Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier: cttY+BdaZ3fX/aGm3Tip+Kq7l9jXicNMS9eAVnFDiG4=
Subject key identifier: D2:5B:09:6E:F1:88:25:AF:D4:FD:FA:7D:4E:C1:11:E9:9C:08:A2:E8
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial: 0199FE7D7C35B9E4CEFD74516CC5500B9904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number: 1678
Signing time: Sun 19 Oct 2025 22:01:00 +0000
Manifest this update: Sun 19 Oct 2025 22:01:00 +0000
Manifest next update: Mon 20 Oct 2025 22:01:00 +0000
Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: NfrzSaurvAlfsgFbnCwIPP7Q9crxtS6gorXpGDWmrno=)
2: AjvxEqBMDb1RszeU2KHX57XFBR4.roa (hash: 2SKQ42yk6CMNYGHFFloN2VEeMp0spaMezeJijIs3El8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:7c:35:b9:e4:ce:fd:74:51:6c:c5:50:0b:99:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Validity
Not Before: Oct 19 22:01:00 2025 GMT
Not After : Oct 20 22:01:00 2025 GMT
Subject: CN=d25b096ef18825afd4fdfa7d4ec111e99c08a2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:56:b6:31:97:30:7a:a3:d0:e0:f8:b3:86:
2a:9d:e3:4e:fc:c6:a6:5e:fa:65:d8:a0:05:06:15:
96:25:ef:f5:b5:ac:58:85:69:59:8d:b1:50:b4:cf:
d0:ef:3c:61:d2:bc:49:28:e3:fa:e9:1e:37:3b:bb:
be:14:22:49:f7:65:7b:6e:2f:c1:a1:d0:39:4e:1f:
29:a5:1c:fd:29:10:ce:dd:a3:09:0e:5f:9d:57:98:
00:4c:d3:1f:9f:62:62:ba:4c:1c:28:ec:d5:ce:7d:
80:a3:3a:3d:f8:c0:3c:8e:8a:d4:c2:4a:ac:da:d1:
94:25:ce:25:06:af:7f:a5:4a:c0:3b:d5:46:68:18:
7f:59:0f:0f:7b:68:ad:f4:67:ca:87:87:ac:1a:f5:
8f:79:04:99:26:91:cf:cc:0f:69:84:79:1b:9b:ee:
f1:e2:92:9b:28:f3:54:85:8e:84:1a:c9:bb:9f:91:
27:73:15:14:44:31:58:e9:46:7e:d3:15:c6:d0:2b:
2e:74:4e:73:a5:99:c1:31:32:d9:42:ee:ff:1e:a3:
3a:b0:fa:11:b1:9a:9e:1f:31:c3:c3:79:fb:02:7f:
e0:09:81:44:13:f2:41:95:b3:7c:cf:5b:45:1e:56:
9b:a5:d8:12:af:70:48:3e:21:d8:7d:82:c4:bd:34:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:09:6E:F1:88:25:AF:D4:FD:FA:7D:4E:C1:11:E9:9C:08:A2:E8
X509v3 Authority Key Identifier:
keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:30:74:d7:80:4c:90:e4:89:1a:83:2f:04:0e:44:f2:93:f1:
04:0a:d0:d5:a8:32:de:69:df:08:aa:9f:67:07:86:19:11:48:
ba:1c:c2:65:c8:ea:aa:8f:79:3b:1a:a2:6f:e5:10:79:76:68:
55:fc:17:cd:d8:da:a1:38:df:34:49:51:e2:3c:82:b4:25:13:
fb:f0:23:b7:c4:59:d8:66:22:b6:38:60:e6:2a:43:53:2d:77:
a9:8c:ce:e9:b1:ea:af:0d:39:8c:46:54:04:c3:15:b0:fa:d9:
92:e3:46:dc:7e:7b:14:1b:30:82:e3:36:42:dd:51:2f:b1:c1:
85:7f:bf:e5:3c:38:c9:69:6d:29:5f:98:59:ad:76:ee:51:b1:
0c:62:2b:42:3c:c4:08:ec:cc:fb:98:b7:4e:02:fd:0b:e7:09:
e0:7c:e6:73:5c:72:d1:c6:8b:b2:5c:36:92:30:33:eb:b6:2c:
58:42:de:71:16:19:60:6d:84:2a:a0:3b:a1:9c:01:1c:11:ae:
c0:1e:14:e5:0d:f5:da:6c:0b:27:79:6b:42:a1:c9:c0:4e:bd:
2d:dc:2b:75:28:1b:6e:4a:b4:08:31:c6:7b:66:67:e6:2a:36:
5b:05:41:e4:88:b0:80:8c:f3:e2:0f:1e:e1:5e:5d:d9:df:5f:
40:8e:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:37 2025 by rpki-client