Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: Wl2BluXDbuXSbGUm94QOrNvtvEKEcOs91ukSJ9of080=
Subject key identifier: EF:C2:E5:92:5A:F0:61:64:BC:A8:27:0C:37:8C:BE:A8:24:98:23:5F
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 0199FB7C87CABEA059517E3D57781B7B73DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: bDjRrVOSj1cTxNmWBRHWb+2NIyCkSGhaOXO+yJU0qHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:87:ca:be:a0:59:51:7e:3d:57:78:1b:7b:73:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=efc2e5925af06164bca8270c378cbea82498235f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:4b:a9:89:68:10:3a:01:2a:cb:24:f7:42:
20:9e:3a:18:ed:eb:eb:f0:49:03:b0:42:c6:37:f4:
e9:3a:1d:20:ee:ad:b5:de:1d:d4:fe:f2:dd:fb:80:
26:f1:10:9f:b1:76:cd:b4:fe:7d:d4:f6:51:51:1c:
3e:d1:fb:06:07:a1:2c:0a:a5:74:d8:8b:48:fd:a9:
79:c2:da:d6:2c:bf:f5:7c:e2:45:64:92:db:32:e3:
2f:f5:66:01:e2:d7:dc:40:20:71:14:5a:f4:b4:f5:
40:c9:77:bc:ff:99:c6:62:0a:a6:23:42:7c:8e:4b:
4a:ff:e2:00:5e:86:8d:ee:f3:ae:49:bf:1f:b5:3a:
4c:46:0e:25:49:cf:01:3b:af:b7:40:13:e9:9e:fe:
92:7c:c0:9b:3c:56:6a:a9:d7:6a:22:8b:01:a8:76:
25:6b:50:1d:65:f8:04:2d:46:68:83:09:72:a8:4c:
52:b7:b1:eb:37:38:3f:c5:46:6e:3c:ab:e7:5d:22:
ef:ef:e3:c8:10:c1:44:90:2b:f2:14:2e:14:fb:cd:
61:2c:d5:45:03:33:0d:9a:dd:4b:64:b3:63:44:9c:
10:a8:f8:64:1a:68:d1:eb:98:45:46:49:94:ef:06:
e2:cb:49:00:64:d2:65:74:8a:c8:d4:f6:5d:f1:54:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C2:E5:92:5A:F0:61:64:BC:A8:27:0C:37:8C:BE:A8:24:98:23:5F
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:24:5b:a7:47:94:e5:ad:88:ed:24:80:ee:df:b1:be:1e:bc:
5d:94:24:e1:a6:05:dc:7b:27:af:63:c2:90:10:c9:37:68:a8:
5c:97:4d:10:d7:07:6a:58:e8:ff:db:5a:e0:7e:b1:3c:3e:fd:
bb:62:ba:6a:68:b0:2a:37:7c:2a:1f:76:1c:e3:57:fc:1e:ed:
92:f2:51:de:9b:06:07:96:b1:08:99:b4:35:e5:eb:32:30:ce:
41:f7:94:6b:71:da:5d:03:7c:07:25:5e:a2:91:60:fa:5a:ef:
47:65:0e:cf:8a:2c:76:a1:41:c6:0f:10:4e:cd:56:d6:33:af:
21:9e:ef:27:ee:b5:2a:d3:46:9d:9d:ce:9d:77:38:7f:8a:f6:
62:57:73:e6:e1:b1:2f:35:0b:00:6a:12:8d:a3:6a:e7:4e:be:
39:f4:83:76:99:bc:26:25:98:03:68:e8:c2:bb:ad:7d:2d:dd:
cd:d9:ce:66:91:df:5a:84:ae:d0:70:6e:df:2c:d0:dd:ad:41:
02:78:a3:2e:92:c6:a7:2a:72:aa:65:be:7e:38:41:44:74:34:
78:22:ff:ba:a2:aa:a8:d1:01:8f:35:76:64:d0:e1:eb:3f:01:
02:bb:57:08:ef:23:85:0d:d1:16:e3:22:04:f2:2d:61:e4:be:
44:d6:31:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:06 2025 by rpki-client