Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
File: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft (raw, json)
Hash identifier: cptIhVCZXyzq/TMgQnMHnJc6Qk/trXxFYuCGzgfkFn0=
Subject key identifier: DF:24:A9:7E:71:5A:CD:D1:0F:C8:1C:3B:42:8B:7F:A8:41:57:A1:69
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 019A71B8E83B20511FA0EF6A6E6501BC1682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: 3Pz5apja5cKJYgXJqXnfQrYcWDc.roa (hash: tS0StXV35H98QzpAWS3J2vqaI9c0cKyaGDVnVfsQlWI=)
2: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl (hash: wbkhzGMI9AFsKuvuaJi18n7UEF8Nl5UtB3S3kN4cs+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e8:3b:20:51:1f:a0:ef:6a:6e:65:01:bc:16:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=df24a97e715acdd10fc81c3b428b7fa84157a169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:8d:5c:9c:3a:3d:64:e7:95:49:0b:6e:d8:
ad:65:ab:5b:8a:94:c1:c3:db:ff:0e:af:82:04:f5:
0c:ef:26:98:e3:cf:8a:32:0d:19:66:8a:3e:29:22:
d4:52:c6:4a:ff:92:26:a9:b6:5a:e5:b2:dd:a7:4c:
b3:1d:a7:60:ce:ff:ca:9b:0f:1f:a2:2e:e4:86:30:
ae:2d:ef:fa:0f:50:81:79:c8:ed:53:b1:06:26:5b:
1e:ad:c0:18:5f:01:12:3d:91:f6:81:e9:7f:c0:b8:
4c:ad:2c:a0:4e:c6:d4:8c:5a:f1:d5:a4:f4:c4:e4:
4c:5a:bf:a1:7c:f8:bb:0b:0b:03:f3:d3:c8:8a:f3:
6f:09:9f:df:4a:62:b9:d7:32:18:2a:d6:f2:b3:1f:
59:f0:f5:a8:f9:42:b9:b6:00:2f:a1:be:10:91:f7:
e0:bd:d4:ed:66:57:86:3a:fb:02:39:a7:22:b2:41:
f9:01:f7:0d:6f:94:34:4b:3f:6a:62:d8:ba:4c:45:
a7:a0:b7:51:69:67:b2:7b:af:12:91:69:e7:59:1b:
3c:74:2e:38:8d:1f:02:fa:58:09:89:8b:0f:9c:2c:
9c:1f:5d:d8:f8:21:72:24:fc:32:71:f8:6f:d0:32:
ac:25:ba:d2:89:02:99:86:8b:da:e6:be:f5:b5:5f:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:A9:7E:71:5A:CD:D1:0F:C8:1C:3B:42:8B:7F:A8:41:57:A1:69
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:df:5b:9f:24:4e:7f:02:53:67:66:02:1e:69:ba:f2:cb:09:
db:66:af:e9:7a:06:6f:27:26:7c:c8:51:d9:b5:ad:4f:27:09:
b9:13:49:ba:6e:4a:63:46:dc:90:ad:0d:bc:d6:9d:06:db:e3:
bd:21:50:02:ff:0c:54:88:b0:ef:48:43:d9:bd:93:f3:46:e5:
3c:1f:dc:62:cf:27:25:56:7b:14:01:88:38:b3:62:17:9a:fb:
a1:d7:27:8a:8d:48:0d:d1:b3:fa:e1:a6:a7:0a:55:21:ce:f6:
9e:eb:63:89:4f:0f:50:8f:7f:b0:47:73:10:c3:a8:ea:07:4c:
6d:9f:4f:60:a8:76:04:65:c9:e7:6c:4d:28:de:5d:66:42:0c:
63:8d:4f:5f:62:39:e7:ed:a9:6f:82:90:f7:a4:da:fe:e1:a6:
45:54:71:e9:bb:3d:c7:83:b7:e3:17:25:49:ab:78:78:0d:f1:
2b:ce:ce:b8:2b:b5:3f:98:e1:87:db:f0:b6:87:9f:15:6e:37:
23:3d:6e:71:3f:42:bd:49:b5:19:ba:49:68:77:13:ec:9f:db:
20:a1:33:22:27:53:1f:7f:9e:62:dd:7a:d5:c3:28:bc:a7:f1:
91:a5:ff:53:24:b2:61:f8:f9:ac:12:c3:4c:18:e0:18:a3:cc:
7e:43:30:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:41 2025 by rpki-client