Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
File: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json)
Hash identifier: Lxc7JKKdTO20tC5A+x2QC4dQnUhHG8WPf2KG61fyBbM=
Subject key identifier: 77:42:23:35:57:5F:AB:4D:11:5F:D4:D6:37:C9:46:96:63:67:68:5E
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial: 019A70DBFDA5180280B622A18371B290E669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
Manifest number: 02C2
Signing time: Tue 11 Nov 2025 03:00:56 +0000
Manifest this update: Tue 11 Nov 2025 03:00:56 +0000
Manifest next update: Wed 12 Nov 2025 03:00:56 +0000
Files and hashes: 1: bh_jxWLWM4ERu-tO2W_vtiAaR34.roa (hash: q67OJI4bSTnxGyWpXxOC2jeYAfoLHFvQvpzctzRe0VE=)
2: sibHr2FGPjo5CfPD_x82IFZOyjI.roa (hash: 5o3OHC/8KmGr6JnUosFKoE0TLY9c878SbcJe1V+5e/c=)
3: tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa (hash: dYA2gqzlNnRY/+Z83i04orn08vaFeOTWTefS4wKcEJw=)
4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: j0FkAWmyOKFG9ibpXQObitQvGDbES5HK8EEPLJImgCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:fd:a5:18:02:80:b6:22:a1:83:71:b2:90:e6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Validity
Not Before: Nov 11 03:00:56 2025 GMT
Not After : Nov 12 03:00:56 2025 GMT
Subject: CN=77422335575fab4d115fd4d637c946966367685e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:35:bf:2f:0e:80:a9:68:39:a1:91:9b:6a:
58:be:a8:29:06:51:47:af:ce:07:33:44:80:9b:f0:
f4:66:b8:47:99:1f:10:35:5c:01:a9:68:24:99:ae:
7a:e4:df:dc:a9:45:7d:59:ec:2b:12:ae:f1:93:cc:
18:56:14:30:d4:9b:52:df:d0:38:47:ed:0c:d5:18:
1f:4f:b9:ae:60:33:9a:65:f0:c1:d1:10:c0:eb:2b:
60:e1:06:6c:3f:b5:97:9c:f2:ca:af:28:5a:60:c2:
8a:09:74:02:28:69:06:4a:0c:ec:3b:28:23:6b:c2:
97:26:86:96:82:08:ba:c9:a2:20:5f:70:c5:dd:01:
1b:b4:82:1b:12:30:8a:1d:5d:e4:88:d8:bc:54:6e:
a4:7b:e2:20:56:30:5d:3d:f2:7f:6f:ee:d5:57:ba:
64:98:4d:ec:41:f5:da:2f:5c:c3:d0:a5:48:ce:95:
62:2e:2d:e5:03:07:a5:27:f6:1f:28:df:fd:7b:87:
da:95:be:23:da:9d:19:ed:ba:15:97:e7:2e:b7:62:
5d:05:d8:c2:1d:cc:13:79:48:85:4e:98:17:67:b9:
be:6d:47:c6:00:55:39:8c:ea:9a:cd:97:35:b2:1a:
36:a5:f8:e8:cb:a5:f4:26:95:61:5f:f4:d6:8a:c2:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:23:35:57:5F:AB:4D:11:5F:D4:D6:37:C9:46:96:63:67:68:5E
X509v3 Authority Key Identifier:
keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:09:1b:1f:ca:42:cf:2e:74:66:a1:63:04:96:53:b7:b4:c6:
df:c3:be:fd:b1:64:5b:2d:48:c1:51:9f:48:26:ba:1c:bb:98:
85:23:85:7f:3e:99:f9:da:44:a4:00:d2:5b:9c:8d:20:84:7b:
6e:ed:3d:74:9a:34:bb:18:30:6f:ff:7e:f7:bc:b1:1e:73:92:
07:30:57:f7:0a:47:d9:8a:b5:94:e5:8d:b4:50:76:32:cf:a6:
d1:f7:9e:4d:15:fb:b1:a1:48:ed:dc:43:09:33:05:36:56:44:
66:bd:79:cd:65:07:7b:5a:72:e0:f9:43:aa:9f:45:b4:e7:18:
65:71:87:ff:2f:1f:a5:d6:17:2b:04:ad:8c:85:0a:80:6a:ec:
f7:b6:a8:89:63:29:af:41:9b:4d:b0:a7:f0:83:00:a9:e3:f8:
0a:b1:b6:41:a6:5d:1e:3a:d2:3d:9b:1e:66:1d:c4:49:34:51:
2a:d0:3c:3c:f3:48:f0:3d:d9:d0:10:a0:4a:ce:60:1f:f0:e9:
e9:00:0d:9d:b5:b3:bf:ba:81:f8:c4:13:bc:10:7c:d6:e0:a0:
57:09:f0:cc:a8:56:12:8b:a3:0c:bb:86:4f:87:a1:47:bb:46:
46:4e:49:14:1b:db:6b:9b:2b:66:3e:ee:2b:ed:ab:95:fb:c6:
7e:51:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:42 2025 by rpki-client