Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier: mpRRr14aNDXrHUsyJpuMoQZKr+nW4lmo36wrcPbsULM=
Subject key identifier: 1F:7F:A3:F5:1B:71:9E:F2:FA:B8:CE:ED:51:40:B8:EA:74:C1:ED:C5
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial: 0199FD343A759098613F349DE5C545859E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number: 0540
Signing time: Sun 19 Oct 2025 16:01:22 +0000
Manifest this update: Sun 19 Oct 2025 16:01:22 +0000
Manifest next update: Mon 20 Oct 2025 16:01:22 +0000
Files and hashes: 1: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (hash: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=)
2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: Lc4m1XfzFCO3RcYOUvulAwC4nPXnUQ/rtdtRFFVMbeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3a:75:90:98:61:3f:34:9d:e5:c5:45:85:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Validity
Not Before: Oct 19 16:01:22 2025 GMT
Not After : Oct 20 16:01:22 2025 GMT
Subject: CN=1f7fa3f51b719ef2fab8ceed5140b8ea74c1edc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:46:9c:dc:e5:ad:e7:96:8b:03:22:ff:c0:
de:f0:14:61:af:a4:9b:bf:25:79:a7:11:58:39:e2:
0e:6b:84:69:bd:56:63:9f:6d:be:66:48:62:9e:35:
cf:08:29:e6:28:7c:8d:72:a5:da:da:9c:c1:da:76:
90:5b:fe:3f:13:8b:c1:a6:ec:a9:11:d4:14:74:db:
9b:10:c1:ff:fb:7a:7d:44:d8:fa:dd:3e:ab:1e:e7:
2d:5f:46:b0:6e:e4:81:7f:c8:b2:4e:99:74:87:e6:
6f:44:c5:fa:fa:d7:7a:51:e9:ed:b1:3d:47:1c:d9:
38:5e:15:a0:fc:d4:10:5f:51:87:72:88:20:da:34:
e8:ab:ea:a1:b7:aa:1b:e3:f5:76:70:7a:4d:7b:63:
46:fb:88:59:ef:25:a1:cd:45:1c:8d:d8:1e:27:89:
c0:d7:61:99:8f:02:65:f9:d4:d1:26:57:f7:6e:20:
75:44:52:61:4d:fb:50:75:c5:ec:d3:89:42:3f:93:
a1:b7:32:2d:cf:b5:3b:64:07:7f:5a:38:0d:f9:84:
ef:f1:21:d1:9e:29:71:5b:20:1f:f7:dc:05:3c:a1:
72:42:b4:48:d6:2f:02:5b:96:d7:c4:7b:d9:28:d1:
ce:b7:8b:1d:97:1b:f0:fd:3b:6a:93:d4:d2:50:9c:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7F:A3:F5:1B:71:9E:F2:FA:B8:CE:ED:51:40:B8:EA:74:C1:ED:C5
X509v3 Authority Key Identifier:
keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ae:bd:82:e3:93:49:35:07:f3:0f:4a:d3:d4:29:09:58:a7:
f5:4b:25:f5:91:8a:c4:23:66:c4:f7:89:d7:72:39:37:97:79:
e2:34:5a:f6:28:b1:eb:63:42:fc:2a:67:35:2a:34:45:76:42:
d1:1d:bb:c9:ea:e1:bf:5a:7a:44:df:46:58:14:43:57:ec:2e:
eb:29:38:2e:00:94:82:83:b9:69:0c:57:c5:f2:84:fd:5d:c9:
a0:be:f1:4e:2d:fb:81:ec:4c:36:e5:0c:77:90:07:3f:b2:d6:
42:2e:8d:17:26:4e:ba:1d:4d:13:52:9e:7a:23:16:c7:6d:24:
12:74:9e:b6:93:16:c2:bd:8e:c9:81:fb:70:d3:e3:bb:06:68:
e5:45:26:14:4a:66:2a:f8:d3:61:e6:c8:49:0e:28:dc:a5:a0:
7e:13:c5:92:1f:90:8f:25:7e:38:c1:c2:03:f2:27:e6:42:ee:
8c:91:96:71:2a:cd:d7:95:da:48:9b:7b:56:4e:8b:dd:cb:ff:
ad:d7:8e:8e:b6:ab:2b:01:71:25:18:10:51:f7:9b:b6:9c:25:
c5:89:aa:c0:23:10:b6:0c:5e:07:50:04:3e:a9:66:18:75:4e:
c2:f2:5b:f5:a7:09:c2:4a:fe:10:fe:6a:8c:5d:f3:50:4f:94:
38:61:50:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:13 2025 by rpki-client