Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: r5YrKas3V/B8+lzdBgVTNLfkP9WbzEozY4Y1jHM2Pws=
Subject key identifier: CB:5E:01:B5:D2:99:B4:2D:98:DB:AB:3E:2E:E3:62:62:63:17:61:BE
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019A73012FF05546D2AABB7E6B73EB45145C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 16B4
Signing time: Tue 11 Nov 2025 13:00:48 +0000
Manifest this update: Tue 11 Nov 2025 13:00:48 +0000
Manifest next update: Wed 12 Nov 2025 13:00:48 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: yQdvdvIbuIKTkh4f7oB0rUCojUQIaeVDuqvaHpd0itw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:2f:f0:55:46:d2:aa:bb:7e:6b:73:eb:45:14:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Nov 11 13:00:48 2025 GMT
Not After : Nov 12 13:00:48 2025 GMT
Subject: CN=cb5e01b5d299b42d98dbab3e2ee36262631761be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0c:7c:9c:ea:82:b2:d9:5c:65:a6:e1:08:c8:
aa:17:ab:8f:50:00:39:91:43:4e:5f:e4:5c:1f:36:
32:67:6f:0e:98:ed:34:23:b0:f5:9a:e1:76:0d:a8:
6a:cd:47:26:db:1f:25:fe:f3:a1:8f:52:b5:0f:42:
87:a8:75:55:25:97:0f:47:8c:6b:bd:64:1d:9e:d7:
0a:29:7c:4a:48:f8:42:3d:59:ea:5a:a1:6c:5d:af:
ce:49:8e:34:c3:e4:5e:ec:0c:78:64:e6:e7:ef:e0:
56:02:22:07:08:cc:9c:ed:5b:b9:2a:83:24:fc:18:
ab:e5:a6:d9:19:4b:53:b1:3f:7e:70:b8:7c:2a:13:
86:ff:c5:b2:1a:79:d6:a0:4f:fe:81:5e:7b:63:7f:
b2:0d:d5:54:b4:da:f5:da:0b:8f:08:ef:f2:fe:5a:
62:f7:b5:c0:72:b3:b1:10:1c:4b:16:a6:d7:3e:1d:
ed:6f:55:2d:78:e2:61:ac:c7:e7:75:f8:d8:df:f9:
f8:bb:70:c7:30:ec:23:e2:7c:da:1f:c4:50:2e:f5:
e0:e5:f5:b3:e6:da:02:f6:78:42:03:c0:56:ae:99:
39:b4:07:93:32:f0:c5:2d:5c:10:a6:55:68:b1:fa:
f5:b2:58:b2:ca:bd:b1:2b:9a:f3:87:74:fd:00:7d:
8e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5E:01:B5:D2:99:B4:2D:98:DB:AB:3E:2E:E3:62:62:63:17:61:BE
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:66:4c:f2:e1:e3:b6:ff:ab:99:b3:84:d0:d8:14:d8:cb:74:
fd:f4:42:e9:40:e0:9e:41:44:a9:b9:2e:bf:97:bd:bc:9d:f5:
c1:c6:8f:ad:1d:5c:17:6f:fe:bd:ac:18:a2:83:27:cd:af:03:
b8:c1:2e:99:ad:71:65:ac:aa:b2:4f:c1:9f:d0:cb:45:8f:1d:
78:59:33:32:75:cb:c4:c0:0a:ca:eb:9b:f8:f4:0f:3e:b2:ed:
56:9b:5a:d1:5f:48:b7:22:c5:c4:53:87:1d:c8:02:d4:3c:9d:
3b:b4:44:de:0f:3e:5f:78:a5:10:2c:2a:6f:68:46:c6:b0:5a:
87:5a:b8:db:f5:e1:cd:b2:ea:68:e4:57:c1:7b:f3:13:cb:16:
ce:f6:d7:12:08:c1:b7:45:9e:fa:ec:c0:44:d6:3f:ff:53:8e:
7d:7a:c5:8a:77:e7:16:29:95:0d:a5:48:bf:4c:0c:ca:91:0a:
02:ba:b8:61:dc:f9:2d:11:b1:8e:4b:53:96:ab:73:80:fc:39:
8d:b7:27:50:2c:03:99:ea:c4:7a:45:1b:d5:ba:c6:0a:e0:02:
77:9c:41:24:44:82:73:45:96:83:9f:73:e6:42:0a:57:4a:53:
95:53:b4:07:cb:57:8b:c0:3a:ff:c5:08:5a:0e:62:ad:5a:39:
cc:97:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:16 2025 by rpki-client