Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
File: yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json)
Hash identifier: 2gu7+d9IIl86ceb2+5uhzRv8XMGfs/03bCOEpLwtfIk=
Subject key identifier: 62:86:29:D4:99:BF:E6:13:46:03:D0:37:2D:61:05:CC:E6:6E:40:19
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial: 019A73385409C0FE484DC8B0BD32C0294E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
Manifest number: 0BA1
Signing time: Tue 11 Nov 2025 14:01:02 +0000
Manifest this update: Tue 11 Nov 2025 14:01:02 +0000
Manifest next update: Wed 12 Nov 2025 14:01:02 +0000
Files and hashes: 1: DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa (hash: 2p6cZB/6xzzCJ7jeUbBrD5Bf0hcHEh4tn/vPl+35cnU=)
2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: aFphERRde0il3GgtnQejLDx4wqYdc5BnmBS9WttIiKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:54:09:c0:fe:48:4d:c8:b0:bd:32:c0:29:4e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
Validity
Not Before: Nov 11 14:01:02 2025 GMT
Not After : Nov 12 14:01:02 2025 GMT
Subject: CN=628629d499bfe6134603d0372d6105cce66e4019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:8e:74:f1:42:bc:1f:5d:34:8b:21:d0:01:
68:f1:05:fd:ef:18:9d:79:db:71:8a:e7:67:b5:5e:
1d:85:72:23:d0:f0:05:c8:01:b1:73:05:d3:a6:81:
0c:80:19:e5:f6:3a:6b:bc:3d:4e:e8:ed:42:02:2c:
20:49:63:48:b7:42:ae:56:fa:4e:af:4e:11:3b:7e:
e6:42:88:01:35:0e:e4:db:5c:1d:c2:2f:1f:7b:9c:
77:18:be:c4:4b:74:35:32:0f:07:90:29:e9:99:41:
f4:ca:3a:14:a1:1a:cf:a2:cd:52:59:6c:7f:0e:6a:
7f:ee:08:50:c2:36:8c:f3:cb:fd:df:fb:69:35:60:
e3:90:db:70:13:b6:9e:13:f1:3b:da:5b:e7:94:a2:
7c:67:38:0e:8b:bb:e8:81:da:be:ad:a4:ce:40:46:
96:5b:e0:cf:5e:9c:a9:77:ed:4b:5a:9f:43:f8:cc:
a2:07:39:05:45:fc:00:32:5c:e6:a1:de:49:15:ce:
fc:78:51:77:81:75:56:b7:b4:54:e3:60:80:8c:6b:
86:65:3f:d0:d1:63:a5:c1:67:eb:9b:48:5d:50:0a:
13:25:86:39:e7:73:f8:29:6e:0d:3a:30:fc:57:07:
24:5b:12:1c:f2:e8:77:a8:25:eb:fa:1a:6e:1d:a5:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:86:29:D4:99:BF:E6:13:46:03:D0:37:2D:61:05:CC:E6:6E:40:19
X509v3 Authority Key Identifier:
keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6c:5c:c5:bf:fd:bf:b7:b1:03:05:47:aa:37:0a:68:79:ad:
30:3e:b0:c7:d3:8b:00:3f:18:4e:99:8e:68:ba:6e:93:76:34:
b9:2d:b8:03:9d:3f:24:1f:1c:4d:3c:b6:49:23:23:5e:51:d8:
0b:fc:fe:60:16:a9:48:14:38:82:00:a8:4d:df:b5:49:17:72:
10:7a:76:79:8f:da:84:eb:39:de:b5:d7:4b:d6:52:27:87:99:
99:1e:ec:40:60:ce:76:67:9d:ae:63:6c:90:9a:7e:97:4c:5e:
ff:a3:05:e7:1b:98:eb:73:eb:bf:0a:26:dc:25:49:03:05:1b:
ed:41:c6:c7:6c:6a:d7:95:f0:52:6f:47:b5:d0:d0:71:a8:ec:
9c:fb:72:da:c5:49:f2:8a:e4:9a:1b:68:46:64:4a:24:25:f6:
73:fe:02:85:87:8f:f2:09:48:ea:f3:29:65:54:18:f6:65:83:
e8:1d:46:67:b6:dc:f4:ea:4e:90:ca:03:84:3f:02:b7:2d:d5:
44:e7:79:35:26:87:b8:2f:d8:f3:cc:a1:87:c1:d0:75:d3:9f:
d7:fc:7c:92:f1:52:63:09:65:5e:29:1c:8e:ca:04:69:9b:52:
34:48:15:f1:73:32:63:4f:f9:87:39:56:bb:47:3e:a2:99:1e:
42:d2:ea:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:58 2025 by rpki-client