Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: YG6DwT4zhFFJ2BAEg4np1mbgG/j5/AVML5xEmqnWabs=
Subject key identifier: E1:6E:26:DF:BF:86:E0:3B:92:54:2D:92:79:AC:F2:BE:35:CF:F0:8B
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 019A56AE2756A6C9BA2C482194FE215ECC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 1714
Signing time: Thu 06 Nov 2025 01:00:45 +0000
Manifest this update: Thu 06 Nov 2025 01:00:45 +0000
Manifest next update: Fri 07 Nov 2025 01:00:45 +0000
Files and hashes: 1: 6thBO5jod-S22ld5I7cCUqU9PPU.roa (hash: whhraWURnepuYYNpLNQlvK7It8S7aCrmfs8zXpfqsOc=)
2: bNZ4Q9wcD7yZAP2RwlbB4JNFkjQ.roa (hash: JZzkHPxKw9rE1eeiiSJfGm5FFzPkvIECAGzsNfZT2+0=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: Zc0ypJqbSLzkwtiTVpLd6EQAk7phf6yjZ/oa+kTrFlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ae:27:56:a6:c9:ba:2c:48:21:94:fe:21:5e:cc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Nov 6 01:00:45 2025 GMT
Not After : Nov 7 01:00:45 2025 GMT
Subject: CN=e16e26dfbf86e03b92542d9279acf2be35cff08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:2d:41:c4:17:7a:44:11:b3:a1:2b:2c:b2:
6a:a5:43:d3:81:ab:b5:6d:7f:88:f7:9b:87:fb:f0:
1e:35:a0:ab:a0:28:a8:a5:f5:93:84:1a:58:bd:b0:
2e:ca:23:1b:8a:9d:aa:67:51:19:56:a8:ad:c9:f0:
82:10:19:ee:d4:da:98:02:d1:28:15:01:02:e4:85:
ca:b7:16:1f:16:17:f8:ff:47:b2:ef:46:cf:64:9b:
74:37:21:37:77:1f:31:c1:52:1e:3e:a1:70:4d:4d:
75:a0:e3:fc:93:58:f9:47:6e:5c:15:98:39:73:b7:
02:de:28:ab:b5:0f:dd:4a:ae:32:72:1a:5a:cb:54:
2c:f0:1d:13:69:1d:cb:01:20:f6:f7:18:70:45:5c:
87:c8:b3:c9:c0:e8:b5:ca:2e:e4:cb:69:df:70:ad:
be:7f:8a:38:0a:80:95:b9:c2:7f:27:fa:cc:c1:6e:
22:d5:94:c1:ab:dd:ab:23:98:9a:3b:65:55:59:70:
e9:10:f3:46:46:93:76:96:44:04:2b:ad:32:a3:48:
81:59:dc:c1:cc:46:ad:91:23:71:c4:86:2b:62:f0:
18:6d:e0:10:1c:8d:f8:1b:cf:34:74:a6:33:2c:fe:
7c:5a:1d:93:49:05:7d:64:4a:04:80:54:7a:a7:50:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:26:DF:BF:86:E0:3B:92:54:2D:92:79:AC:F2:BE:35:CF:F0:8B
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d5:27:3f:93:74:f0:47:e7:2d:9c:62:84:42:8f:ac:a9:09:
80:ad:c3:19:00:ca:c7:ad:2d:54:c1:7a:e7:66:26:a2:f7:a3:
bd:ca:2e:86:41:9f:91:8c:7c:92:24:dd:df:50:68:d6:88:c5:
e2:75:bd:3e:9e:69:d3:d7:d0:a1:29:46:dc:15:89:5c:94:21:
3b:9c:64:ed:68:01:94:aa:c0:51:4d:13:96:c6:2c:02:aa:13:
8d:74:64:a3:d2:23:a9:f6:82:ee:c5:cc:bb:4e:e9:e2:70:4d:
09:3c:a4:2b:6d:60:a5:3b:ef:b6:93:f5:52:f1:57:45:03:99:
60:e5:54:e9:5e:bc:29:a7:03:f2:1f:b0:a3:35:a1:69:9a:2f:
58:64:9c:f2:60:f5:52:a5:d9:e2:89:7f:69:2d:23:03:83:62:
6e:30:08:6d:5e:51:a2:11:22:da:d0:2f:41:b1:11:fa:30:da:
4f:ce:08:9d:95:e5:5c:8c:48:fc:75:70:45:6c:63:96:5a:57:
f4:9d:8d:b9:1a:07:2b:f5:28:4c:80:b7:8c:4c:87:04:b2:f3:
68:24:a9:c7:2e:5e:1f:26:5d:9b:a1:ed:96:4f:f3:79:e0:74:
b9:e5:62:b4:ab:66:e0:34:cf:8a:aa:bd:98:14:5e:9a:98:75:
11:64:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:01:11 2025 by rpki-client