Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: xROJymna6FWIUJKPUW8WJ5PdNMZjicDAH8qCHVswxdo=
Subject key identifier: 2E:E8:F0:BF:06:E8:23:1F:C0:65:B0:7A:3F:52:D5:14:8B:4E:EF:FC
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 0199FBEB129E8E0E28DFBB1528312F68B290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0A17
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: lqvt5fXG8FdWH+7B/rpoxRxDsfop1Pir5SxsmPcv3L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:12:9e:8e:0e:28:df:bb:15:28:31:2f:68:b2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=2ee8f0bf06e8231fc065b07a3f52d5148b4eeffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:72:93:f4:f0:f0:ef:2d:4e:23:58:42:7d:c0:
b3:d7:6c:cb:9a:aa:69:17:e2:a6:ca:93:20:69:d2:
89:b6:62:3f:fb:60:51:49:9a:51:83:b2:a6:b1:7f:
da:31:95:4e:db:bc:c6:ce:28:0c:db:11:07:5c:42:
1d:e7:56:ec:93:96:80:cd:b7:5e:6e:ce:57:78:a0:
16:b8:fa:c4:3b:64:e8:e8:de:65:d2:d8:8e:93:50:
e0:48:6b:00:bd:43:e2:7d:16:b5:45:67:61:34:6a:
70:60:da:57:b0:4f:ca:db:21:b9:11:b5:ed:86:8c:
7f:db:a2:3b:74:97:2f:5c:a1:42:2e:e0:92:cf:04:
48:91:67:8a:08:88:27:33:51:32:9c:6a:6a:de:08:
d9:5e:3a:ad:a5:fb:e7:2d:7e:b5:e5:89:d1:cb:32:
7a:e6:f4:bb:08:2b:94:86:5a:79:e3:8f:71:2d:13:
e8:cb:78:b7:8a:f7:4b:ef:92:a1:b3:d5:45:e8:68:
62:c6:02:98:14:7d:f9:7a:55:be:7a:f3:4c:2b:b1:
e8:26:96:ca:77:3c:27:5f:79:36:81:8d:ec:ad:0b:
ea:e0:a2:5e:c5:ba:6e:4f:2f:c1:34:86:ec:16:cb:
6c:ef:7c:ce:34:6b:7a:9c:30:7d:dc:38:60:fb:98:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E8:F0:BF:06:E8:23:1F:C0:65:B0:7A:3F:52:D5:14:8B:4E:EF:FC
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:00:8f:3e:84:98:53:bd:c8:f1:4c:63:35:3b:30:6f:49:
5a:92:6a:36:3a:67:fa:6c:9f:bf:83:5b:bd:bc:01:d6:87:96:
57:d5:19:90:41:9b:40:91:28:fe:e3:0d:61:95:e3:45:d0:ba:
ca:64:08:4f:9b:81:3a:ca:7a:a7:c4:6b:d5:33:3b:eb:6a:83:
b5:bc:98:ec:29:3e:41:4d:12:8d:36:74:6a:0b:da:b9:a7:f0:
08:e6:7b:1a:67:71:20:de:84:8d:d5:4b:90:b6:7d:e0:4e:81:
c4:dd:f1:56:07:6f:4e:50:3f:84:93:c0:a7:e4:cf:c2:e0:23:
e7:79:8a:61:12:66:df:16:4f:00:7b:b1:b5:cc:c4:b4:2d:87:
37:36:e9:70:39:c6:d6:a0:0e:b5:2d:14:24:08:61:0b:04:c3:
af:9a:d0:bf:99:b2:cc:d3:25:b2:8b:98:1a:47:3e:b3:0a:bc:
47:ba:96:71:b9:50:49:7e:96:9e:41:a4:61:95:db:5c:9e:c4:
97:fd:b2:5c:0a:df:1e:3c:db:98:2e:31:78:0d:3b:9c:d7:46:
b1:79:5a:31:7b:38:b3:ec:93:03:05:c0:94:aa:db:ee:4e:0f:
b2:ef:98:f4:52:0a:38:cc:0a:a7:f5:31:58:c3:6c:e8:73:d3:
bf:12:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:57 2025 by rpki-client