Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: g//bhsyrxOdxL0pPy3/qBvrjMxQEolWC+hXpIR42rJ8=
Subject key identifier: BD:D6:55:0D:C2:55:C9:B0:E7:80:9A:92:C3:21:8E:1E:EC:94:50:90
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 019A7301AC7A7C20EFCCB8D043591F970587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 1712
Signing time: Tue 11 Nov 2025 13:01:20 +0000
Manifest this update: Tue 11 Nov 2025 13:01:20 +0000
Manifest next update: Wed 12 Nov 2025 13:01:20 +0000
Files and hashes: 1: bOJn3C4X_HbVq1h6UbPmeHa89Xk.roa (hash: 0VXWmptilJp/NZdJSyteya06wYsuekGmJXgRcUTXwzQ=)
2: ri-zVL1OpUAxwvXX4JQ4t1YUuHM.roa (hash: Ck77Ae9V6KDMYJzNdjCSazt5tuNU78Yt+UmBsf4uG94=)
3: u_6Z2m-kttn1KGvW0DMCRJb-wGc.roa (hash: 8dKKNumWXSexpArn6diHEL6UixSl6qSaZ9jIxuDxNf0=)
4: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: CRsEPqzprUmKRt8BDoua8U73q8d1NhcUbknqO0fQ90M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:ac:7a:7c:20:ef:cc:b8:d0:43:59:1f:97:05:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Nov 11 13:01:20 2025 GMT
Not After : Nov 12 13:01:20 2025 GMT
Subject: CN=bdd6550dc255c9b0e7809a92c3218e1eec945090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:42:33:68:d3:7d:77:92:ab:40:6d:61:d5:
e2:c0:ed:19:2c:5b:22:de:7d:21:b3:45:3d:94:53:
3b:10:38:f5:a2:43:05:d2:90:8e:c0:a9:46:17:07:
02:ba:a1:ac:6a:49:5e:ca:dd:06:4d:2e:58:62:5e:
ef:2a:dd:64:09:29:54:7c:6d:af:ce:c0:00:45:72:
73:02:8e:ad:30:d7:5f:51:e4:27:b5:7c:a5:f2:99:
d3:8a:b4:43:c2:0b:47:eb:61:30:16:c6:1e:f5:6d:
f0:a0:1c:05:e0:b9:84:b3:27:22:0d:94:1d:ae:25:
08:2e:d3:8e:15:39:04:0f:b3:5c:f1:bb:4c:16:77:
75:36:2b:fe:9c:f3:96:1b:09:f0:29:f4:e0:7c:a4:
c5:47:1e:ec:c2:f6:27:df:86:26:3b:6c:26:a6:9a:
41:27:8f:08:ce:6d:07:69:6b:17:96:54:79:f7:ca:
ff:5e:96:e5:ba:00:c7:5c:94:12:19:62:ab:e6:d9:
40:26:00:cd:d3:0c:f8:cc:17:c4:aa:bb:83:5b:46:
8b:e8:0d:1d:b6:74:eb:a1:a9:4f:55:ae:e9:61:7d:
b8:d1:e2:45:1d:d0:0e:81:b5:18:c5:81:c2:2d:4d:
95:ab:08:64:f0:b8:1e:89:a1:98:44:57:a4:01:06:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D6:55:0D:C2:55:C9:B0:E7:80:9A:92:C3:21:8E:1E:EC:94:50:90
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a3:e3:8d:82:b4:f2:20:f8:1d:03:35:27:7c:c6:2a:0f:19:
ba:db:bc:83:29:77:45:b1:d8:61:f0:71:b4:6d:8e:5c:20:b6:
15:8f:34:4e:19:b7:0f:e9:86:ad:85:3e:75:de:55:e3:d3:d7:
40:0b:96:54:57:37:0f:39:e3:33:76:57:8a:09:5a:d0:72:5f:
8b:ca:2d:d7:f6:42:a6:07:f1:18:80:ef:d3:46:73:4a:3a:5c:
0e:cd:4a:92:d3:80:e8:2b:1c:fb:57:ee:5a:ed:70:2c:dc:00:
37:10:31:bb:30:d0:40:f9:e2:2f:25:3c:5d:c7:04:f0:f7:14:
f2:88:ed:1e:d2:08:0b:c9:bb:74:74:fe:d0:af:34:d8:6e:19:
40:94:bb:08:54:31:a4:b9:91:31:4b:22:4f:21:4d:23:54:3d:
7c:8b:a0:c6:0d:54:40:d6:59:01:68:3a:91:4e:e9:65:d7:e2:
fd:28:c0:b4:6d:eb:2d:43:eb:fa:1d:de:ac:82:75:dc:b4:af:
a7:a9:82:6b:23:3d:30:3a:1a:8c:28:57:25:84:db:68:ea:47:
42:eb:1c:bf:53:6f:b4:56:ea:29:59:19:b4:b4:8a:15:87:5e:
07:1f:1e:6d:3e:9c:ee:54:b9:1e:8a:f0:ff:e4:8c:48:b7:8f:
dd:fc:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:27:13 2025 by rpki-client