Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
File: yydiBw8SVD8bCscZgqxxAlgQ_18.mft (raw, json)
Hash identifier: cJEkgvMxTFntKepEnuTP4U5Oka9y4QqrjKuSJkChiiM=
Subject key identifier: 86:E0:F0:8C:0C:6A:E3:38:8C:36:6F:EF:37:9D:D6:6A:D9:09:89:DF
Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
Certificate issuer: /CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Certificate serial: 019A7293922D27CA150800544938D7BCC9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
Manifest number: 093B
Signing time: Tue 11 Nov 2025 11:01:05 +0000
Manifest this update: Tue 11 Nov 2025 11:01:05 +0000
Manifest next update: Wed 12 Nov 2025 11:01:05 +0000
Files and hashes: 1: rnkd3aH7pF24TCTJAylZcN41MhA.roa (hash: 1F1EwEJKOPyNW/NE+25aYXPL5wdqrlw2U+Z2MniW564=)
2: yydiBw8SVD8bCscZgqxxAlgQ_18.crl (hash: hinuBHegG5PnfHZCQuYUbvfjjurbSx/Um0TfmCz/m4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:92:2d:27:ca:15:08:00:54:49:38:d7:bc:c9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Validity
Not Before: Nov 11 11:01:05 2025 GMT
Not After : Nov 12 11:01:05 2025 GMT
Subject: CN=86e0f08c0c6ae3388c366fef379dd66ad90989df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:ab:43:b4:ee:7d:e3:4b:05:f4:c2:01:94:
6f:7c:4b:f9:e0:3e:70:6e:62:96:36:9b:5b:77:ac:
3e:db:fc:5e:40:dc:10:db:11:d0:dd:80:4c:1c:52:
d7:75:c2:a2:af:fb:d6:a4:16:c8:26:c0:b8:03:8c:
a6:8b:a8:44:05:b8:41:48:2c:e1:05:91:38:db:74:
75:d5:63:14:fa:e0:42:40:b5:3b:e9:98:c3:02:8f:
9c:a4:68:fe:1b:81:02:03:84:f5:0c:ca:3f:f5:f3:
28:3a:b4:45:eb:24:07:ac:3e:f1:e1:c4:e3:82:cb:
2a:11:94:79:a1:a9:ce:b6:b2:1a:fa:ad:93:3b:36:
f7:59:d5:79:ef:19:66:f0:a1:f8:8d:17:36:d9:91:
78:4d:a5:4b:f2:55:97:80:81:ad:51:33:46:ef:72:
85:89:5e:eb:22:8d:bf:10:ab:f8:a8:20:92:c9:81:
d2:2e:de:73:47:2c:1a:73:e3:54:d5:47:b3:60:43:
0a:fc:89:e1:3d:b8:fe:39:73:d9:5f:4a:a8:a9:b1:
58:ca:43:e6:64:4e:de:30:7d:9a:6e:df:42:23:c5:
8a:a5:a2:5d:88:63:9c:5b:1d:da:e5:c5:ce:c9:71:
20:fb:e5:27:47:62:77:f5:93:e0:c3:9d:38:51:83:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E0:F0:8C:0C:6A:E3:38:8C:36:6F:EF:37:9D:D6:6A:D9:09:89:DF
X509v3 Authority Key Identifier:
keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:37:ca:06:d9:52:98:0e:6d:38:eb:39:a2:ac:55:74:51:
bc:14:0f:a6:d2:83:12:e2:8b:72:19:8a:51:b9:dd:82:ce:af:
30:2c:cc:50:47:5d:c3:2e:8b:f4:16:2c:4e:f9:f1:99:b5:97:
01:f3:34:2c:e2:fe:10:b2:51:d3:6b:c3:bf:9f:bf:09:c8:73:
a2:26:35:07:1d:80:fb:73:e3:7f:9f:b1:05:5e:49:d9:40:68:
b5:5f:9a:19:9e:74:be:26:a8:04:21:3f:d8:03:c4:8d:fd:40:
6f:fd:0a:07:3f:81:19:37:bc:6f:5e:20:a8:4d:ac:34:26:24:
54:da:6c:ac:55:d9:7e:41:38:5a:9e:06:a6:31:62:0e:84:75:
61:08:c8:06:c5:df:c1:6f:27:5c:15:e5:70:b0:a5:a6:df:61:
e1:db:f8:73:7a:90:41:fc:bc:b9:07:e3:f1:06:ba:ae:02:58:
03:75:3e:74:5c:fc:cd:3d:6e:f8:11:f2:a4:fe:9f:13:b6:ee:
a1:7c:19:fe:2e:fb:e4:ea:4c:de:8d:7a:44:40:71:5e:cf:b3:
0b:a2:78:fd:4c:b8:0c:5b:38:48:e9:85:a0:12:ec:f1:6b:bd:
1d:a6:dd:47:40:ea:b0:9a:97:1c:9c:81:b2:ff:47:55:28:78:
6b:34:4d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:48 2025 by rpki-client