Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: KAuOFrxkkaJOsMJY9YS9rB1UNvr9cIBgGKcwrbY6kgI=
Subject key identifier: C8:E5:26:EF:E8:30:D9:DC:8F:DC:99:42:7C:54:40:7E:5A:76:42:D2
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 0199FCFD7029D238E2DEB81439843D1DBEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0CE3
Signing time: Sun 19 Oct 2025 15:01:31 +0000
Manifest this update: Sun 19 Oct 2025 15:01:31 +0000
Manifest next update: Mon 20 Oct 2025 15:01:31 +0000
Files and hashes: 1: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: I1RPy3meJF3tPAWeXb+sE9R0wIy5nDgKBXW7g7v8mao=)
2: _B7qhSnCxfn7CerNmWLFyrIUzIo.roa (hash: SylKEkKlUGkISQweMYeNKNB3Kfx1l1zxuoZbI4A8/rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:70:29:d2:38:e2:de:b8:14:39:84:3d:1d:be:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Oct 19 15:01:31 2025 GMT
Not After : Oct 20 15:01:31 2025 GMT
Subject: CN=c8e526efe830d9dc8fdc99427c54407e5a7642d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:58:10:cc:62:46:53:66:16:b6:bf:db:0a:
c4:94:e0:f2:8e:08:78:6f:d8:7f:41:06:84:16:b2:
18:68:9b:ed:b5:7b:65:fe:9a:2e:87:dc:3f:06:31:
c8:44:ea:af:0b:b6:83:f7:96:cc:01:16:53:b7:db:
15:e9:25:0f:c8:1e:b0:a3:54:05:97:6a:e5:13:90:
c1:e1:15:10:ad:f3:da:1c:3b:af:ca:a4:89:d2:2b:
4f:25:7a:f0:42:90:0c:b1:f2:71:87:a8:86:51:b9:
c9:ab:b4:bd:01:a6:c9:0b:27:fe:b2:35:31:a8:d7:
a5:98:3f:46:ab:6d:25:82:54:28:3e:a5:6f:d9:e7:
a0:2b:aa:9b:23:2c:d4:4b:db:29:7f:c5:20:4a:f7:
83:cb:35:1b:eb:38:75:e1:93:b7:f4:4f:85:fd:89:
fa:0f:8f:13:e6:d2:74:2a:9a:4e:e1:49:4f:55:51:
9e:da:51:7d:ed:a5:b5:16:10:dd:b5:97:1a:ef:16:
3e:07:eb:53:49:8e:b3:80:71:16:1e:d9:8c:93:4f:
6b:8b:32:11:83:de:9b:34:19:8e:70:8d:83:59:1b:
ae:42:2f:93:d1:8c:ee:2d:6d:69:67:ae:ca:04:55:
e5:aa:c3:a3:3b:63:9c:32:6c:31:5e:54:55:1c:b3:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:26:EF:E8:30:D9:DC:8F:DC:99:42:7C:54:40:7E:5A:76:42:D2
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e7:d8:dc:9f:79:aa:17:0b:21:39:9b:3e:58:70:12:32:9c:
6c:bd:71:77:af:09:5d:e6:82:d2:8e:77:08:5e:36:4b:aa:c0:
41:00:74:b0:51:97:de:d3:4f:50:71:77:1b:f5:27:07:9d:98:
fb:bd:f1:d7:81:9c:d0:5b:df:8c:d0:8d:ed:8b:be:15:7e:61:
0e:bc:5a:13:79:3d:01:db:2f:c0:19:59:38:58:a3:34:c8:ec:
74:06:d0:b0:74:96:df:78:07:6a:c2:43:03:9a:03:5c:fe:24:
03:8d:4a:94:fa:d4:fd:67:22:f7:e3:d7:ce:13:a4:89:b3:a8:
66:64:ba:30:25:a4:9b:62:57:34:92:a4:e8:18:f6:ed:f2:48:
64:84:27:bc:6a:25:9f:72:af:fa:5f:8b:98:2c:a7:f9:fb:05:
61:a9:1e:d6:ec:ae:85:37:5b:e7:1b:47:36:e9:d5:25:b0:76:
a4:73:48:e1:c1:61:9b:7a:03:0e:12:4e:c6:b0:7a:57:52:aa:
54:09:b3:3f:b8:54:41:bf:9a:2a:c5:e3:79:8e:d0:83:f3:c6:
3a:f3:4e:8e:15:51:1d:1d:4d:04:dd:3a:61:60:5e:f4:9e:1b:
eb:25:ca:ba:63:1d:23:35:90:0f:49:a2:54:5c:55:81:bd:4f:
ec:3d:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:24 2025 by rpki-client