
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier: 47/7j/wyuQG/UDVL1MUKWerYHATkrpe+9sjqgB0TqwQ=
Subject key identifier: 70:8C:D1:C9:76:A7:50:8A:07:8D:0C:F8:D7:EB:95:E9:C4:AD:6D:65
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial: 0199FC5833D112747CEC41084017B4DDA45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number: D0
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: EXTeJ0xnJWTRkgHDu_AxpeIu9iA.roa (hash: qrWsqJSnf72iIeO/vT24niegliGNcW4B28Wyc7Pg4x4=)
2: WmXOt_58syUmTkr0foDjL7xiI4Q.roa (hash: +erBuoZ6Ct32kt0eWK4wbg4Fa+dtktRUNZ/SHpJZIGk=)
3: X9W0b9P6Ek_A8a9BpsvnX133VZw.roa (hash: 8NxMp0DgdQySkZvwKlqGylrfX1726nGJj79qXZbDO7M=)
4: xs2uXZDt7cVA7jwMLyODUbD1r5A.roa (hash: CK+GsD3c++kM/6BpDz2kJy3N5LQsGAx/QUYH0SzjPAM=)
5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: Kwu1/zeDy4QesNcHF5JTqmNezWgT/JXuA4cCWRxYRJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:33:d1:12:74:7c:ec:41:08:40:17:b4:dd:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=708cd1c976a7508a078d0cf8d7eb95e9c4ad6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:a9:e8:d3:c7:e1:25:37:71:e3:d5:76:f4:
40:60:ea:7e:df:d6:f7:80:13:da:18:d8:e7:77:01:
a1:be:b9:57:ac:6b:fb:02:c3:a4:f6:c6:5a:34:b1:
33:bb:cb:53:da:48:32:cf:1a:30:75:73:00:1d:d7:
ba:8e:22:c5:7a:5a:14:d4:b4:5e:65:fa:c7:d1:ab:
59:bb:96:bd:98:4c:91:0a:12:16:86:7d:dd:e5:d4:
a2:ce:03:66:ed:df:31:4b:ae:b5:19:15:e6:c6:7d:
5a:af:79:f3:3a:2b:29:bc:0e:41:da:5c:51:1f:6f:
8b:2c:2e:82:2f:60:53:ff:43:40:c0:41:bd:10:0c:
77:d6:5a:d4:3c:09:08:63:35:1e:44:02:68:f5:21:
34:bd:ae:48:3e:5a:ed:d5:91:8e:c2:91:04:da:d8:
cd:a5:c3:d5:da:a0:c3:74:81:e8:bc:91:9f:32:e0:
b7:a9:ab:63:34:92:64:67:cb:7d:1f:63:ea:b2:bb:
f6:3a:97:c6:d7:7e:5c:28:b6:9e:38:58:8c:35:38:
55:5b:5d:f9:dd:8c:58:71:b4:9e:c7:ca:e9:00:d8:
1a:65:18:30:ac:95:5f:1f:e0:3d:66:54:11:fa:de:
f2:2f:98:69:51:76:1d:be:18:04:21:bc:c0:81:df:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:D1:C9:76:A7:50:8A:07:8D:0C:F8:D7:EB:95:E9:C4:AD:6D:65
X509v3 Authority Key Identifier:
keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7e:e0:48:4d:38:1a:f1:2b:7a:90:d7:04:49:3f:fe:e9:da:
1a:f0:33:54:df:c7:4f:bb:34:35:68:1a:c3:83:5d:b2:17:06:
84:d9:be:61:d0:36:58:3c:ff:b9:92:1d:6a:96:5c:07:f6:96:
8e:76:45:fc:90:99:9e:10:44:02:c9:7a:ea:bd:89:2f:d6:cf:
b4:74:eb:a8:ed:32:97:dc:52:6b:d3:4b:72:87:4e:aa:15:2d:
4e:e8:80:65:bc:11:2f:56:62:92:8f:6e:10:6b:df:48:6d:bb:
47:9d:c5:88:ec:2d:20:0e:6a:d5:3f:f1:c5:07:04:49:30:5b:
00:a0:bc:3f:c8:77:b5:a3:e5:43:97:9e:23:9d:b9:d7:80:fa:
de:24:53:98:8e:62:f2:db:18:de:fa:6a:80:ee:c4:54:2e:ea:
6b:c8:ee:f4:35:f8:03:43:8d:ac:98:69:05:fb:47:fe:a1:b4:
b6:8d:7d:c7:8b:a2:a8:1c:a7:30:02:ba:de:84:3b:4d:2f:8c:
42:1b:d9:fa:31:11:57:ff:77:2c:97:0f:ed:ff:95:c9:02:44:
c3:85:7c:cf:77:22:80:6a:39:42:10:ac:03:98:ed:0f:93:3d:
fa:71:db:02:7f:af:b9:9d:e6:ad:66:ff:53:ab:f9:20:a0:b7:
8a:d8:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:29 2025 by rpki-client