Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier: /1qS8XcE8iTtzj4ggES3XXyvsFncsSkMMF+j5sCQ4JQ=
Subject key identifier: 7F:E0:29:22:6D:BC:AA:71:E7:D8:36:7A:83:FB:7D:F1:B1:3F:86:02
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial: 019A71B8DC7D8BE0062E767E8808473D2713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=)
2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: HJs97rixdVGPUuGu1OvSOtSt+5s6PBcjxXcjMZjyJIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:dc:7d:8b:e0:06:2e:76:7e:88:08:47:3d:27:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=7fe029226dbcaa71e7d8367a83fb7df1b13f8602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:a0:08:95:21:7b:8d:83:3a:b0:f3:a5:c3:
a0:10:a4:6a:18:b4:92:8a:fe:4a:5d:ca:e0:05:df:
46:6d:67:84:9e:0d:57:f8:ad:b4:d6:c9:b0:a8:10:
b5:b1:ed:5b:0a:02:f9:84:57:23:0f:57:20:56:50:
3e:f1:f2:69:ef:73:58:97:64:ba:d5:a4:c8:bd:fe:
db:dc:4d:16:9a:db:90:58:5b:01:50:2f:4b:40:9e:
e0:c5:83:96:77:aa:15:5a:ea:94:8a:ee:c0:b1:a4:
00:a7:e2:0c:a2:e5:37:24:94:8a:6b:1d:da:1e:44:
69:f1:eb:45:37:d8:ec:f8:81:a3:d8:66:5f:c1:39:
05:50:4f:af:85:5a:4a:df:1c:a7:40:c4:82:70:70:
d9:ae:99:62:94:61:3c:e1:e8:2d:ef:69:9a:70:d8:
7a:73:9f:07:b8:33:3a:78:b5:8b:90:06:ee:b0:71:
09:3a:5a:3d:e2:45:06:e2:40:23:02:87:7b:fc:79:
0b:c3:64:d6:52:1e:b5:e0:d5:d3:df:eb:3f:27:fb:
02:b1:20:0c:23:eb:9f:3e:a5:06:bb:2d:5b:90:b0:
62:50:a9:f4:6d:ec:35:92:f5:0b:5d:27:34:1f:ae:
08:0b:4c:74:d1:be:13:e0:db:d9:6a:57:0c:fa:34:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E0:29:22:6D:BC:AA:71:E7:D8:36:7A:83:FB:7D:F1:B1:3F:86:02
X509v3 Authority Key Identifier:
keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:1c:21:71:50:a0:ab:fc:51:52:c0:1c:89:cd:7d:d9:6a:5a:
44:04:9e:cc:e3:b7:c7:d2:3c:cc:54:20:18:72:77:00:ce:28:
58:f7:35:d6:e0:19:5f:7b:4d:6a:c5:40:7f:9c:8f:aa:3d:bf:
28:53:a6:6e:47:5e:3f:65:58:ab:71:51:a1:ea:99:7e:69:03:
ec:d9:fe:27:7e:5e:0c:9d:91:ca:e3:e9:7e:df:f4:de:ee:6a:
ae:68:e7:e2:a8:7b:25:f8:41:30:cc:99:dc:9d:f9:9a:ec:6b:
50:e4:96:85:55:3f:24:5d:0d:b8:df:6a:5d:73:13:3b:38:a7:
05:7d:54:9c:7a:a2:2f:88:4b:af:3f:f3:69:c2:a8:f8:77:47:
d9:8b:98:ad:26:de:ff:aa:91:f4:67:2e:ed:b0:13:78:eb:a8:
c1:cf:68:b5:ff:41:f0:39:d3:d6:43:ed:9f:e4:8d:2c:89:b6:
c5:a1:92:2e:0c:78:a6:b3:49:12:20:b5:57:de:0b:05:92:43:
bb:17:d0:92:01:b7:ea:e0:42:eb:f4:87:b6:12:06:bb:0f:44:
7d:10:54:8f:e0:b0:dc:55:a4:86:b6:ec:84:21:1d:0a:50:73:
1a:49:f7:c1:ff:55:8a:bf:b4:d3:76:f4:ee:41:aa:7f:b5:0c:
47:b6:96:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:02 2025 by rpki-client