Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: kCRpemrgotemRujIGdWN/9QDyiNT7s0MNjVVbGh+7s4=
Subject key identifier: F8:17:B2:FC:32:0B:B8:F1:EC:E8:F5:A0:13:BA:38:17:9C:A7:62:60
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 0199FEEC0EC8579A28BD9933A37EB87A8B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 07BB
Signing time: Mon 20 Oct 2025 00:01:47 +0000
Manifest this update: Mon 20 Oct 2025 00:01:47 +0000
Manifest next update: Tue 21 Oct 2025 00:01:47 +0000
Files and hashes: 1: 7NPjy0_LNEtrF1BCG60HRzqdKlw.roa (hash: QFPKpHBMjVle5FlNRbqdK60lHpC8YmYJkA7cV7MHx8U=)
2: MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa (hash: JedpLzW0zBpuOTjRbrIzIVmoqdb1dCTDslO3G1N2Fuc=)
3: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: EKKxs4BDojS6a8/6zod+YtMATF4lj/ObQ5SUNzBGUk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:0e:c8:57:9a:28:bd:99:33:a3:7e:b8:7a:8b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Oct 20 00:01:47 2025 GMT
Not After : Oct 21 00:01:47 2025 GMT
Subject: CN=f817b2fc320bb8f1ece8f5a013ba38179ca76260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:ce:1c:26:92:38:c5:8e:e8:26:39:e1:df:
d1:92:6b:3c:13:8f:70:0f:37:cf:5f:f5:79:41:3a:
c5:aa:dd:77:1e:2e:b2:4d:8c:68:3d:80:9a:5f:fb:
ee:aa:50:73:9d:0c:e0:f5:1c:1f:3f:12:bb:77:f8:
66:cd:71:40:8c:87:f9:e7:a0:51:74:88:7f:9d:0a:
b5:7a:eb:18:e3:96:39:28:90:00:50:c9:f3:21:51:
85:7e:4a:c6:2f:7b:b3:27:36:47:75:f4:39:e9:49:
f0:c7:7d:86:bf:59:59:90:1f:f8:6e:a7:c3:c7:af:
3c:6a:4f:d7:05:f4:16:e6:02:3b:a5:51:82:c5:d0:
d3:12:40:81:df:ce:2e:8b:5b:5b:f1:e2:f0:47:3c:
d1:81:68:7a:43:1a:18:a5:56:4f:fe:b0:0d:2a:2c:
f8:07:ee:48:86:ef:7a:6c:13:07:e7:3e:32:17:f8:
47:46:5f:a4:86:3e:05:d4:db:ee:eb:5d:28:27:0a:
5a:b4:2c:5c:da:45:6f:34:90:13:21:d7:5a:d0:c0:
43:9c:4e:8a:32:fd:b8:cd:e0:85:cf:08:16:8a:2b:
b6:26:97:d5:fe:f9:90:a7:40:37:6e:32:8b:27:2f:
af:a5:91:56:6f:38:62:9b:6d:72:83:d8:14:6d:04:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:17:B2:FC:32:0B:B8:F1:EC:E8:F5:A0:13:BA:38:17:9C:A7:62:60
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0c:26:62:da:7a:84:e3:7f:fe:da:36:c7:20:7c:a4:5a:79:
6a:01:a8:c5:90:b8:57:90:5a:ea:a5:2a:83:22:74:db:0e:5a:
dc:55:68:ad:59:2c:bf:02:57:6d:3e:5e:7a:7d:1a:43:bb:c8:
20:5d:01:ab:0d:d6:1c:ed:3c:fa:b6:82:71:f8:c0:ba:14:d2:
21:65:d2:b5:66:38:0a:3b:2c:49:2e:f6:06:79:24:4e:e4:85:
e6:5a:90:42:03:84:e3:bd:f5:1e:a1:df:6b:a8:c1:c2:a6:5f:
2e:20:e2:f2:ff:1b:f7:fb:2e:3a:06:7a:85:e2:d4:a8:e4:a6:
22:fc:2c:35:48:ae:f0:5f:7b:01:79:ef:3a:69:9b:c7:16:03:
06:75:1d:bb:58:47:a0:e3:60:ff:aa:95:1b:0f:24:a0:98:fc:
04:ad:1e:34:8f:08:eb:65:03:e0:69:db:44:88:ac:2b:0b:3a:
10:7b:7c:eb:4d:68:83:b9:76:d3:d5:06:dc:3e:be:71:9c:e6:
ec:54:da:7d:2f:d6:1a:43:6d:cf:3f:b6:d9:ca:dc:ea:56:f1:
df:ba:42:85:65:6e:8f:04:77:fa:84:7e:2a:41:15:85:2c:53:
d7:04:3a:b4:04:ac:76:26:1f:13:29:b9:ab:60:a7:be:d8:28:
56:fe:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:35 2025 by rpki-client