Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: cvoMLvDXpPHN0ODkfQfE9O4AEu/uqZCCzrrpSLIQmT0=
Subject key identifier: 47:30:FF:5B:65:01:E3:72:3E:18:A4:85:F2:74:62:D8:43:3F:89:58
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 019A01B653B69EB6A7CA47ED2EAEA9062C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 13:01:57 +0000
Manifest this update: Mon 20 Oct 2025 13:01:57 +0000
Manifest next update: Tue 21 Oct 2025 13:01:57 +0000
Files and hashes: 1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: IgYJSkVsnuOPf+iqpKiiXoNAwb3EcnqrSSVK5x1mKGg=)
3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:53:b6:9e:b6:a7:ca:47:ed:2e:ae:a9:06:2c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Oct 20 13:01:57 2025 GMT
Not After : Oct 21 13:01:57 2025 GMT
Subject: CN=4730ff5b6501e3723e18a485f27462d8433f8958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:3b:cc:17:82:bc:f6:9f:3d:86:04:c5:8d:
96:8d:2e:2e:30:38:6b:78:dd:a7:9e:6b:7d:2c:5c:
66:49:1f:0e:87:95:48:d1:d9:a5:e0:78:98:7c:a3:
d1:04:6c:e1:57:81:69:70:d0:25:85:cd:40:28:88:
68:3a:b8:d3:a1:ff:d2:ed:c8:a8:17:3b:80:12:1a:
cc:53:75:66:b3:3e:d2:29:3a:f8:0e:fa:7e:44:27:
ff:f9:c5:8d:76:8e:8d:fe:26:d4:f0:e1:65:ed:a9:
51:0c:d0:b9:81:f4:74:23:e9:23:00:88:94:5a:3d:
e6:91:46:ad:c9:44:99:11:0e:a9:51:cd:8a:4c:48:
9c:eb:48:2c:a2:f9:9c:d3:74:7b:62:da:59:88:5e:
c3:f3:03:75:d4:90:57:72:db:03:f5:36:76:aa:63:
a6:82:06:dc:75:7b:be:92:38:3a:d1:66:c4:f2:59:
13:59:34:f7:c3:9c:9c:f7:8e:27:41:7d:a9:55:c0:
8c:7c:c1:69:61:48:d9:d5:e0:2f:84:89:5b:12:73:
54:4f:3b:8a:56:48:8d:71:a4:a1:f9:dc:a6:86:1e:
a6:fa:b1:8d:1d:a6:12:64:11:bc:6e:80:76:cd:59:
d2:2f:c4:1c:83:d1:8a:59:c8:1d:e2:28:be:e4:dd:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:FF:5B:65:01:E3:72:3E:18:A4:85:F2:74:62:D8:43:3F:89:58
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f3:a6:be:10:11:ca:0f:02:70:07:a0:b9:43:71:ae:9d:02:
2d:69:78:11:92:65:75:e7:39:3b:f7:87:67:62:d3:b1:31:4a:
86:0e:39:a2:10:c5:ee:8d:f5:fb:05:f9:b6:16:10:ec:55:b2:
2d:0e:27:2b:c8:49:b5:65:f7:dd:2d:a2:84:64:f4:6e:79:49:
21:27:95:ed:85:03:f6:f6:b8:61:5e:41:7f:88:4e:81:fc:06:
b6:c7:b7:8e:71:be:2c:56:83:34:47:c7:5b:61:eb:83:d1:7d:
2a:d7:39:6c:bd:89:98:c6:d7:1f:ca:1f:ed:d6:1a:bb:a1:9b:
f5:26:ab:04:88:07:f1:1e:e9:b5:f8:b2:a4:00:fb:66:be:f7:
9a:5a:21:2d:ce:f5:96:6d:6e:e5:7b:7b:60:8a:3e:94:40:b6:
32:00:d0:c3:54:5d:2f:aa:7e:23:20:b1:56:78:1a:29:d1:a3:
a3:39:16:1a:12:bb:3f:63:e9:3b:20:5d:21:48:f6:cd:14:e2:
81:9b:2d:6d:ef:bf:5e:93:d3:ea:fd:34:17:34:26:94:9b:fe:
a1:c1:fc:60:5f:73:fc:ff:a1:66:d8:d6:e9:7c:92:c8:04:15:
48:35:41:af:7c:51:65:55:3c:dc:c7:e0:8f:4a:21:fa:e7:b7:
1e:71:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:10:09 2025 by rpki-client