: 1: APe792PPzgn2UcG2RsKnM9NZvXY.roa (hash: P5YJH0mHT12JV4knVxcd215g8BRGbGqkMZPdkHPu8r8=)
2: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
3: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: 9B+WBzvhGV00TZp6kuYXacXk8EqpzbzLos6DmRlHYNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:4d:ae:6e:a4:89:7e:06:3d:00:94:6b:e5:49:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Oct 26 22:01:20 2025 GMT
Not After : Oct 27 22:01:20 2025 GMT
Subject: CN=535dabb6a22290ec728cb41a4a182d84e10526b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:d6:e9:1f:1a:8d:0a:73:8a:61:d0:6f:91:
e4:3e:b8:06:92:cf:7b:65:9b:a0:70:0b:51:c3:75:
97:fc:f1:35:c8:6a:dd:74:cc:09:22:2c:29:29:df:
9e:f7:9a:56:3f:ab:92:33:33:1a:d8:fb:9e:0c:3d:
e6:19:f6:f8:85:75:53:54:53:e0:1d:2f:13:ce:44:
48:a7:b4:f7:0a:8e:d5:0f:c3:e2:2c:bf:d6:41:1d:
0d:cf:68:af:cb:5a:95:74:9c:f6:85:7d:db:89:03:
0a:f3:1b:a6:ff:89:0f:25:c2:3f:c1:b1:cb:8b:48:
cd:2c:83:1b:d8:b2:d3:9d:f2:1b:c2:38:e1:fe:b8:
a5:94:ba:7f:cc:41:f1:8a:f6:ee:21:ba:da:ed:8c:
80:a1:4d:69:f9:1c:9c:4e:dd:52:ff:a3:92:19:31:
e2:95:8b:c1:38:01:11:e6:0e:d4:44:9a:63:24:af:
d2:79:7f:a0:2f:1f:c2:22:dc:46:e4:7f:16:42:66:
b9:95:4e:f3:aa:79:8d:2c:53:bf:8f:c8:8f:6a:05:
3d:33:90:d0:7d:aa:38:38:64:0c:f4:c0:e2:60:cc:
14:f7:54:48:71:5e:d5:26:0b:f1:ae:07:91:57:72:
14:ec:5d:58:6a:95:99:e0:32:4d:fa:88:33:bb:8d:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5D:AB:B6:A2:22:90:EC:72:8C:B4:1A:4A:18:2D:84:E1:05:26:B0
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:00:61:34:41:85:41:6e:de:76:a9:ad:ad:2c:be:21:f5:b5:
f3:71:d4:f8:bf:2b:61:11:8c:af:78:92:5b:93:34:1f:f2:c2:
60:40:95:e8:78:26:38:08:2a:3d:c9:99:b7:a6:df:ab:2a:95:
9a:15:e1:59:0b:20:a5:15:df:4d:9b:da:76:11:14:ac:87:ed:
06:98:5d:38:5a:88:eb:3b:3d:7d:8b:a6:4e:fb:b7:ba:ee:78:
19:c5:f0:28:1e:1b:f1:dc:1a:c3:eb:cf:31:ae:28:03:bf:2c:
8e:0d:ac:0a:5a:32:c8:07:fc:79:2c:ff:2a:0c:39:58:95:37:
37:94:1f:1c:7b:8e:b8:f9:02:0f:8e:8f:9b:5e:1d:56:b1:e0:
45:0f:62:8e:d7:f8:86:b1:04:de:1f:ce:ee:c2:11:87:d5:29:
e4:aa:86:cd:fd:27:04:8d:14:06:e2:d3:1f:df:05:43:da:bc:
f7:f4:88:29:56:65:23:95:e0:51:6e:e8:4b:42:0f:d7:5a:b6:
82:f1:bd:1c:91:7f:5f:70:d1:56:95:e9:eb:46:66:37:ba:65:
d9:89:0e:9a:d5:07:a8:d8:12:b7:d5:9a:c0:2d:16:f5:3c:9f:
fb:36:51:a8:dd:40:61:1b:c7:85:59:18:21:29:0f:af:1e:e6:
3a:46:e9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:32 2025 by rpki-client