Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json)
Hash identifier: KcY+AqdmZmnk2xHsVGBtinCA0d2qijvrB2aWm8C1rBc=
Subject key identifier: F5:77:B3:FA:D8:DC:CE:C5:61:75:17:00:73:79:24:D8:0D:21:21:D6
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 019A72CA1B93295A956EEF6FA5B7AB27C050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
Manifest number: 0CAD
Signing time: Tue 11 Nov 2025 12:00:39 +0000
Manifest this update: Tue 11 Nov 2025 12:00:39 +0000
Manifest next update: Wed 12 Nov 2025 12:00:39 +0000
Files and hashes: 1: eiXFhQbxCQpcEPNruQeHmSAD-Z0.roa (hash: MfMam3uqTveTnOv++uzEyTkwTSJ0lTcdAkWlcL+odNo=)
2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: uFXHOFFqaw6moZwlGdSuq+ZXllJe/XbSP5XlMoSYVhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1b:93:29:5a:95:6e:ef:6f:a5:b7:ab:27:c0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Nov 11 12:00:39 2025 GMT
Not After : Nov 12 12:00:39 2025 GMT
Subject: CN=f577b3fad8dccec561751700737924d80d2121d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:ae:f7:f9:6e:57:28:c7:73:25:55:ab:5b:
87:c2:6c:0a:53:a9:03:ca:b2:b4:c8:24:fc:be:5e:
ca:e3:1c:8b:ca:f5:77:6d:44:1d:f6:4e:b1:4e:ae:
47:d7:c6:9e:0c:c5:54:7b:e9:0e:3f:47:be:3d:b9:
b3:d7:9c:c0:97:38:89:63:95:c3:2d:ec:92:6e:f7:
dc:7f:1e:ec:33:d6:bb:eb:b2:5a:aa:4a:09:f4:53:
8e:91:fa:59:e3:43:74:98:15:05:08:ca:2c:f5:38:
e2:91:ea:b6:7c:5c:57:86:7e:fa:cc:55:ad:eb:3f:
c2:a1:7b:4a:29:2d:52:8e:f3:e8:7d:e4:28:7d:99:
d9:b0:77:da:e4:44:eb:14:67:79:8e:ef:26:b3:ea:
29:b0:3e:8c:fd:1c:c5:9d:ba:69:c6:0c:fd:a2:75:
05:c4:61:46:7e:0b:e5:fe:0d:a4:50:30:9c:13:88:
1b:ad:6b:3f:ed:38:38:9a:e6:07:7c:db:de:c7:9c:
73:33:40:25:8c:c9:52:7e:c2:29:bc:15:97:d4:bb:
a1:aa:d4:86:87:b0:ac:9e:c5:36:47:64:a5:8a:24:
3d:06:b1:15:e9:fc:b9:5f:a0:a6:ee:55:43:95:f7:
17:3f:29:9b:c4:d3:27:cc:7f:67:d7:71:50:b3:3d:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:B3:FA:D8:DC:CE:C5:61:75:17:00:73:79:24:D8:0D:21:21:D6
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7c:4b:8d:d3:d3:97:56:f7:37:bf:db:78:a1:c4:0d:5f:36:
82:e4:dc:51:23:a9:63:f5:c4:5e:b5:c2:96:60:51:9d:c5:8c:
99:e0:bb:d5:64:1d:f9:09:df:27:df:93:9b:23:b2:72:e7:41:
d6:f4:a0:7e:97:e3:99:cd:85:a3:f2:be:df:17:f1:0a:7b:5a:
bc:fa:e6:12:fe:e5:a8:d8:4d:34:7f:6b:6d:3d:b2:59:40:27:
c0:37:19:f2:55:fa:e7:33:a0:1c:4b:dc:08:43:7a:f4:be:31:
dd:f0:25:03:aa:09:08:35:29:b8:12:07:51:47:2e:79:d9:b3:
4d:82:13:d4:c7:f5:82:a5:a9:df:ef:38:75:ca:35:53:f2:0d:
7d:ba:ff:a7:34:92:0d:b1:7a:8b:f9:8a:18:34:c2:75:e4:7d:
d5:ab:11:a7:c0:75:6e:f7:33:55:49:53:2f:a4:8c:28:5c:b3:
e8:a6:fb:15:d9:b3:c8:5d:80:72:05:19:c3:24:53:b9:fb:18:
f8:1c:56:0e:a9:f0:e0:07:b1:9b:bc:93:87:07:88:dc:87:81:
d7:24:24:67:3c:47:8b:12:02:dc:d8:88:a5:8c:33:dc:20:d5:
39:c0:a5:27:c9:0c:ef:48:dd:40:9b:69:48:6f:98:f0:fe:94:
60:38:6a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:58 2025 by rpki-client