Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: 1BebbLRTP9qwHRC09gEP0BRvjnHZbeb9AZ3dRWsuTzA=
Subject key identifier: 8E:42:65:B1:0A:AB:93:64:30:F0:7C:BD:5C:A3:05:AF:CC:68:E5:0F
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019A2930AB347B4A06E693EE53D6C22310A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0B47
Signing time: Tue 28 Oct 2025 05:00:46 +0000
Manifest this update: Tue 28 Oct 2025 05:00:46 +0000
Manifest next update: Wed 29 Oct 2025 05:00:46 +0000
Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: lstrqek+NMm96ae2GNzQS3dVYBrDkp7H9P3x57v1ECI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:ab:34:7b:4a:06:e6:93:ee:53:d6:c2:23:10:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Oct 28 05:00:46 2025 GMT
Not After : Oct 29 05:00:46 2025 GMT
Subject: CN=8e4265b10aab936430f07cbd5ca305afcc68e50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:6d:00:a9:58:8f:69:bb:ba:56:06:e0:d4:
8e:c2:3d:8a:77:88:66:f3:76:b2:d0:27:f1:57:8f:
ac:28:8d:b5:c9:da:bb:20:20:ef:9c:97:fc:6c:3c:
3f:8e:43:d5:fa:37:ed:c6:b5:b1:10:76:f0:ba:e6:
87:a4:01:05:be:3f:3f:26:ed:aa:11:c7:61:f3:72:
c6:d9:c7:1a:a9:e7:49:78:fa:8a:fa:bf:62:34:39:
0f:34:9a:69:29:87:6e:02:f2:eb:66:cc:60:dd:2d:
95:d9:70:f8:a7:42:01:82:68:f2:ce:32:fc:1c:75:
d5:66:02:07:7f:ca:3d:7f:fe:3e:7d:06:92:3f:77:
c7:11:f1:15:af:6d:dd:50:51:eb:22:fc:6c:58:a0:
f7:1e:61:54:c3:46:06:1f:9e:78:9f:af:86:b8:16:
be:26:1c:8c:ae:1b:70:7a:da:d3:87:77:ae:c8:e7:
e8:dc:81:ff:65:06:69:14:90:7c:ad:cd:46:90:5e:
14:5c:9a:11:92:e8:22:05:99:d3:17:c3:5c:e4:5a:
76:45:74:4b:0b:57:4e:4c:9e:31:d2:c3:55:09:49:
f4:5f:26:4c:ad:97:a9:eb:ff:38:42:52:6d:1c:21:
7b:76:45:b5:ea:41:ec:46:3d:46:89:ec:a4:11:18:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:65:B1:0A:AB:93:64:30:F0:7C:BD:5C:A3:05:AF:CC:68:E5:0F
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f3:7d:f9:bc:0c:ef:1e:ec:96:98:4d:0a:61:09:93:8d:d1:
ea:3b:59:21:69:17:21:6d:45:dd:04:f3:1e:80:0a:82:7f:02:
d9:3a:c0:26:5d:eb:60:89:73:09:52:ef:d2:50:b9:2d:b9:87:
ee:b1:ea:54:3b:f2:91:c1:84:7c:6d:9b:69:a4:8f:76:dd:a2:
26:b3:71:50:07:2c:44:0b:11:ea:4e:b5:db:01:77:52:8b:1c:
75:17:c1:11:d0:23:ff:4f:76:77:c7:82:41:ea:e6:6b:6a:9d:
36:38:c8:a6:81:9b:24:93:ca:0c:f0:07:64:2e:e5:4f:98:c3:
44:42:69:9c:1a:0f:8b:09:30:14:c2:53:38:2d:cc:b5:d0:92:
b0:72:99:92:16:8c:32:af:96:3e:cf:55:21:f8:d9:e1:a9:bd:
d8:cc:39:6d:be:ed:d7:80:82:cb:66:cc:9f:fe:87:5d:be:d1:
84:91:42:ab:24:f0:00:de:8e:bc:bf:13:36:c7:f1:e5:a2:3c:
3c:8c:9c:ce:2b:1b:48:d5:d9:a6:f0:40:93:c9:16:7b:08:d9:
78:82:54:7f:92:81:0a:3a:5f:7f:2f:86:fb:99:07:b5:46:44:
bf:df:64:de:e8:60:33:d2:2b:70:7d:31:ed:69:84:c2:57:84:
20:a9:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:37:02 2025 by rpki-client