Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
File: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json)
Hash identifier: /jPF/4JJBOL+20pyzzvRk5LttiutxO1EfMWOJHJCv6s=
Subject key identifier: B4:AF:E1:F4:77:5E:D7:BA:56:80:36:E1:27:91:BC:68:EA:27:AA:2A
Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
Certificate issuer: /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Certificate serial: 0199FE46D0B3C7AF51E073D53664B89F71F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
Manifest number: 0841
Signing time: Sun 19 Oct 2025 21:01:17 +0000
Manifest this update: Sun 19 Oct 2025 21:01:17 +0000
Manifest next update: Mon 20 Oct 2025 21:01:17 +0000
Files and hashes: 1: Xh4ptPl3loyr5HsYAeq5bigmrnc.roa (hash: y+GdTxJAoh6FrrDJ6BHqIZq0hI9csiMuoRcI0N0qK/0=)
2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: uq6sle86HpnH+XDC5tYy6aFnwH6a5qgo1gyQZa6PeAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d0:b3:c7:af:51:e0:73:d5:36:64:b8:9f:71:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Validity
Not Before: Oct 19 21:01:17 2025 GMT
Not After : Oct 20 21:01:17 2025 GMT
Subject: CN=b4afe1f4775ed7ba568036e12791bc68ea27aa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:5b:eb:b3:d7:44:fd:c7:57:87:ca:c5:83:
30:28:52:b4:77:95:eb:3e:31:9c:0f:0b:7f:5a:01:
8e:d7:d2:22:29:5b:28:d7:6a:ec:09:4b:77:02:ff:
64:23:74:a7:87:e7:8d:09:04:1d:d0:cd:b7:09:f6:
03:81:89:dd:a8:c2:8e:78:6a:41:47:f8:ba:94:a3:
03:87:18:ce:7a:34:e6:df:cc:fa:dc:88:29:15:02:
ea:8e:c0:27:be:22:35:bf:0c:e3:87:64:04:97:c4:
68:66:41:39:09:48:1b:28:1a:4a:2b:44:93:4d:f6:
68:88:bc:23:b8:be:d1:aa:ce:21:84:b9:8d:e7:fb:
1c:9c:2b:6d:66:e6:59:0c:68:7d:64:05:6e:15:5d:
5f:06:6a:1a:80:c6:0a:8e:27:ff:13:3d:67:9e:8f:
d4:e9:52:63:9e:5d:0b:34:f4:92:ee:6d:69:4f:71:
e3:a3:d0:ee:ff:40:c9:4f:33:66:07:eb:46:cd:26:
af:4f:1a:02:ff:65:39:08:56:24:ce:8a:9d:71:3a:
a2:dc:da:73:f3:fa:42:bb:52:9a:c9:02:e4:e8:61:
c9:ce:6e:99:cf:1c:8d:91:71:51:25:93:55:40:fb:
89:3c:2c:72:c3:34:1c:b0:5c:db:11:db:d2:a3:24:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AF:E1:F4:77:5E:D7:BA:56:80:36:E1:27:91:BC:68:EA:27:AA:2A
X509v3 Authority Key Identifier:
keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1b:7d:d4:c0:90:b3:a1:2a:9c:97:ad:1b:19:db:1b:bb:80:
08:e4:e2:d1:21:49:8b:82:24:e8:67:8b:70:03:66:97:e6:4a:
58:a4:48:db:fe:0c:3e:0f:26:47:cb:e9:4f:71:d7:d0:41:35:
ce:ae:42:4d:ea:b4:45:f1:b6:d4:9c:ae:6d:3c:d2:4f:52:75:
15:8a:e2:5d:7b:44:2b:be:1b:e0:0d:ff:c4:a2:ff:a6:f4:ca:
2a:23:94:c9:1c:ab:23:48:72:24:2b:0c:58:27:43:63:57:5b:
26:25:12:01:57:b0:5a:3e:59:74:a9:fa:d6:32:74:c1:9e:d3:
1b:08:b8:be:a9:0b:51:d6:1a:93:19:02:2f:cd:a3:7d:f0:cd:
e6:61:8b:69:f7:80:21:0e:c5:e2:9c:ab:a9:fb:d3:b0:2c:01:
25:9d:bd:bd:87:17:81:4f:d8:e3:64:ae:b1:02:9a:f2:e5:a9:
12:13:a4:27:42:1c:4c:64:66:65:51:c7:a9:92:16:6d:6d:22:
aa:25:66:be:7d:56:cd:ca:13:b8:9a:f8:c7:93:76:f3:dd:be:
13:11:29:3a:53:3c:3f:b4:8d:63:53:d0:2e:e5:01:f4:45:02:
17:1b:1b:c0:26:2a:d8:ed:0d:60:b2:34:2f:40:12:53:d6:f5:
33:65:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:35:22 2025 by rpki-client