Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: zPaCqQ68kIJyi3b5Bdv+O9FuYa03LCdtIBrPWmPujIc=
Subject key identifier: B8:EE:A3:5F:3E:DE:9A:7C:93:95:7D:01:2C:FF:6D:B0:49:5A:59:EB
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 0199FD346E6364306252EEDFFC4FAE08E0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 1377
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: uye6anQ2zwvAbz+AekzSeIG59rgOUvXL0H9B1dxw+7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6e:63:64:30:62:52:ee:df:fc:4f:ae:08:e0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=b8eea35f3ede9a7c93957d012cff6db0495a59eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:2a:4f:f0:48:eb:58:61:ea:42:60:ac:fb:
1b:af:cc:7c:2b:a1:aa:0e:b2:a4:94:c9:9f:80:ed:
09:93:06:06:bc:b6:6d:4c:39:a8:25:5b:f8:01:68:
c6:3a:d0:ae:b3:f4:86:aa:00:97:74:cd:b0:b2:0a:
d4:55:74:d4:c9:3e:37:bc:14:d8:f5:3e:b5:f4:26:
f9:f0:af:24:fb:3b:c6:2e:ba:65:b6:e0:1e:e0:b1:
4b:50:4f:37:f0:64:d6:20:87:a2:de:a4:fe:b9:ca:
2d:8d:06:df:ed:a4:f8:d6:63:b6:37:4c:69:d4:13:
54:f3:57:1a:4d:14:b7:1b:8f:65:f3:e9:68:ff:bc:
f0:ce:16:99:0b:99:8d:60:b4:fa:94:31:0a:81:6a:
c2:a7:98:76:5c:ec:33:c9:21:ea:31:d5:21:63:5d:
cf:d7:51:71:ae:91:34:dd:32:f0:8e:75:c3:a9:7b:
73:c9:af:0a:13:29:03:77:98:7f:9c:c6:96:26:c5:
50:22:44:d3:f7:a5:cc:84:90:4a:df:33:84:2b:9d:
90:8a:26:aa:1f:9b:18:10:4a:40:21:6a:91:40:62:
15:c7:a4:24:6e:2f:b0:8d:cc:1d:31:49:3b:49:ca:
00:13:31:32:9e:67:a7:98:39:fd:3a:df:3a:1e:fd:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:A3:5F:3E:DE:9A:7C:93:95:7D:01:2C:FF:6D:B0:49:5A:59:EB
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fb:57:fa:77:2b:0d:aa:22:db:d6:a8:68:d6:e1:0d:b9:ca:
fc:c0:84:4d:c5:11:e6:a5:db:47:8b:05:9d:80:88:cb:4a:6c:
bb:59:8d:74:d6:5d:33:33:eb:d0:a9:96:55:cf:68:53:82:6d:
1b:9c:e6:b8:39:75:8f:91:f0:ab:0d:be:10:5d:11:47:19:90:
41:5a:ac:02:72:db:f5:df:46:7e:1d:7f:44:60:d4:82:a1:e9:
3b:e6:a6:d4:bd:6d:0f:0e:df:2a:3f:08:9e:46:e0:09:f1:04:
94:0b:c6:eb:7a:95:9a:b1:6b:e5:a8:17:64:21:97:13:c3:ee:
df:6e:fb:9c:e8:9b:4f:c5:0a:b8:5c:96:c8:85:26:14:e8:87:
44:4d:b7:5b:49:31:2a:79:53:bf:f0:fc:78:c9:3f:1b:53:e2:
a2:e1:f0:84:67:da:0b:b7:b7:aa:9f:01:c4:c2:d4:53:28:10:
e8:68:c4:b0:a9:3c:a7:47:06:e3:1f:4d:76:3a:82:6c:95:74:
b9:13:83:ba:50:09:7e:bb:36:20:aa:6f:f2:ea:f2:55:f3:95:
12:74:ac:b4:ec:23:8e:d3:e3:b6:68:33:c8:a1:ec:cc:3c:99:
2e:e7:73:8b:b2:59:31:b2:d6:0a:1e:ac:0f:a3:53:48:c6:75:
be:27:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:56 2025 by rpki-client