Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File: yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier: vNQ/uMClxojciY8rlyDX4egUDbc2i/s3R9jFv7eZHto=
Subject key identifier: B8:AB:70:90:3C:5B:5F:44:54:E6:45:E2:EF:BB:15:9F:17:86:77:CC
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 019A71EE8CF46DA1D3FCA2AA2B402F170CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number: 1529
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: 3dzOq8G9IRlpRN6VYAesJxFCM9I.roa (hash: pZlE7f/kxQT336UtrvzPnURvz6UI7VQoJaImOOVWpDM=)
2: JJmF9idPFAXWWPX9AjfEMsS8Ozk.roa (hash: Z6lxpjHZf+bFBTA5z2r8BCssBYWOfAe+nD+SW+UaYNE=)
3: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=)
4: _RcJWBC9z2DoyJEEVJqiJ3iNmSY.roa (hash: shwbQcS4UjqPIXlBcN1Jjj6/KYNyV5tzzIShWjZk6kQ=)
5: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=)
6: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: UU1R+oqpxVDw7pwqA1+eOjJbisdfnolRI4SIPbtaBHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8c:f4:6d:a1:d3:fc:a2:aa:2b:40:2f:17:0c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=b8ab70903c5b5f4454e645e2efbb159f178677cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:13:83:47:cc:35:a2:7d:5f:63:a6:61:31:
ec:42:39:f0:79:e7:25:d7:e7:c3:a4:34:09:60:ae:
14:35:1f:6c:50:c0:60:70:8c:e6:89:b0:1d:e9:14:
6a:4e:f8:80:cf:97:af:c4:fa:db:28:f8:a8:1a:73:
ed:4b:fd:a2:3c:4d:7e:f7:dd:53:62:81:df:88:66:
82:c7:7e:a1:e9:7e:74:e3:2a:12:86:23:73:43:ad:
be:30:be:e5:23:bc:cd:2e:8d:87:ee:1a:5a:3a:4b:
df:39:d7:85:1a:44:95:28:ca:19:f7:f1:3b:9c:ef:
4b:c5:d1:ca:1a:d2:8b:a6:4b:32:1b:4c:68:78:9b:
cd:b8:02:23:61:17:f4:6e:c0:96:4b:2c:81:2b:8f:
1e:77:96:03:83:30:97:a2:c9:e7:d9:a1:69:fa:e5:
ca:65:69:f8:6a:a8:fa:cc:38:11:65:3b:bb:03:3d:
bc:3c:9f:69:8c:42:c4:ca:07:e0:cf:7a:5b:fb:8b:
0c:66:3f:a8:89:2f:38:bc:f2:2f:a6:6c:5a:cc:5f:
9a:03:ff:0b:56:3c:60:b7:6f:cb:17:c4:9f:c6:c8:
ed:1d:d4:a9:5c:b1:c2:0c:92:21:63:61:65:8f:6c:
47:53:33:fc:ba:64:63:78:42:27:8a:67:ee:45:ea:
d0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AB:70:90:3C:5B:5F:44:54:E6:45:E2:EF:BB:15:9F:17:86:77:CC
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b1:c7:ea:9b:2f:4d:44:f5:b9:61:0b:2d:36:9f:f7:e5:9b:
47:71:c7:e8:28:9f:60:87:f4:e1:2a:1e:df:1b:b4:3b:a3:8e:
e9:e6:a6:0e:34:bf:b7:46:e6:9d:5a:9d:dc:8e:fe:4d:8b:0d:
06:a7:15:9c:89:32:c1:1a:16:88:6d:4e:e9:53:49:dc:78:9f:
cb:5a:44:c8:29:07:24:f3:98:e6:eb:b7:ef:f9:67:29:0b:8c:
3f:e0:3b:e6:16:8f:64:f3:0e:1f:27:2f:f6:9e:69:c2:bd:9a:
0d:db:c0:68:73:34:cb:fc:23:f0:05:7d:39:6d:ee:ba:43:56:
36:48:e9:9d:15:5b:73:64:33:3f:10:15:09:24:89:bb:dc:39:
be:13:75:d2:89:0b:86:6e:eb:ea:80:e0:a5:2a:90:66:c3:aa:
43:20:89:8a:bb:98:21:97:0d:b3:db:c3:bb:90:11:1b:40:df:
cb:50:3a:ec:71:78:e1:be:15:59:92:bf:61:3e:51:ca:60:71:
02:a6:38:7d:d0:5b:0a:7c:a4:b7:a6:b1:97:a6:aa:00:96:8b:
02:c8:72:ae:23:6e:4f:8f:a4:34:e2:5e:0c:77:85:95:a8:67:
58:12:f5:ee:d9:e6:dd:f8:6b:1b:6f:02:93:65:00:93:05:97:
8d:47:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:26 2025 by rpki-client