Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: Ri5J8lG7EfWtR/+3usYjRzzajqLOJdYKAvoWavSqLvc=
Subject key identifier: D2:39:0B:A5:4F:85:AC:84:01:3E:1F:8A:0A:6B:00:AF:71:7F:8C:7C
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 0199FCC6AA8D364FE29062576C404E7A5FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: 2iIoFLvuq/Pc0aI0PnJjxR1QYCB3IQETt7r5xkRvIFw=)
2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:aa:8d:36:4f:e2:90:62:57:6c:40:4e:7a:5f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=d2390ba54f85ac84013e1f8a0a6b00af717f8c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:f4:ab:5e:dd:07:d9:4f:8e:57:b3:78:62:
59:4c:7f:f7:47:24:42:02:41:69:38:b3:eb:5e:f4:
66:4f:71:68:e5:b7:f7:59:58:ee:ba:37:4c:66:9d:
94:71:f6:9f:eb:1e:70:20:d0:a4:1b:54:e7:31:14:
e8:67:85:f4:92:68:26:ec:9a:ae:41:7a:a9:2e:98:
d3:11:0b:bb:77:2e:1e:a9:81:87:96:c1:a3:74:4c:
47:c4:7b:37:5e:e5:8a:94:1e:f0:7b:a2:fc:c6:63:
69:7c:1b:5f:67:23:29:a5:67:ef:5d:25:a1:ab:18:
35:9d:15:ee:c8:03:58:62:7e:3b:46:65:7a:7b:7d:
bf:7b:9d:62:a9:b6:e7:cd:9a:dc:d4:ea:02:d4:1e:
52:3f:a5:20:9e:08:d5:e8:fa:70:27:4e:f5:da:04:
ea:6b:6a:38:cd:c9:04:6f:2a:47:38:6b:5a:3f:93:
89:b5:8a:3c:06:bb:44:03:8b:3a:e4:f5:c6:62:65:
1c:2c:a9:d9:76:fc:3b:68:37:0f:78:8b:36:9b:8c:
bc:f9:63:e6:9f:36:49:a2:ad:42:70:e9:86:d7:c9:
07:9b:b0:30:a6:7b:0c:70:23:7a:c3:3a:90:83:e3:
b1:0f:f5:b3:65:1a:19:bb:75:4b:b5:7c:d7:b8:2a:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:0B:A5:4F:85:AC:84:01:3E:1F:8A:0A:6B:00:AF:71:7F:8C:7C
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c3:dd:9b:f6:38:47:3b:55:7b:ec:2d:a6:7e:03:68:8e:94:
cd:f6:10:09:78:31:a8:0c:61:cb:e4:00:5e:66:3f:81:a2:93:
e3:ba:3f:84:c0:5f:65:7a:c4:ab:43:ef:3a:04:08:82:91:7e:
f9:04:99:93:52:c2:ff:62:04:cd:58:49:f2:39:08:95:fd:aa:
80:24:ac:fb:f3:db:99:1e:90:aa:dc:1d:1e:00:ca:4f:8f:3d:
9d:37:ca:80:f9:95:7c:d3:2b:0d:23:1b:59:1a:0a:13:62:0d:
ec:b6:52:15:bb:81:66:c2:7c:41:5b:b3:a5:e9:99:f9:07:2d:
eb:64:7d:e7:5d:ee:69:d6:67:d9:cc:40:70:64:d9:3f:2f:3d:
aa:25:92:d9:14:c4:dc:4e:b7:92:ab:a9:0d:45:f4:52:77:d7:
c0:da:89:51:21:30:e5:5d:ec:b6:d3:3c:51:6e:cc:b0:ec:3f:
d4:0a:c1:c2:50:90:07:b7:bc:d0:ef:83:79:c1:72:da:e8:3d:
7e:6b:3b:fb:48:f2:e2:64:1b:68:8c:99:fa:ae:0e:d7:0c:c5:
a1:6d:1f:6b:b4:69:e9:d5:63:73:0e:38:4c:af:43:8b:41:73:
39:ba:92:52:97:85:31:52:69:89:4b:5e:9e:04:3e:24:f5:57:
51:3e:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:21 2025 by rpki-client