Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: dU5v/NjBP7+4WMs9g1LgnIFW4myRNStcPdf79ak7bLU=
Subject key identifier: 3B:C7:B5:6D:CE:0D:9A:74:AC:25:86:A0:C6:64:14:B3:0D:36:2B:85
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 019A03A45D66CE7109DBAE6BF675AC887503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 22:01:34 +0000
Manifest this update: Mon 20 Oct 2025 22:01:34 +0000
Manifest next update: Tue 21 Oct 2025 22:01:34 +0000
Files and hashes: 1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: F1Z5bj3DKhKxTTkHRRdOruRu9UT5k1aAOUpDjp050NE=)
3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:5d:66:ce:71:09:db:ae:6b:f6:75:ac:88:75:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Oct 20 22:01:34 2025 GMT
Not After : Oct 21 22:01:34 2025 GMT
Subject: CN=3bc7b56dce0d9a74ac2586a0c66414b30d362b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:e2:cc:36:b1:0f:2a:31:2a:28:b1:3b:29:
a1:6d:8a:2a:ec:41:ec:df:0a:66:de:2e:74:b1:14:
b7:56:27:37:8e:2c:4a:c3:0f:77:4f:97:8d:39:8c:
b9:8e:6c:b8:a8:07:b8:be:72:a6:bd:32:f5:01:38:
1d:fd:47:45:1a:6a:8a:21:9c:96:1c:c5:ad:f9:3c:
f4:75:2d:94:3e:34:25:23:bc:c7:2a:02:c3:b1:d3:
d7:57:47:6d:7c:15:bb:7b:f4:8f:50:a2:91:12:3a:
7b:00:6e:2d:08:82:16:5b:b9:31:17:1a:5a:3d:da:
89:92:a4:2d:12:08:f6:39:54:f5:03:fe:2c:01:7a:
cf:69:f7:74:6c:b2:09:f6:c2:de:39:fa:f5:2f:80:
ff:21:60:ca:7a:f3:2d:21:dc:a1:09:9e:79:9a:22:
bc:bb:04:7c:a6:ed:4a:7b:9f:f7:97:e5:d4:d9:53:
27:4e:ea:26:26:83:1f:ae:ee:ca:97:f1:6f:5b:eb:
31:41:13:80:c0:4f:c1:e2:f3:45:a2:1b:de:23:5d:
5d:3d:df:c2:05:8b:54:b1:60:e3:52:81:f9:00:8e:
5f:2d:72:68:65:be:f9:7f:f5:58:2c:f4:78:c8:93:
52:64:38:e9:75:52:82:f1:ff:a2:2b:38:34:96:eb:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C7:B5:6D:CE:0D:9A:74:AC:25:86:A0:C6:64:14:B3:0D:36:2B:85
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3a:40:98:32:00:16:f4:4d:e2:47:44:71:7d:4e:fe:f1:46:
77:a5:89:02:71:90:9a:ab:2c:a0:a8:2e:67:6b:9c:fc:e2:54:
ce:f0:f2:c5:59:0a:20:a5:af:84:67:5c:e1:f9:2d:d2:67:06:
7c:1f:0c:d6:4a:ed:7f:18:c8:79:4d:69:06:cd:bb:e1:93:a9:
c6:bc:64:b0:61:88:fd:a3:43:91:88:62:fd:7f:7f:29:2b:4c:
8e:1d:80:fb:b2:3d:1a:a5:17:30:e2:94:9c:73:93:8f:2b:c6:
ad:4c:5b:e3:42:28:88:1b:5e:b6:7d:7b:85:83:e4:99:4e:1e:
09:e3:bd:1c:e2:f0:f0:58:e1:72:a7:ab:b7:23:81:d3:62:e3:
f8:dd:86:a9:02:bf:80:5e:ed:2b:a9:f8:a8:56:cd:68:59:55:
8f:63:cd:c8:68:6c:61:58:c8:f4:67:d9:01:52:5d:29:df:ee:
0b:d7:4a:df:e8:98:c2:70:d0:15:e6:31:1c:a9:8b:a8:4a:95:
1f:b8:51:ca:6f:75:92:7a:34:8d:65:5f:7b:d5:61:6c:05:d5:
c8:28:a9:4f:42:ee:cd:41:d2:ff:3c:39:0b:49:2d:0c:f2:0f:
38:85:83:a1:4a:34:5b:9c:43:84:6f:09:11:4c:46:bd:fe:e3:
9e:b5:f3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:09:05 2025 by rpki-client