Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json)
Hash identifier: 6LTAtZARq1VMPiwa35xXBIKSpb7XLAVJeWNn3Mlme8c=
Subject key identifier: E8:86:38:30:99:F1:6A:76:F0:C7:B1:A1:05:D3:3E:E3:1B:3F:46:B5
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 019A729352C43681A00B527EABC7878D031F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: b88Rl7W3m-ZgN433QwmekbZFP6o.roa (hash: NoA21W8ly2WxwAuP2zZWwmclSVAV10KXOOvNxpP+/rg=)
2: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: x7VF3XWCnRiN8cdWMgZBee5MqtYyZSJnRaRTRKvInLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:52:c4:36:81:a0:0b:52:7e:ab:c7:87:8d:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=e886383099f16a76f0c7b1a105d33ee31b3f46b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:5c:d6:06:34:4e:2b:68:d7:f1:b2:74:7b:
ac:57:47:17:47:2a:a4:9e:e5:69:46:c3:bb:52:70:
21:c5:f4:25:88:55:77:d9:5d:bb:03:bd:ad:04:8c:
ba:c8:02:c7:b9:1d:53:50:fe:80:62:a3:96:d9:03:
49:a8:b2:45:52:24:61:77:93:4d:9d:b2:10:2e:bc:
79:ab:53:67:4c:15:73:47:f5:4a:2a:58:fc:9f:30:
48:b4:0a:e9:8e:3c:84:02:7e:36:a6:21:63:39:80:
d9:e9:1a:dd:c9:86:21:ec:af:22:1c:0d:67:0e:e7:
92:38:0a:2c:8b:6b:24:b0:fb:15:6c:16:5f:71:b7:
6f:8e:a5:d1:14:af:69:0f:02:55:d1:14:87:ed:b9:
74:26:34:d2:5a:c8:8c:96:79:38:0f:c4:0c:7f:13:
88:83:02:60:50:94:26:ed:64:a1:48:fd:64:54:d4:
d1:77:bc:9b:d2:a2:39:69:a2:f3:45:79:44:4c:c0:
2d:b8:b2:73:7c:a4:fb:2e:30:8c:d8:bb:c0:ba:98:
8c:fa:da:95:71:c3:a9:2a:5d:67:3f:6a:2e:32:ae:
1e:30:86:b0:cb:8e:a5:05:8f:0d:c4:0a:c7:f9:e8:
89:4e:fa:fa:d0:1a:be:aa:59:b8:e3:8c:da:6c:b5:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:86:38:30:99:F1:6A:76:F0:C7:B1:A1:05:D3:3E:E3:1B:3F:46:B5
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:61:b7:24:1c:f1:b0:fb:6d:0a:c1:b2:2a:2c:6a:84:c7:9b:
97:20:01:44:f7:5a:90:5c:a6:d2:be:bb:53:e1:68:d0:78:85:
56:11:0e:17:ba:d0:f7:91:98:8c:a7:ba:ad:32:f5:89:82:f0:
2a:74:d2:2d:d1:39:c7:36:28:96:75:a9:ec:1d:1f:4e:60:ff:
ca:93:b9:57:1d:ee:cd:90:97:7f:b8:de:4e:f7:1d:c7:21:8c:
7a:99:69:14:da:c2:6c:82:73:19:e5:fb:09:3a:dc:94:5a:51:
c9:7a:9e:ff:cf:43:71:35:f2:f5:3c:ad:9a:bc:3e:d4:c2:3f:
1a:90:10:6b:4a:ee:af:58:44:cf:67:e5:15:3b:2f:16:f5:0d:
2f:89:bc:f7:10:69:a3:2c:eb:22:0d:4a:f2:17:d2:de:4e:de:
a9:88:ab:2f:51:25:e6:f9:eb:d0:c5:67:25:bf:2f:32:7d:43:
13:e2:3f:49:55:9e:0d:33:30:37:3c:fc:ae:bc:79:71:86:1c:
db:36:aa:57:01:18:9a:d5:b2:90:25:e2:b0:4c:a7:38:e7:b1:
3c:4c:b7:d9:c5:c8:bb:e6:46:81:8e:d6:3f:44:62:fc:9d:fb:
38:99:32:e6:54:c3:58:b1:9a:85:b7:c7:86:e6:ff:40:ca:b8:
9e:9f:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:01 2025 by rpki-client