Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: NpLaMGqjF0szaC97EiO3OWpYgOSxvt92LPxXV8sWuWU=
Subject key identifier: 33:56:A2:BB:A6:02:B2:25:F3:2B:6F:75:81:76:4D:C6:CC:23:8B:5B
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 0199FAA160FE3935C52BB4D0F99FA8006BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 04:01:43 +0000
Manifest this update: Sun 19 Oct 2025 04:01:43 +0000
Manifest next update: Mon 20 Oct 2025 04:01:43 +0000
Files and hashes: 1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
2: Hec-pIq-giAIiXgtqBY9YPV7h4U.roa (hash: 2/lKcaU6foyq4wbat5pas5qcbh09bXQ1njGqYgBPvws=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: suUYhVQt9PUF1Uc0Q+jLO6u6/NDfvCiaD6vJEuavhMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:60:fe:39:35:c5:2b:b4:d0:f9:9f:a8:00:6b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Oct 19 04:01:43 2025 GMT
Not After : Oct 20 04:01:43 2025 GMT
Subject: CN=3356a2bba602b225f32b6f7581764dc6cc238b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:c9:73:d1:ac:0c:83:93:ca:0e:c4:2d:d0:
c6:6c:7d:a3:6f:17:db:1f:c1:b8:fc:0d:9d:0a:67:
52:04:20:b2:fa:fa:5d:c8:a1:0d:dd:26:f0:25:fa:
35:35:32:a8:37:98:37:fe:1c:a5:57:4c:bc:c2:de:
20:a0:c1:19:c5:73:cd:16:f3:c4:1c:ee:6a:ac:aa:
7b:aa:3f:34:54:a4:5b:b3:77:33:ff:11:7a:e6:e1:
c5:f5:83:83:b4:dc:1a:94:88:4a:f9:cf:63:f9:60:
5b:9f:4f:41:da:01:cf:45:72:2a:3e:33:79:33:23:
60:d7:ef:1c:95:1e:e5:15:83:2e:69:07:84:0b:aa:
0b:46:17:ba:98:c3:dc:ca:ca:a3:ac:df:cd:fc:99:
f3:59:e5:ec:92:b9:38:72:23:6f:ea:b5:e9:e2:94:
30:f5:73:7f:de:27:53:14:d9:39:b9:fd:a2:ae:fa:
d0:5a:cd:74:4d:45:37:98:fb:a0:25:78:97:ca:4c:
6b:06:65:f3:b8:5e:86:42:7c:be:fb:53:59:a7:41:
10:08:e6:be:15:14:fb:2b:93:ad:78:b9:63:42:e1:
c2:a6:8e:23:fc:69:9d:01:06:66:de:12:5a:d9:cf:
4c:4e:b7:bd:5f:56:09:43:a1:bb:15:7e:d2:1f:fc:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:A2:BB:A6:02:B2:25:F3:2B:6F:75:81:76:4D:C6:CC:23:8B:5B
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7a:2c:40:87:e7:83:5a:9f:50:0a:65:c4:5a:cf:b4:da:08:
87:73:42:5c:b2:ec:73:bd:6f:dc:5b:c3:ab:bf:0f:32:97:81:
f3:6c:b6:d4:76:12:01:70:5e:c6:56:d4:05:dc:fa:63:cc:33:
c3:55:ae:f7:fb:a4:28:bd:7c:7f:d3:bc:be:cc:7e:ac:3e:5a:
69:6d:5f:b3:ff:09:66:77:ba:87:3f:e1:21:ff:0a:4c:2d:55:
e5:50:b8:87:e3:36:39:29:f4:f5:eb:33:88:c3:81:81:d5:37:
66:9c:a2:1f:07:6d:f3:7c:41:73:2f:0a:b3:d5:b8:ec:4d:24:
ee:41:18:a0:da:50:75:47:f1:d6:e7:51:d4:9c:df:4c:05:a8:
44:0f:05:80:75:c4:69:cd:7d:73:17:b1:e2:4d:05:7e:fd:8b:
44:a3:b7:2f:4f:f0:03:bc:df:5b:50:6d:94:04:17:fc:9b:50:
03:ff:0e:36:57:23:54:e8:cb:d4:00:27:24:e5:92:8d:41:ca:
f7:97:67:67:37:61:29:4f:de:87:d8:fe:d1:46:70:4d:17:32:
8d:02:0e:7a:b1:ea:45:d6:e5:83:c9:85:90:d3:4c:d7:1f:58:
fa:38:4e:9d:d2:5a:08:1e:b1:b5:28:7c:d9:12:c0:5e:40:8a:
aa:59:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:01 2025 by rpki-client