Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: 1gOYyJ+KSpGZNJwyCYfU8qwlEENlUztVeOGnOZoZ3fE=
Subject key identifier: 92:7C:98:3D:BB:F7:4D:9D:F2:19:37:79:B6:7C:EB:68:89:0B:D6:FC
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 0199FCC646AC56BCF1B0B3B1276388BCC0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 15A9
Signing time: Sun 19 Oct 2025 14:01:16 +0000
Manifest this update: Sun 19 Oct 2025 14:01:16 +0000
Manifest next update: Mon 20 Oct 2025 14:01:16 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: Ko18sXGJjgCbZ2uBP9Cd2QhlVNCn70TFNNhAypDpXoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:46:ac:56:bc:f1:b0:b3:b1:27:63:88:bc:c0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Oct 19 14:01:16 2025 GMT
Not After : Oct 20 14:01:16 2025 GMT
Subject: CN=927c983dbbf74d9df2193779b67ceb68890bd6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:7a:a9:6e:f7:54:0e:20:d7:8a:be:a2:5b:
f7:aa:5b:70:d0:ab:3d:e9:9b:8f:fc:b3:db:67:dd:
37:0e:48:1c:bb:02:7e:a4:71:0a:75:d4:80:60:66:
b2:45:98:02:32:d2:ba:14:2f:f2:f8:bd:43:d6:5f:
12:d1:19:56:5a:fd:30:e2:64:96:51:19:97:5c:3d:
9a:be:be:77:db:c9:2a:68:17:47:83:68:98:02:1c:
b1:21:91:09:77:94:7c:6e:0a:9f:85:95:ca:91:c1:
87:d4:47:b7:aa:14:57:fd:9d:91:c9:b6:3e:bb:78:
78:47:92:ff:ec:56:fe:cb:55:e6:63:10:0c:98:9c:
7a:95:b3:30:e1:fc:62:81:25:41:f7:39:8a:b8:ae:
9d:54:1f:ec:a8:bf:88:97:18:68:21:e9:8f:19:d2:
2f:99:c6:b1:ae:6e:ec:8c:f9:89:8f:fa:32:0a:2d:
5e:06:73:4d:95:36:b1:d4:e6:86:94:b2:5b:a1:e0:
32:09:77:ad:48:5a:05:e8:e0:c3:d9:54:2d:40:7e:
66:e1:ad:9f:16:a6:42:93:2d:97:76:59:e4:bd:86:
e9:b5:9b:9c:14:e7:d0:5c:de:ac:c7:1d:3b:0d:84:
3d:3f:64:7b:b6:bf:2d:2b:ed:49:8c:8c:83:37:12:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7C:98:3D:BB:F7:4D:9D:F2:19:37:79:B6:7C:EB:68:89:0B:D6:FC
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:01:59:94:c0:24:75:54:19:5d:31:9e:0f:42:4e:12:43:30:
69:49:6d:7c:90:61:f2:10:54:f3:22:38:96:38:bc:42:a5:4f:
eb:89:8c:97:19:f1:64:92:31:42:24:15:96:f8:b8:9a:37:11:
8f:bc:51:67:97:d5:1a:03:b4:e2:b0:a8:a5:8e:c0:9a:c9:3e:
19:60:79:bf:22:b5:d7:26:97:81:cc:3f:be:71:8c:5f:d7:6d:
ce:e5:3b:69:14:44:90:d6:15:bf:e0:bc:3d:e9:38:95:67:9c:
a6:69:2f:89:28:0a:ba:96:dc:72:32:34:92:b6:28:f9:fe:0a:
4b:24:50:69:fa:aa:3f:f3:00:ec:90:44:bb:15:cc:ff:5b:fd:
fb:3c:98:94:49:93:b9:5a:0b:76:de:df:86:4b:6a:49:80:2e:
d5:1f:6e:49:c5:e4:ec:af:a2:87:ab:59:0a:f6:a2:07:2d:94:
e0:cd:3c:df:2c:87:a7:15:aa:13:39:ac:d1:f5:d5:b7:51:bd:
2b:48:34:79:e3:b7:bf:d3:ae:b0:48:5e:a6:4f:38:b0:ec:de:
62:6b:63:24:6d:f1:47:c5:d2:11:02:75:b2:ff:d8:a2:ec:2f:
d1:27:5e:f3:1c:64:d2:c7:b0:99:8d:9a:42:dc:8d:02:1e:00:
37:ed:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:21 2025 by rpki-client