Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier: UZwbNJ1q9BwTqz46qwLlOVL2Kpt5NThd+Ttz2Li0F/0=
Subject key identifier: 81:EA:69:54:C2:AF:46:18:F0:A6:C8:8D:02:F0:97:9B:F6:27:A5:92
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial: 0199C30DA4E07ED6C4B24DCF08C5CB616942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number: 0518
Signing time: Wed 08 Oct 2025 09:01:14 +0000
Manifest this update: Wed 08 Oct 2025 09:01:14 +0000
Manifest next update: Thu 09 Oct 2025 09:01:14 +0000
Files and hashes: 1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=)
2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: MOofiBkfA9/uypJ6CBJOYNPHzXUMYaUiiArsMOoPUQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:0d:a4:e0:7e:d6:c4:b2:4d:cf:08:c5:cb:61:69:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Validity
Not Before: Oct 8 09:01:14 2025 GMT
Not After : Oct 9 09:01:14 2025 GMT
Subject: CN=81ea6954c2af4618f0a6c88d02f0979bf627a592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:12:e2:65:ea:ee:f3:de:14:b3:4b:a4:62:
7e:72:30:e3:5f:70:4e:12:d9:ba:d7:f6:f9:cc:13:
5c:ce:37:79:12:92:b0:98:26:78:24:32:e8:c8:c3:
51:0c:9b:47:46:17:a5:fb:6e:c1:4a:71:ee:b1:34:
02:99:94:f5:4f:8a:6e:f8:bb:4a:1e:d4:20:2a:28:
d5:79:ae:1a:99:ab:f5:24:70:4b:f4:04:92:4b:3d:
cd:dd:f6:35:9e:f2:fc:8f:47:27:d8:a6:a8:d3:3f:
62:54:9a:da:32:18:9c:b2:5d:9d:06:e7:50:25:b3:
ad:38:f7:d9:fb:e5:51:15:00:99:1e:17:5b:7f:59:
79:49:5d:02:f4:b2:df:e2:e9:a9:09:84:34:c7:43:
9a:c4:ad:50:a3:08:d0:b2:0b:56:a1:94:39:f4:37:
3f:9b:c3:66:35:71:a5:51:0f:ef:08:a8:15:4f:01:
b1:8a:31:51:d9:eb:85:6f:77:ab:03:fe:29:05:fb:
c1:d6:33:fe:2c:4a:b6:90:94:c1:4a:d3:36:94:7e:
56:f1:48:40:d2:de:17:6d:85:10:04:fb:43:b4:50:
8f:77:41:bb:48:c6:fc:bf:46:fa:33:84:29:eb:89:
4c:6c:fc:66:6b:07:41:f1:ab:50:b5:94:9f:f7:20:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:69:54:C2:AF:46:18:F0:A6:C8:8D:02:F0:97:9B:F6:27:A5:92
X509v3 Authority Key Identifier:
keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3b:75:2f:ca:39:e9:d5:84:6d:18:3d:13:3a:7f:e9:df:b2:
34:65:79:e3:c9:92:a1:c6:da:c7:39:a1:57:41:e3:a2:43:f7:
0d:44:b9:4d:44:d5:e7:64:fc:7a:26:b2:7c:47:3c:9d:9f:7f:
e4:db:b3:e2:e3:5a:fb:04:4b:b6:06:51:db:0a:e1:23:87:20:
e4:68:b7:cd:74:c4:0a:bb:f6:ad:d3:a9:84:74:7c:aa:15:f0:
b0:54:65:01:e5:8d:91:a9:60:93:bb:99:fa:56:66:8d:04:48:
d6:5e:2d:34:54:15:2c:fa:87:a6:cb:1e:14:66:a6:fc:68:f6:
31:0a:26:93:bd:42:3d:e5:09:6e:97:3c:b1:28:8a:ff:9b:67:
da:40:49:14:c8:c0:f7:8d:6f:ef:44:72:31:5c:49:71:74:00:
1c:fc:6d:bb:4d:a0:f8:47:05:93:00:48:cd:87:09:ec:7a:4d:
ad:81:8f:23:c3:5e:7c:a3:ca:28:b8:dc:97:5f:d8:fd:d2:e2:
7f:a1:4d:e2:10:90:13:e5:cc:c9:39:60:c4:aa:07:e7:45:07:
f3:e5:58:a3:dd:d0:17:16:5f:d1:48:68:94:00:d1:d0:1e:bd:
c5:c8:eb:b0:28:5a:80:f9:44:32:dc:91:83:47:0a:a8:36:32:
b0:b4:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:25:19 2025 by rpki-client