Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: JtfCDm/Yt/PYi/iOHhMfZDbiw2rTGSwj9rjXYf6V2lc=
Subject key identifier: 5C:E5:4D:5F:F3:FF:D5:F4:95:13:E6:B1:B2:B8:60:19:AB:6D:01:8D
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 0199FD6AD7BA24A78AE91BC4EF0BC7572FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 04C5
Signing time: Sun 19 Oct 2025 17:01:01 +0000
Manifest this update: Sun 19 Oct 2025 17:01:01 +0000
Manifest next update: Mon 20 Oct 2025 17:01:01 +0000
Files and hashes: 1: OpWpWHElMT6Em0cb46EU4-eZHBM.roa (hash: UkmgnvSBtnTTqSpYqYCCjTjePdoSg2sK2f+rfkHw/HY=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: FgIVS7Rzq5M4zE9dXEVwpbYD5KBvjZsqTR0gKuv/q4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d7:ba:24:a7:8a:e9:1b:c4:ef:0b:c7:57:2f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Oct 19 17:01:01 2025 GMT
Not After : Oct 20 17:01:01 2025 GMT
Subject: CN=5ce54d5ff3ffd5f49513e6b1b2b86019ab6d018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:b6:a8:1b:d6:20:e9:62:0b:4e:4d:51:5d:
bf:cd:9f:2c:b9:60:f6:3a:cc:f2:70:c7:f5:50:1b:
b0:80:2b:e5:03:69:e3:ea:a8:77:67:99:6b:1b:ff:
a7:04:82:d2:33:07:50:2a:32:f7:ba:2e:f9:c2:b6:
bd:7a:21:46:1f:85:7c:cb:9d:99:98:1e:d2:3f:3c:
97:54:73:5c:6b:d6:e4:26:c4:84:6f:b3:89:df:e4:
4c:16:0a:be:2b:24:82:79:c2:66:bf:35:fc:6a:25:
8f:63:d0:07:bf:55:94:78:6f:f9:6d:73:12:75:cf:
7a:66:97:25:2d:6b:b8:f6:f0:ab:61:84:b6:26:c2:
a9:05:52:0c:03:b7:2f:14:dd:9e:4d:05:05:0a:5c:
f9:43:5e:a2:25:fe:e2:e0:3e:29:65:7f:0d:3f:26:
f3:20:b8:b4:97:e5:d0:e5:29:8d:b2:4a:95:fa:44:
3c:87:75:8f:13:74:93:ff:cd:16:18:25:ff:98:77:
f4:08:f8:19:34:68:f1:10:21:2e:63:f0:89:a7:a7:
e1:b1:6d:95:19:1c:bd:b4:80:b9:89:e0:42:95:57:
a5:b3:c1:62:b0:4a:b4:04:e4:ac:a5:49:1a:ec:e8:
12:26:ea:30:9b:d2:09:dd:f8:67:9a:c5:aa:16:c7:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E5:4D:5F:F3:FF:D5:F4:95:13:E6:B1:B2:B8:60:19:AB:6D:01:8D
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:30:99:5d:42:55:f7:d7:8d:bc:b0:ed:86:a4:49:c4:f2:fa:
a7:30:b8:a6:0b:a9:62:50:45:2a:4e:90:08:8d:66:0d:42:6c:
bb:bf:db:43:0f:b7:fa:a8:0a:d0:43:03:a9:e5:f4:0a:5b:a1:
6c:bc:c9:51:fc:a9:0a:5c:67:8c:9e:84:fe:ad:ad:28:d6:81:
d1:1c:da:60:d8:9a:eb:ed:72:57:4b:98:5c:ec:40:4a:73:e9:
92:44:08:f4:de:dd:aa:da:d9:4c:8a:ee:c5:09:3e:85:e9:7f:
d0:7d:ff:d7:cb:35:45:cb:b6:a9:64:74:96:65:2d:a9:e2:80:
5d:53:89:8c:12:01:a8:21:d9:c3:8d:35:9a:c7:90:40:3c:a2:
dc:7e:a4:ef:03:37:2d:1d:eb:40:76:bd:ea:3a:43:26:fd:b8:
50:63:05:1e:f0:18:4e:d7:5f:1d:79:6a:fe:52:4d:f0:b1:d5:
02:c6:91:c5:0c:d3:f9:9f:9a:ae:8f:7f:46:0e:09:ef:35:08:
94:9c:28:9b:6d:81:0b:bd:aa:79:61:d1:f9:a3:9b:ee:0d:c6:
18:ac:b9:fd:2b:b7:a3:99:44:be:6c:89:cf:f8:2b:b5:1c:34:
75:c4:ac:e7:16:aa:28:c3:06:48:a9:48:78:f3:bd:f9:5e:ff:
ad:6a:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:42 2025 by rpki-client