Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: uDtp8pQsTj2AZG+q5EzeTFCP3ZjtYQmzjsh7lXQ2uaY=
Subject key identifier: 05:66:22:E6:10:5F:40:DA:B8:79:F8:9D:AC:11:FB:8A:14:C7:45:6F
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 019A725C52922D5E867CE570A63B0F6CB4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:44 +0000
Manifest this update: Tue 11 Nov 2025 10:00:44 +0000
Manifest next update: Wed 12 Nov 2025 10:00:44 +0000
Files and hashes: 1: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (hash: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: uyn3MJKi5/YTGQvMWDiT4CAeCfqqId0ei8agWnKTAgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:52:92:2d:5e:86:7c:e5:70:a6:3b:0f:6c:b4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Nov 11 10:00:44 2025 GMT
Not After : Nov 12 10:00:44 2025 GMT
Subject: CN=056622e6105f40dab879f89dac11fb8a14c7456f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:68:17:db:46:86:fa:e2:31:f9:21:f1:04:
24:6a:ca:68:12:c9:b5:b4:90:1d:fa:e6:ee:59:51:
58:55:93:a6:1e:22:f9:dd:1f:47:df:29:04:f1:06:
98:28:50:e9:67:32:56:c1:ee:56:33:1e:12:90:21:
8b:c7:cc:bd:0f:fc:38:b0:1f:04:82:c6:d2:15:21:
24:39:19:13:1d:e4:95:35:0c:be:81:62:c1:7d:4f:
8d:c0:cc:da:08:17:c8:0e:74:f2:ef:26:90:5f:9c:
13:ae:f5:1d:4b:38:1c:ab:58:3a:18:03:eb:e9:0c:
da:68:fa:93:62:db:36:39:25:4f:a0:60:d1:a6:91:
f8:27:64:26:d7:ed:d6:12:c2:c8:75:c4:fa:3e:eb:
af:6c:9e:51:d6:d2:49:54:ae:66:7b:26:83:71:2d:
90:7c:f0:7f:1e:22:13:89:29:dd:7e:17:2d:1c:83:
8c:fc:cd:09:2e:2b:70:24:12:50:a6:42:58:c5:95:
5b:fd:9e:59:a9:ce:47:49:60:ba:16:d6:51:fa:16:
3d:da:69:44:9f:04:ca:53:ed:3a:ec:17:09:f8:4b:
e1:e4:3c:90:da:eb:74:5e:5e:a4:09:f4:66:41:5d:
95:ec:bc:4d:93:2b:1e:31:4b:67:04:7c:e5:16:25:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:66:22:E6:10:5F:40:DA:B8:79:F8:9D:AC:11:FB:8A:14:C7:45:6F
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:94:31:dd:59:5a:1d:33:fb:ac:18:56:66:47:b1:55:4c:0d:
4b:4a:a0:1d:1b:d2:d1:f1:2d:3b:78:b2:c0:60:86:30:8f:d3:
43:f2:b8:6f:e9:f5:ac:88:83:93:b7:8f:63:0e:81:07:70:37:
53:78:3e:92:21:7f:b7:46:4f:e3:af:3f:c0:ce:0b:a6:a6:13:
ad:43:e1:20:45:56:4d:b9:9a:71:cb:65:81:18:57:d9:61:0b:
ef:a4:cd:63:42:bc:25:9d:7f:8c:3b:ab:40:ad:94:23:c7:2e:
69:48:b5:9e:21:01:e9:d7:7e:50:91:7e:59:55:79:67:54:9a:
38:a5:bd:2c:e9:eb:16:c7:11:05:71:19:f3:93:f9:a7:d1:ef:
24:88:e3:e5:53:96:49:45:89:6d:2f:ed:e3:87:79:44:5f:31:
55:ac:05:c6:eb:d1:75:52:39:7a:a4:ca:0c:a1:55:df:97:4b:
fa:d8:a6:72:5f:b0:6b:88:ab:51:4e:c2:af:0a:97:82:90:fb:
e7:25:37:fd:c3:b1:94:d0:48:08:15:23:a3:f0:c6:c0:c5:2d:
cc:86:85:d3:f3:01:68:58:a8:fe:1e:cc:0d:68:83:1f:2d:d6:
41:d7:1e:cc:4a:7e:05:86:5c:f6:00:d5:15:2e:97:a3:b9:91:
17:fe:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:27 2025 by rpki-client