Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: KLTK1PG8D1tcZ+pX9HeqkKVG2sAgbVIUmIsRaUujuIY=
Subject key identifier: D9:E3:6D:1A:96:0D:4F:A5:2E:0F:27:86:46:AC:F2:14:0F:AE:71:D5
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 019A71B84358F9C25B5BA134E0091747B03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: UZyv342syJ6C6VRajPKyv4DwT02Z7fOYZGSnGQ2d8Tc=)
2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:43:58:f9:c2:5b:5b:a1:34:e0:09:17:47:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=d9e36d1a960d4fa52e0f278646acf2140fae71d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:48:aa:b8:9b:cd:67:dd:d6:8f:ea:9c:fd:18:
d2:ea:1c:44:21:f5:f2:ca:c8:76:05:b5:c3:8c:61:
94:2c:86:24:6b:cb:c4:a0:79:31:3e:1c:40:98:68:
04:b4:59:5a:59:bf:bf:1f:34:55:60:99:f6:84:3b:
6b:fa:f4:96:f6:a4:bc:47:35:c2:5d:57:3c:20:d8:
30:a0:81:a2:32:bf:7a:37:3e:24:6f:e7:30:66:a7:
64:ba:4d:16:aa:f2:4b:68:d6:b2:0a:39:c2:5b:99:
e7:9d:e3:61:d7:37:49:d8:f3:8a:2f:d0:f2:5d:e0:
80:76:f2:03:25:78:9f:8f:b8:93:db:d4:86:e5:ec:
02:d3:a6:3a:35:33:14:09:5c:c0:82:0d:20:12:92:
99:25:ff:d5:af:9d:a6:29:d4:d0:ef:26:fc:83:c3:
f7:3d:4d:5b:98:93:59:d3:92:b0:dd:5e:7f:f6:2a:
de:97:18:1a:35:4d:e1:46:7f:d4:44:01:e9:42:0c:
b9:a1:a1:b7:9f:bb:0b:f9:9b:01:28:1b:63:bd:be:
b9:b7:db:c1:d9:d8:8a:8c:14:56:a9:a8:bd:a3:18:
86:a9:d4:06:fa:51:34:e0:b8:ea:35:06:e8:81:c9:
39:27:99:be:ce:f7:44:af:c6:06:07:84:3a:7b:99:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E3:6D:1A:96:0D:4F:A5:2E:0F:27:86:46:AC:F2:14:0F:AE:71:D5
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:16:08:88:6d:6e:f3:00:17:ff:b8:7a:4c:f6:58:f0:be:3c:
2f:6d:90:c1:71:e1:d3:1e:1a:f9:7f:1f:4e:03:cd:a4:28:f9:
37:b2:95:58:ad:b0:a1:9b:a3:fc:73:b1:8a:2c:f9:75:b4:cb:
57:08:38:21:ee:db:66:81:b0:89:78:68:5f:74:a4:b4:f3:d5:
6d:1d:49:5e:55:9c:e0:44:0a:ec:e7:76:6e:28:0b:4b:e3:48:
c1:64:72:8b:74:86:3a:4a:d1:ae:53:8b:0d:d3:6d:82:29:7d:
74:8a:78:ef:4b:ba:6c:2b:12:e1:9a:13:24:c7:ad:59:ba:ee:
58:49:9e:55:fc:1b:b0:c0:bb:10:0b:03:51:73:7f:70:df:2e:
20:ec:89:b8:76:ff:2b:e8:f4:fb:e6:25:5f:61:80:e7:f7:b5:
db:55:fc:ad:3e:6a:53:5d:a7:95:7b:7c:f9:25:c8:09:41:06:
ad:e4:dd:c1:bd:89:79:d3:66:0b:68:5a:75:1d:99:ae:e5:a3:
60:1c:4c:1f:93:84:a0:cc:5c:be:c8:05:06:a9:ec:6c:fa:54:
ea:6a:4b:9c:5b:f8:c0:47:26:6b:d5:b8:84:e9:64:ce:0e:11:
07:7d:eb:42:e8:a5:32:c5:ba:2e:38:57:73:1c:0f:0a:48:a6:
a8:75:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client