Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier: ALAjD1DtYOspFUNKCwmlnXgU4bnjlrZ3XsPhg5UInPM=
Subject key identifier: 31:1B:68:F8:34:68:06:3C:11:89:D0:44:70:56:E5:D8:4F:6F:A0:5A
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 019A12DF2476F97B580A88800D2A67D53F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number: 065E
Signing time: Thu 23 Oct 2025 21:00:04 +0000
Manifest this update: Thu 23 Oct 2025 21:00:04 +0000
Manifest next update: Fri 24 Oct 2025 21:00:04 +0000
Files and hashes: 1: NkRmhAwiBvZ-mI3ws7AoUtnvJlw.roa (hash: Qmu587A5vz0QqePux9/8aXshlrfRjr3JIejbf/nnhGw=)
2: RL3xJ4ezhmNdZ1rcVqISik-0MMo.roa (hash: xlGD8LTXAgZF6ai7L4BH7qy3aFEkBhgRkokviaW4/Ws=)
3: T58xMDbLANQb9Kgw893xpFau1Fs.roa (hash: 6zsxCyqe8IvUF3KmmNmoDeEUsdW8rKFl85HR/TG08js=)
4: Xa0B9m97ByYphB5XrMGxVdHZyes.roa (hash: mXqV2/vQX57Ww79AIe2GrEvrqiY5gtML1rzRmVpsOdY=)
5: x1uDU9Zoy9uOw-P8QajIkhafsls.roa (hash: DvZ2AA1RQvmoSZSW5gPnUUBwYA0pEWM/KDqbtkIXCWA=)
6: x9gEvmLiqp6QXnPTPsa-6i-pFyo.roa (hash: keFMGhxuV8MLlgHVwMp/d+A+4wpJiYJvnC3NEijngr0=)
7: xCnT23Rn0GW_J69HKTBn0CbUrEg.roa (hash: lihRtt/ALF9fF8QJo8U8WnJBS3k3roL75dQ2MUYDSMI=)
8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: Y0G1GRRNSpM9gYYdvBw5fKXMvOVkWASKQ6rBi07R0nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 21:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:df:24:76:f9:7b:58:0a:88:80:0d:2a:67:d5:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Oct 23 21:00:04 2025 GMT
Not After : Oct 24 21:00:04 2025 GMT
Subject: CN=311b68f83468063c1189d0447056e5d84f6fa05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:00:5b:90:44:c4:d5:e4:37:33:cf:bb:ff:
15:32:50:cb:0e:3a:33:aa:28:a7:32:fa:60:4e:d3:
11:31:e6:c7:d1:9b:33:ed:a7:ed:6e:fe:1c:8b:ba:
d8:75:d9:8f:6b:67:80:ca:b6:9d:c6:c1:8e:eb:77:
2a:3a:90:e8:bc:08:6a:75:2b:d1:84:b1:0c:6f:2e:
80:85:e5:f2:24:3f:93:a4:9c:e8:3c:77:ab:7d:a7:
91:96:d0:c0:48:83:13:79:c2:39:3b:83:a1:63:f9:
dd:49:f1:eb:ec:de:52:4b:04:0b:bd:47:2a:2e:a3:
6e:72:76:42:a9:3c:5f:d3:df:1c:2c:19:ba:fe:00:
ab:4e:60:2c:d0:80:55:90:15:5b:4e:16:04:ce:96:
f9:30:87:b9:31:53:37:f8:fc:15:a1:b6:3e:f1:83:
4d:2b:d5:8e:40:8d:03:10:07:74:27:98:5f:a1:39:
5a:a1:16:89:b3:05:d4:2b:34:7c:19:ae:b9:b6:f8:
af:69:d8:7a:bf:4f:0b:07:6e:42:aa:b4:b9:52:5b:
5c:a5:27:9c:9e:a9:cb:4d:7d:10:63:e4:28:c9:ae:
a4:ff:ef:74:e7:ac:45:00:2a:4e:56:5a:9e:c4:3a:
65:f9:a6:15:96:fe:ee:5d:df:f3:5d:cc:80:c5:8c:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:68:F8:34:68:06:3C:11:89:D0:44:70:56:E5:D8:4F:6F:A0:5A
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2f:ee:60:96:29:50:fc:bf:e5:99:5c:c8:47:a9:46:78:9a:
cc:ba:59:a6:3a:57:92:3c:72:2a:87:55:db:6d:a6:67:d8:b2:
2a:19:40:85:22:c6:0d:b7:1c:f6:ad:65:f1:38:b8:1d:bd:a0:
70:d2:2b:3f:3b:0b:4c:13:96:58:59:ae:27:10:0b:b0:d4:b2:
3f:54:63:de:0d:5c:5c:8f:6c:f4:d7:8c:66:68:04:04:bb:bb:
e5:71:76:59:c8:ae:96:d2:d8:c0:22:e5:02:1f:2f:bc:da:cb:
d0:10:d5:3c:6d:2a:4e:2f:4e:47:42:d4:d7:5d:9d:81:41:c1:
f9:2a:09:17:ba:e2:58:00:d6:31:00:83:1e:8c:eb:e3:38:80:
4b:9e:67:3d:92:d4:c4:c2:0c:4f:e9:59:a9:aa:96:42:10:1b:
ff:12:fe:4a:85:5e:64:98:1a:b1:3f:42:78:d8:70:17:04:3e:
00:0b:f3:0f:31:a7:71:72:cc:0e:1f:76:5c:2a:be:26:30:9f:
2c:28:00:16:fb:96:51:c2:e0:d6:01:9c:d2:03:30:0d:d9:1f:
d7:1a:85:e9:93:7c:a8:d3:16:e8:88:b7:b8:7d:c4:a6:90:b4:
15:62:20:e1:e0:61:e6:57:c6:6d:9f:ba:14:2b:1c:38:55:82:
b5:e6:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 00:35:15 2025 by rpki-client