Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: r/mucuNbeAXJZv7Hyo2V9mjxkqmEuOyruBQmCWNBGY8=
Subject key identifier: 5A:C4:7C:06:BF:23:F1:35:8B:4C:5A:F8:36:BD:C1:81:9F:0D:A4:D6
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 0199FDD94FAEACEAE165DB64FF2B97A5A4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 1202
Signing time: Sun 19 Oct 2025 19:01:41 +0000
Manifest this update: Sun 19 Oct 2025 19:01:41 +0000
Manifest next update: Mon 20 Oct 2025 19:01:41 +0000
Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: soiqQrsVDJNqTS348k395Cim9L+Bzo1RtiNPBEiSK1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4f:ae:ac:ea:e1:65:db:64:ff:2b:97:a5:a4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Oct 19 19:01:41 2025 GMT
Not After : Oct 20 19:01:41 2025 GMT
Subject: CN=5ac47c06bf23f1358b4c5af836bdc1819f0da4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:7b:15:42:6c:5d:af:d7:0e:bd:12:a3:80:
55:1d:11:54:83:3e:1f:35:f9:9d:22:39:d0:47:6f:
88:2f:96:1d:95:a1:e5:cb:ef:84:7f:50:9e:6e:35:
07:3d:72:2f:fd:7a:d6:6b:c1:85:9f:15:46:e4:5d:
30:c9:be:e0:ec:a7:7b:fb:cb:f3:dc:36:33:15:a1:
16:08:08:0d:68:d2:7c:a2:c0:38:36:88:16:05:82:
75:e8:e8:6e:14:8d:98:09:fe:1d:64:e3:e6:92:0d:
3f:02:49:43:a2:ff:8b:ef:91:1d:f7:0c:1b:dc:cd:
1e:11:b9:91:eb:2f:88:5a:f3:25:f7:0c:de:4c:f3:
71:48:c8:18:f5:71:50:e1:31:eb:72:c8:9c:6f:93:
a4:28:da:71:f0:79:63:0f:57:41:df:ca:c0:76:99:
e5:c6:04:ed:35:ed:0c:e7:28:b3:ad:68:0e:f1:f1:
48:2a:83:53:cc:df:2c:ac:0f:14:3f:63:7b:c2:da:
d6:f8:b5:48:d3:49:ff:dd:33:37:e3:97:c5:af:85:
67:41:f9:66:d4:07:b6:3b:75:20:48:9d:8a:c6:f1:
2c:0e:df:4a:68:a8:cd:66:f3:4a:b7:0f:37:ac:9c:
c9:19:98:ab:e1:ea:92:0f:88:d2:b7:93:1d:d6:95:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C4:7C:06:BF:23:F1:35:8B:4C:5A:F8:36:BD:C1:81:9F:0D:A4:D6
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:56:91:68:64:fb:53:c3:9c:8d:51:3f:96:d2:77:ea:6c:ae:
40:86:15:a8:0d:c6:fb:e2:ff:f9:db:fe:46:6b:54:12:1c:e5:
b0:f5:c7:c2:53:a8:af:5e:99:3a:d8:4f:42:05:32:b7:cb:a0:
31:0d:30:94:60:ba:08:56:5e:93:79:d1:3c:a0:65:48:9f:fa:
6a:43:4c:57:bf:ef:32:59:54:c9:f7:65:4e:da:74:55:78:40:
ef:8d:e4:2e:5f:2a:4f:60:a4:6c:15:64:c4:85:e8:0a:7d:76:
37:48:1b:18:a2:12:8a:d3:e0:73:4f:81:45:35:f9:61:56:63:
8c:67:6c:c3:fd:6e:d6:2d:bf:d9:ae:98:f9:58:ea:9d:80:39:
97:ec:f6:30:86:7f:04:29:fb:34:11:a4:e6:0e:75:0d:66:b1:
0d:dc:db:16:fd:b1:40:5a:08:89:12:1b:be:40:bc:e8:90:64:
de:4c:d7:56:e9:9d:65:c3:e5:b0:d4:f3:c9:46:65:2b:18:e6:
38:87:d4:7c:5b:29:4c:da:c6:3c:b3:bb:fb:9e:99:26:42:98:
bb:da:75:5c:44:43:10:e3:18:4b:7b:d0:49:3a:d4:a2:6c:66:
12:2f:c9:d3:ce:d5:ec:8f:4c:ac:ee:d4:d7:42:70:b8:76:be:
3b:1b:4c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:32 2025 by rpki-client