Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: 2Ww1BacMSy39sjmq/GXWoPEVjTBcR66QgJwrFk9x30U=
Subject key identifier: FF:2E:98:F2:48:F0:D1:C5:D0:C7:2B:1A:9F:B7:E5:AC:2D:26:E8:80
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 0199FFC74E4C20D9BDA31E83C0B0EB31F32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 04:01:15 +0000
Manifest this update: Mon 20 Oct 2025 04:01:15 +0000
Manifest next update: Tue 21 Oct 2025 04:01:15 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: HBpgxjeooubUkHrRNywOXt4gqYwvuw630azvqVCowes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:4e:4c:20:d9:bd:a3:1e:83:c0:b0:eb:31:f3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Oct 20 04:01:15 2025 GMT
Not After : Oct 21 04:01:15 2025 GMT
Subject: CN=ff2e98f248f0d1c5d0c72b1a9fb7e5ac2d26e880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:1f:19:02:d1:9b:cc:17:de:67:c9:b4:8e:
44:a5:51:e1:b7:31:83:9d:36:2f:4e:68:3e:09:4f:
49:3f:56:ad:e1:d8:9c:9d:ee:70:19:ca:49:2b:0c:
97:ff:1d:0e:e1:8d:21:f9:a3:ee:6c:ff:34:64:cd:
f2:a7:27:81:e0:b6:bb:a6:78:49:8c:67:da:7f:e8:
15:f6:86:54:e2:f9:ed:29:ed:3a:0a:1c:2e:78:62:
d4:f1:02:10:ea:05:4b:75:c3:b8:96:ca:06:3a:8e:
41:80:25:e4:db:7e:3f:d0:57:45:09:cf:0e:87:f3:
db:ed:98:be:10:cb:bf:b9:ef:ec:62:e3:c8:74:b8:
f9:42:63:cd:b2:8d:e3:4c:14:dc:83:b6:d8:2f:f8:
62:54:c1:c2:ba:ee:0c:18:48:0f:0f:b9:77:9e:d0:
18:63:f1:0c:94:a1:f8:5f:19:82:65:b4:36:e4:98:
59:55:ff:b0:87:69:f4:85:70:0c:a0:a9:d6:97:68:
e3:69:c2:94:49:b9:2c:f7:28:e1:a2:a0:03:df:26:
2f:bb:5a:b5:3d:7e:1d:1c:ad:52:dc:12:5c:cc:f8:
39:6c:19:ba:36:a6:c2:51:f3:2b:f1:63:ec:2a:b2:
2b:c8:fc:2c:2b:e9:b9:8a:7a:36:38:c0:ab:0f:ff:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2E:98:F2:48:F0:D1:C5:D0:C7:2B:1A:9F:B7:E5:AC:2D:26:E8:80
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:03:76:b5:70:b4:7a:44:d9:52:6f:33:2e:70:31:ca:25:05:
32:b6:4f:64:2b:65:a7:56:d7:83:d6:72:72:4f:4b:32:c4:f5:
36:4e:50:cc:86:cf:64:11:dc:0f:a9:95:08:1d:50:b0:5c:d7:
87:b0:04:37:29:ef:ee:5e:ae:8d:b6:66:80:47:7a:95:96:8f:
1c:ba:fd:93:0b:00:ab:1f:6b:d4:1f:ac:7a:7d:51:b6:aa:3d:
5a:7a:96:eb:5b:e2:a6:aa:c0:e4:19:9a:53:52:8f:de:d3:39:
19:8d:cc:f2:78:1c:21:b2:d5:ea:b3:aa:5a:cb:af:0e:9c:c2:
e9:67:75:be:73:0c:7c:e9:f2:05:7b:e6:e4:65:43:0d:9a:67:
e9:0b:86:c2:d6:a3:b6:0e:0b:2c:f2:f1:d1:06:26:de:9e:82:
32:a2:2e:f9:93:92:f1:6c:74:8b:b3:a0:1d:3b:7f:d2:6a:8f:
73:e8:ca:9b:0b:e0:b1:8f:20:37:77:a9:95:7b:d2:d0:40:d4:
2b:f6:94:ff:2e:a5:13:98:d4:a5:0f:f3:dd:06:35:12:4b:c3:
57:62:a6:af:ab:c0:7d:db:f1:13:70:63:7d:a5:85:99:20:1b:
85:e7:6f:16:e9:e5:51:f1:7c:b5:c8:51:f4:b8:64:0f:81:f4:
a4:f2:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:31 2025 by rpki-client