Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: 6UaaGFkIpPL6hisBIurezxig8UBG4jeQ+U6o4gSwx7c=
Subject key identifier: 02:6F:8C:AF:2C:D3:E3:48:78:AD:65:A1:B9:58:61:AE:41:0D:1B:A1
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019A70DBF3F626641C047FBC37837ABF2254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 03:00:54 +0000
Manifest this update: Tue 11 Nov 2025 03:00:54 +0000
Manifest next update: Wed 12 Nov 2025 03:00:54 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: ddzuJKDdfBfD05pd5AAViQoA2Pc.roa (hash: 2lQWzIDIqMXuR/qxqLFrOSTAaFdBjF2vdhRCL0julW4=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: p2hiMydPGOPq8mZb3CSILYr8dVe3ZGLjzntPbtlPgI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f3:f6:26:64:1c:04:7f:bc:37:83:7a:bf:22:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Nov 11 03:00:54 2025 GMT
Not After : Nov 12 03:00:54 2025 GMT
Subject: CN=026f8caf2cd3e34878ad65a1b95861ae410d1ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:5f:45:fa:02:fa:da:81:2d:03:b2:f4:93:
22:56:a2:c4:f9:b3:2e:57:24:be:77:b7:66:8b:06:
5b:5e:b3:0b:9d:ea:93:97:cc:bd:e3:e3:9f:55:ee:
d0:8d:86:9f:c0:09:06:6a:77:82:8a:a8:b1:a2:33:
50:b9:52:0e:9f:86:17:94:b9:fd:13:86:12:e5:00:
c1:ab:61:fe:0a:ba:b3:78:90:5b:07:18:43:cb:93:
e8:8c:52:5a:98:b3:3a:7c:aa:a0:fc:09:07:f0:ae:
d6:22:2b:fb:73:00:ec:be:31:13:68:6e:e8:f6:77:
e3:c7:27:65:da:ed:64:68:2f:19:a9:41:ce:74:63:
5c:c9:5d:d5:dc:7e:d7:46:1b:4e:d4:47:71:2d:ba:
9e:24:3e:8b:69:27:4d:11:8e:ee:0f:a4:4f:13:3c:
d1:50:36:8b:b6:5d:da:c2:e8:5c:87:5c:02:92:ca:
47:64:60:72:cd:b6:ad:f3:b7:54:b1:e7:f1:3e:45:
cf:8f:8a:66:d6:74:24:e8:2c:be:c6:4f:4d:04:45:
06:7c:60:49:66:07:ea:21:ce:a0:bf:b1:ac:f2:ac:
65:6f:75:10:5d:06:14:04:f2:b1:8e:2f:fe:0b:a7:
57:b7:8c:66:2a:e5:b4:b1:b2:ae:02:2e:1f:4b:75:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6F:8C:AF:2C:D3:E3:48:78:AD:65:A1:B9:58:61:AE:41:0D:1B:A1
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:72:05:df:d6:ff:b3:8f:7a:7d:af:59:93:e4:e2:70:5e:82:
b0:35:70:18:79:a3:36:47:a1:70:a1:76:c2:ec:fa:ac:38:76:
93:6c:a5:bf:2b:e8:25:92:b0:e1:54:e6:b8:01:4f:d8:19:d4:
5f:6f:4a:61:04:cc:24:b3:15:63:a5:de:cb:17:7f:9c:95:6c:
df:36:0c:66:34:17:d2:22:81:53:da:4a:28:5c:dc:8f:1c:36:
e8:79:c6:1a:f4:00:e6:67:28:e3:57:c7:e2:51:d0:0c:24:2a:
ae:f7:ed:d8:20:1c:19:a0:9d:3e:7c:b3:d8:96:6b:66:9b:cd:
36:fd:05:53:fa:17:fb:12:1d:a7:2a:33:b9:36:44:8f:a2:4f:
54:ae:bf:b2:66:0a:6c:f2:6c:6e:e3:fc:68:a9:4a:a4:b8:fc:
c7:e5:22:5a:61:d2:59:93:77:8c:33:32:ed:99:6b:cb:87:56:
7a:98:fa:84:da:80:57:72:c9:9f:1b:05:45:4d:b0:3e:66:03:
f0:44:e5:5f:aa:83:f9:bc:64:70:b9:30:eb:d2:1a:e8:18:fc:
2a:f9:03:bf:34:86:6e:61:c0:3b:50:8c:4c:29:62:3e:7c:83:
7c:86:2e:fe:a7:85:84:ce:9e:0b:2c:8a:d9:c8:f5:55:4d:56:
54:89:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:27 2025 by rpki-client