Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: +S1x0TbUnBCOE0Y9Ea0LyRRdbu/PPP/Mpkv3p6KnTRM=
Subject key identifier: EC:31:45:90:A9:DD:12:09:42:A6:3A:E3:E1:16:A4:25:20:9C:BC:7F
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 0199FDD9685C663BC2EBAB0B9CCCD68A7969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 19:01:47 +0000
Manifest this update: Sun 19 Oct 2025 19:01:47 +0000
Manifest next update: Mon 20 Oct 2025 19:01:47 +0000
Files and hashes: 1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: aHhheZtl6GLq2XOlgW6/xOtuKK53FrqHG32YOPhdBxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:68:5c:66:3b:c2:eb:ab:0b:9c:cc:d6:8a:79:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Oct 19 19:01:47 2025 GMT
Not After : Oct 20 19:01:47 2025 GMT
Subject: CN=ec314590a9dd120942a63ae3e116a425209cbc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:47:4a:21:63:16:c0:37:01:49:26:eb:48:
52:10:04:60:2f:c8:a0:70:04:4f:a1:6a:96:94:c9:
51:b2:64:d8:0a:e6:48:2f:d8:96:25:4d:84:4c:88:
8a:b7:1a:b8:1d:bd:69:89:da:59:72:5a:d3:2c:7a:
b3:64:07:cd:ef:ce:d3:73:58:09:af:10:1f:ee:31:
a8:69:51:69:ef:fe:f1:80:e5:97:73:31:9a:67:1c:
94:d2:55:c1:ae:62:6c:cf:19:80:34:ee:2e:e9:db:
84:78:6c:74:46:c1:b7:77:98:b9:76:15:ec:0c:c8:
b6:5d:06:23:76:83:e9:da:31:39:e4:34:43:af:6e:
37:94:b9:71:3c:ff:fc:52:bc:c7:41:c1:ef:e7:24:
8c:a9:e0:be:02:9b:1c:6b:76:63:96:2f:41:8f:56:
f2:9e:32:45:41:1a:36:27:20:f5:d9:b0:33:43:71:
0d:61:5d:4e:ca:8f:5a:a8:06:e4:89:f7:8f:76:b6:
ea:84:a7:49:58:48:71:ef:3d:fe:17:95:9a:3a:e3:
d6:5b:19:1d:53:b1:00:cf:60:09:fc:69:4d:92:15:
c6:88:7a:01:b3:7a:5a:1a:15:fa:8e:b6:46:26:1a:
8d:d4:7c:dd:ca:fc:98:a5:10:3c:18:6a:50:bf:bf:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:31:45:90:A9:DD:12:09:42:A6:3A:E3:E1:16:A4:25:20:9C:BC:7F
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bd:de:23:ca:3d:80:4c:c6:0c:ed:12:bf:f7:a0:0d:d8:a3:
9a:9f:71:9e:a7:5c:f7:2f:d7:57:63:2c:da:06:15:90:47:79:
41:24:45:ff:86:42:cf:c8:33:a6:3e:52:4c:d8:25:f4:b5:a3:
a8:14:64:78:de:c8:d9:e8:c4:5a:4a:f4:a7:c7:00:bd:61:66:
96:31:51:c6:87:f7:b2:4c:f0:bd:87:fa:1a:c9:0d:14:29:74:
08:39:4f:d0:e4:2b:ad:16:c6:09:96:7f:9f:92:07:55:15:71:
82:ba:2c:ee:c7:2b:22:71:90:06:8b:0d:0e:a9:d4:fe:a0:c3:
d9:d5:57:4b:b6:f4:82:74:e3:9e:76:bf:08:0e:d3:28:65:dc:
ea:8e:74:80:e6:44:94:03:24:8e:34:2e:fa:69:23:e6:49:05:
75:23:c9:66:b4:67:ae:36:7e:c2:df:f3:88:0e:fd:b9:b3:3c:
a8:f9:04:92:b8:8b:28:5a:6f:41:cb:87:49:5a:29:b1:ab:b9:
8f:76:cd:f2:2b:13:2b:84:6d:69:30:b6:07:05:8a:5a:dc:fe:
d0:90:e7:2b:20:cd:a2:1f:69:0e:5f:12:d4:f7:e2:e2:c5:f8:
d3:c7:0d:36:3d:22:56:33:09:30:fc:5f:42:8c:1f:de:88:d3:
d1:ff:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:53 2025 by rpki-client