Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
File: yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json)
Hash identifier: QYSN1CTXSS8T8T7oE1E5OWoJfBNV5L5KRCCNMvCh3SY=
Subject key identifier: BE:D7:8F:D1:53:60:78:D9:38:2C:97:2F:5C:6F:20:43:08:5D:9C:54
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 019A714A0C3B368A79DFA096AED6BE572C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
Manifest number: 0455
Signing time: Tue 11 Nov 2025 05:01:09 +0000
Manifest this update: Tue 11 Nov 2025 05:01:09 +0000
Manifest next update: Wed 12 Nov 2025 05:01:09 +0000
Files and hashes: 1: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: Z/eTZfiiRTgAEM0z+dBN7q0yRvGSOxMVKOYlgATW244=)
2: z4GL3R9iwn241BwmecTavitjvmk.roa (hash: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0c:3b:36:8a:79:df:a0:96:ae:d6:be:57:2c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Nov 11 05:01:09 2025 GMT
Not After : Nov 12 05:01:09 2025 GMT
Subject: CN=bed78fd1536078d9382c972f5c6f2043085d9c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:59:32:a8:54:94:8d:e7:fa:dc:a7:dd:34:
a8:8a:ba:b4:45:00:f2:f3:30:47:fc:18:e9:a2:89:
fb:d1:9a:b0:d6:8f:cb:f5:e2:7c:59:aa:a3:46:a4:
cb:e9:9f:f4:1f:77:24:d4:a0:fb:de:37:83:19:e2:
35:3f:0d:09:be:bf:c9:dc:ae:7e:f1:b5:33:79:d9:
95:f6:02:64:b2:bd:53:ff:02:d0:1a:50:af:89:8b:
49:dd:d2:af:31:e4:95:a7:57:05:6b:b0:e8:02:79:
2e:cb:03:d5:5b:41:bb:66:4c:19:d8:8e:9a:11:30:
4c:4f:55:e9:b2:a2:6c:44:bf:8e:4c:89:fb:c3:f5:
08:f6:18:12:e1:27:30:70:a9:6d:fd:b9:e2:5b:38:
69:47:10:ed:5c:09:03:e9:58:53:35:7b:fe:97:76:
a7:5e:bc:51:35:67:0b:8c:76:e6:5e:91:32:24:db:
c7:0e:3d:fd:f4:c9:13:4d:5f:c9:86:a3:93:8a:7b:
3c:ac:be:00:12:c9:33:4b:5c:9c:41:8b:1a:4e:55:
93:ac:1e:27:a7:e8:70:f3:ab:74:6e:1c:d4:4d:6a:
88:56:48:46:7c:4d:f1:d7:38:0c:66:5b:2c:f4:08:
e3:89:f1:ae:4e:8c:b7:c9:59:6a:f6:63:d6:03:eb:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D7:8F:D1:53:60:78:D9:38:2C:97:2F:5C:6F:20:43:08:5D:9C:54
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dd:64:b7:ec:3b:f3:aa:ad:af:f0:30:65:81:da:89:1d:01:
98:66:b9:a3:08:b5:a4:46:b5:d7:01:cf:a9:64:13:88:60:c2:
29:53:1f:88:6c:d3:88:87:2d:ca:55:03:26:ab:43:7f:45:bf:
37:7f:49:51:70:14:4f:c6:c8:02:bf:c1:1c:16:a9:57:72:4c:
d4:5d:c2:52:d4:27:46:be:17:7c:3e:2e:f2:eb:45:d8:f7:32:
5f:cc:1a:a2:d2:90:c9:de:ad:2a:77:c2:02:8a:76:50:51:ef:
15:dd:57:3c:c7:c8:9f:c5:63:5d:e1:79:de:e4:0e:95:10:23:
ac:16:8f:ee:eb:76:55:28:3c:d1:38:5e:ac:3a:0d:ba:c4:6b:
22:3a:d5:bd:4f:0b:7e:81:ae:ee:f2:46:9b:6e:44:56:c9:f3:
ba:d4:06:e8:a1:64:b1:7b:e3:22:96:51:aa:49:00:52:17:46:
92:ad:f6:72:38:f5:21:18:1e:2b:dd:ea:92:4b:61:88:9c:12:
43:9f:93:bb:20:a4:6f:1f:b0:43:bd:e9:cf:5c:43:c8:99:c1:
98:b9:a0:eb:9b:16:1a:93:da:37:cd:57:66:ff:d7:f4:30:62:
f6:dd:fe:22:e5:57:9a:c7:8d:e9:4e:58:1f:13:6d:04:b5:f8:
a0:0c:60:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:08 2025 by rpki-client