
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: tPPruo/uXwWUW7XbAoXyBLADLIRdAnnCUPrlSausfIM=
Subject key identifier: DF:52:5A:F1:49:4A:A4:81:22:D6:6D:90:76:09:F3:FB:48:50:FD:8A
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 0199FBEA77B0995DC82C7D14AF4B45F20C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 13E3
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: fItrHaId+8fg00tSyGb+m2dqwRiQXwOmuDOaTFC/xiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:77:b0:99:5d:c8:2c:7d:14:af:4b:45:f2:0c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=df525af1494aa48122d66d907609f3fb4850fd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b0:ed:a3:bc:30:ff:20:7e:ec:64:bd:bc:f6:
10:e1:95:95:f4:7a:b6:d5:52:03:29:0f:e8:e4:3b:
b2:e9:de:58:5b:b0:5d:78:ac:74:c1:46:a4:4f:53:
37:c9:5c:30:4e:17:f3:43:31:f1:bd:f5:b5:12:c4:
bf:9a:4a:5c:cb:a5:75:93:a9:0e:2c:51:89:f5:ff:
5a:1c:08:a2:78:8f:32:ad:4d:53:1d:0f:d5:05:2e:
d5:bf:b0:4c:b4:4a:6f:65:17:4c:59:56:a9:2a:dc:
bd:d5:7c:ed:c3:d9:76:31:04:9d:b0:3b:64:d6:2f:
9e:19:f6:d0:b2:3f:e1:e1:01:8f:35:5f:ff:f2:69:
e6:76:17:e9:75:3c:36:94:50:19:a7:a0:36:1e:c8:
4c:34:93:5d:28:66:21:65:b5:2a:32:97:d4:57:36:
b5:dc:ec:15:31:59:4a:67:24:ec:7d:41:d2:d5:c6:
e7:6e:46:e5:77:6d:19:f5:fc:79:18:5a:87:2f:18:
92:33:7c:30:9a:1d:17:39:c1:74:77:12:0b:3d:a8:
f9:34:18:30:30:9d:5d:3c:28:40:81:81:fc:7a:f0:
4d:9b:ec:d8:10:d6:f5:50:fb:2d:82:91:c4:bc:f7:
1e:ec:80:d4:b2:d9:90:bc:e1:63:d9:b8:a8:2e:d8:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:52:5A:F1:49:4A:A4:81:22:D6:6D:90:76:09:F3:FB:48:50:FD:8A
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:fe:b7:3c:3b:fe:8b:95:7a:d4:19:57:bf:b2:95:bc:69:
f4:53:e0:0e:f2:c2:19:ca:a1:79:51:bc:ca:31:9d:d6:df:43:
d5:2a:2a:c0:8f:80:48:04:12:e5:ec:3b:f3:76:0b:54:9c:2d:
54:b4:28:a9:0e:23:e7:05:b5:fe:52:29:28:13:91:dc:81:fa:
08:75:2e:c1:d4:28:7c:53:26:5c:fe:47:ea:45:fc:11:59:1b:
b4:fd:82:13:d6:fe:74:7c:f9:eb:5b:9c:3a:37:1c:06:45:b6:
27:01:82:9c:7e:c6:92:da:76:7f:da:fc:df:92:4c:e9:62:fc:
e7:ac:76:3b:07:50:1a:4d:bd:52:9a:9e:6f:b0:72:a5:7f:c2:
7f:5c:cb:7c:1d:f3:83:de:16:e6:65:31:d8:3a:f4:de:b5:7e:
e6:b4:27:30:e6:0a:c9:a5:fd:e8:2c:d0:cb:f9:f0:3b:73:1a:
31:4b:db:97:71:fb:25:b4:f7:75:24:a5:c9:26:57:e8:4a:18:
5a:d4:5a:86:70:bb:78:a8:86:a6:bd:c9:74:54:0e:8f:37:26:
56:e4:17:77:96:92:26:9c:48:bc:c4:c6:1d:76:88:42:4e:55:
b7:35:25:f5:ee:db:e8:f8:fa:45:3f:1a:24:e3:81:7e:85:79:
a8:44:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:13 2025 by rpki-client