Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier: NGigYwcL/Zj5efv41dywB+z/9w2VD8z+iBScGujIVC0=
Subject key identifier: 5E:1D:8C:13:90:B4:9D:5B:96:8B:02:09:17:57:1F:3E:00:49:1F:43
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial: 019A71EE689C708A45578E6BAEEB9DD26252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number: 01AC
Signing time: Tue 11 Nov 2025 08:00:40 +0000
Manifest this update: Tue 11 Nov 2025 08:00:40 +0000
Manifest next update: Wed 12 Nov 2025 08:00:40 +0000
Files and hashes: 1: IqlpwJ2xW0fAs8ZGPBfSTtIDhwE.roa (hash: qbO1Ww6u5GvjQ0O8Z6mDFqL7l1gHc63dxnum3Lg38lg=)
2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: tF8RWpEiVqxsdDjGeUor+9cD+DzWNfDdJlzXyrsFgyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:68:9c:70:8a:45:57:8e:6b:ae:eb:9d:d2:62:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Validity
Not Before: Nov 11 08:00:40 2025 GMT
Not After : Nov 12 08:00:40 2025 GMT
Subject: CN=5e1d8c1390b49d5b968b020917571f3e00491f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:59:9a:01:57:12:5f:a8:5e:c5:a6:89:03:
2e:0c:b1:2a:46:d7:a0:e4:5c:2c:0c:bb:e0:71:f5:
20:ae:83:ae:1f:1f:81:08:42:24:d5:8b:8a:ad:5f:
d4:e0:9f:3d:81:38:b9:e4:c6:29:0f:f2:31:fa:aa:
4e:71:e4:02:13:ec:84:ec:f7:09:9a:8a:16:aa:68:
5d:b3:68:10:e8:e1:cb:da:72:46:6a:e4:80:99:da:
b8:7e:9a:4a:2c:f5:b0:3f:fe:45:7f:84:31:df:8a:
11:7d:6a:c8:b7:91:fe:8a:d4:eb:27:52:fa:42:2e:
4d:ba:db:bf:b9:4c:94:03:ac:6a:21:5b:0f:ef:34:
b9:e9:45:5e:66:e1:be:28:f8:0e:ed:7b:25:75:3a:
0b:6c:f7:f9:57:aa:cf:a8:6c:35:bc:6e:4a:23:f0:
7c:4d:4b:e2:0a:05:a3:9f:38:ac:b2:1f:4d:2d:67:
3f:b1:34:e3:91:29:de:2f:09:f5:37:5c:22:97:9c:
d4:7a:08:a0:10:ca:47:5f:33:27:17:fc:89:8c:95:
5c:6a:d5:75:77:66:36:33:51:f3:7c:df:b8:59:d7:
97:f1:11:ed:32:97:da:2a:28:36:33:7a:81:f0:eb:
30:86:c9:18:57:31:64:a7:87:59:0b:2b:f1:3e:47:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:8C:13:90:B4:9D:5B:96:8B:02:09:17:57:1F:3E:00:49:1F:43
X509v3 Authority Key Identifier:
keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:71:f6:77:b2:fc:b9:12:ad:99:3c:be:1f:04:0d:3a:75:35:
f9:e7:68:73:97:86:b2:a0:34:13:30:bc:77:53:ed:4f:fc:e3:
4b:d5:5c:14:70:b0:c0:cb:7f:c0:8f:6f:2f:89:c1:9f:7c:b4:
f9:4b:06:2d:33:05:0f:4d:06:82:0d:ae:35:47:9e:69:88:02:
cf:2b:6e:33:d4:c3:1d:72:d0:67:3a:02:1e:45:af:d7:69:61:
ef:22:1b:9f:4b:d6:87:f1:48:7d:1b:02:a1:78:3a:38:30:c1:
b3:b9:c7:e9:a8:29:cd:de:c7:c4:4a:8a:f8:5d:d0:b1:bf:11:
bc:f3:32:63:54:2e:76:a3:df:63:6d:a9:3c:a3:33:3d:25:1d:
3d:11:95:12:ea:47:9f:b9:b7:44:8c:66:4c:c4:3a:e3:0d:05:
f8:b1:7a:60:6e:8f:16:31:1f:76:a6:39:b9:6c:32:23:90:e1:
67:a8:6b:cb:26:dc:9e:ad:6f:5c:15:01:1f:92:12:ac:92:7e:
06:75:f2:5c:f6:c0:25:65:6f:ee:7e:f7:f7:d7:f6:29:f1:ee:
a8:2b:da:19:ce:0f:e5:bc:5f:26:0c:4d:cc:d2:52:30:47:db:
95:ce:1e:08:5f:72:93:e3:d5:5a:c2:a6:fc:db:ef:fd:72:cd:
70:f8:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:35 2025 by rpki-client