Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: lf5VtUvqDwkNZcOlqetQXeIETz5sscXs+L4inKlIqt8=
Subject key identifier: C9:2A:05:26:80:08:7E:5C:7C:2E:06:2D:C6:B4:77:12:25:A5:52:CC
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 0199FD33EB9D5B3F58F37A679D242A4D37FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: HK8AtGTFVle97vpz6lFHJwDkZd8Zt+6ghecVAvgu30s=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:eb:9d:5b:3f:58:f3:7a:67:9d:24:2a:4d:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=c92a052680087e5c7c2e062dc6b4771225a552cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:98:61:94:4d:c7:71:bb:68:5d:e7:34:53:
36:9b:20:a0:d4:2c:fb:69:26:fc:fa:ec:86:9a:d7:
7a:d4:a7:c3:c6:be:9d:68:79:a3:44:38:45:a3:65:
8f:69:ec:a7:c6:07:d9:ae:66:e7:86:74:de:4f:66:
9e:ec:f9:c2:b2:bb:2b:73:e4:66:ad:17:d7:b9:a3:
1c:89:2b:50:5f:57:bf:7e:99:e9:2a:b7:12:4b:ec:
04:c7:18:47:1b:30:3a:d8:2b:03:45:da:b1:c5:08:
78:c9:ac:b1:c8:39:9d:f2:37:6f:0a:cd:09:c0:2f:
c1:c9:75:e7:53:e8:15:5d:49:bc:52:9d:a6:6d:75:
aa:8a:63:4a:ca:09:ad:86:29:3d:69:c9:b0:81:a6:
8e:86:e5:4a:4e:c2:df:cb:7d:f7:5d:00:a0:fa:42:
59:2c:3d:68:24:2d:3f:e9:00:c7:51:ff:17:73:cc:
0d:da:b4:90:2c:93:f0:fd:b3:87:43:a2:a3:b5:00:
55:5f:8c:34:f5:68:f3:a9:b6:f4:1b:27:9e:3d:d8:
d0:ea:0d:ea:f1:2b:fd:b7:62:ec:80:b7:3f:12:11:
b2:f1:03:74:5d:de:4c:40:48:8f:6e:cd:5e:2e:9e:
ab:05:6a:21:37:dc:cb:38:c6:d8:94:31:be:fa:c2:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:05:26:80:08:7E:5C:7C:2E:06:2D:C6:B4:77:12:25:A5:52:CC
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5c:48:3a:3e:e7:fd:1a:67:5a:52:f1:94:b2:05:fe:27:54:
10:f7:33:f9:34:35:56:aa:e3:2c:53:e8:5d:b4:b4:99:d6:d3:
44:e3:7c:50:67:cb:a3:9e:ab:db:73:d0:3d:a7:56:38:c4:83:
46:f3:73:92:45:fd:b6:dc:9c:b6:d0:71:9b:50:43:ba:cc:4e:
d9:f8:d2:7d:42:ba:be:81:98:b3:4d:e5:a5:d8:4f:73:a8:1b:
58:8e:06:ba:24:45:c7:a0:27:39:ad:c4:e3:52:06:89:43:31:
df:b9:33:9e:44:0d:73:ec:cd:b1:13:7d:10:4a:4b:d8:39:38:
e6:08:eb:db:d4:42:5a:b2:ec:93:ad:34:24:cb:bb:2a:d4:02:
cf:2f:b4:50:c1:cb:52:b8:d1:fe:ad:7f:d6:68:4d:f2:0b:4b:
58:ee:ac:56:79:a4:0b:c1:32:9a:81:3e:8f:5a:38:37:b9:d6:
e5:61:f5:c4:df:17:fc:b8:62:73:ed:1d:0a:05:fa:c9:89:62:
31:c1:5b:43:43:41:8a:5e:a5:fd:81:2b:c4:c7:28:09:66:e9:
e0:8d:b5:7a:4f:d9:64:a3:76:82:4f:79:42:70:40:d2:04:77:
a3:b9:03:19:65:3c:e5:af:ca:23:c5:20:7c:d0:4e:15:e6:87:
74:96:c0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:28 2025 by rpki-client