Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: wX7JFTt+tULk1WnwGX2M4sPIP4K4Vf0j7wGhdbSN+Sw=
Subject key identifier: D5:E4:B3:27:1D:A9:B6:FC:CB:80:BB:19:08:57:AD:1E:F5:F1:C1:E6
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 019A73015C24489040B23518A94596CC20DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:00:59 +0000
Manifest this update: Tue 11 Nov 2025 13:00:59 +0000
Manifest next update: Wed 12 Nov 2025 13:00:59 +0000
Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: HjXFLCWPmvqhd/fQXDF3NmvNgt+OnlKmj9NvUww9WQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:5c:24:48:90:40:b2:35:18:a9:45:96:cc:20:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Nov 11 13:00:59 2025 GMT
Not After : Nov 12 13:00:59 2025 GMT
Subject: CN=d5e4b3271da9b6fccb80bb190857ad1ef5f1c1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:19:4e:12:fb:d2:b4:fb:82:c3:38:0d:a1:
a8:01:87:b2:4e:98:82:40:be:b5:ef:10:d8:e9:de:
72:16:c4:3e:a3:14:b1:08:d5:5e:ce:da:bf:33:43:
07:07:e9:07:a9:40:17:da:92:a5:30:59:f6:d8:3d:
7e:d5:1c:61:2e:cd:f8:b9:d1:49:72:a6:e4:08:6d:
42:a2:ca:25:84:be:36:66:57:b8:0b:85:29:68:49:
8f:4c:07:17:0a:c0:34:f1:16:f3:42:f2:f5:bf:52:
d6:f6:4c:28:fb:b7:e9:42:5d:4f:8c:d9:ba:54:e2:
e2:6f:7d:9c:c7:67:c0:89:53:02:86:49:8a:42:1d:
26:c1:61:ac:bd:3e:11:a7:bd:63:fb:21:40:26:02:
95:16:52:3e:ff:ff:c5:6a:0b:2c:31:bd:09:c8:b8:
6b:5f:39:4b:c7:04:07:34:ea:af:29:7d:e6:db:95:
8d:47:61:0f:a4:c4:0f:55:48:00:4f:32:e7:56:bf:
2d:60:57:c1:dd:c7:d0:14:ae:85:cc:c3:7b:a9:da:
83:39:48:22:58:d6:5f:7a:92:10:bf:ef:52:a7:55:
c6:73:40:79:17:6a:ee:0c:84:ca:0f:d4:3e:72:47:
97:4b:c3:4c:d2:ea:28:47:27:1f:2d:fb:e5:75:5e:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:B3:27:1D:A9:B6:FC:CB:80:BB:19:08:57:AD:1E:F5:F1:C1:E6
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:21:56:d3:e6:ce:ea:cd:dc:8c:d3:89:e9:ff:42:c1:be:9f:
ef:79:ce:52:7e:e5:7a:a5:0c:58:d7:28:9c:1a:3f:2b:25:1a:
6c:66:f2:9b:3f:7c:47:e8:48:7d:86:de:1b:3c:90:af:d8:f8:
ea:02:f2:45:5a:9c:ec:bf:e2:01:44:c6:ce:e8:90:73:00:3c:
fa:e0:7d:2a:0d:82:a6:59:4e:56:cb:d0:cf:71:bf:17:47:2a:
4a:3a:d8:b6:94:b9:3b:e7:b6:67:97:15:28:bb:9f:b0:90:70:
f2:84:5c:a2:93:eb:b1:64:8e:f7:73:c7:8a:9d:6c:ef:6a:23:
27:74:cc:2c:c0:74:12:59:05:5c:e5:8f:22:de:a3:68:f5:20:
1a:28:7b:e0:84:dc:a3:80:6a:10:ac:81:83:8c:27:77:cb:7e:
08:bf:cf:b2:be:9c:8e:49:4f:db:2e:ce:d9:8a:e4:83:e5:2f:
b7:51:25:2b:0a:57:30:c4:49:fd:44:97:3b:6a:e7:b1:9f:05:
8b:0a:2f:40:4a:4e:73:e2:f6:f5:8f:81:0d:b8:d5:9f:66:bf:
54:49:de:d0:5a:ed:15:4a:99:71:f5:bb:19:fe:4d:a8:bf:d5:
b5:45:b3:a9:f5:48:b3:41:70:b7:52:f6:41:46:c9:5e:3d:e6:
35:81:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:16 2025 by rpki-client