Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: 4icQD0XDg7Ct49JEFg1jHK1ZGt48gUg4HL/wYSYdf4o=
Subject key identifier: 1A:DC:41:AF:90:21:F1:46:EA:2F:CB:67:20:1F:28:BE:07:72:E5:70
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 0199FE47021961DDE380493DEA4A161FEEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 21:01:30 +0000
Manifest this update: Sun 19 Oct 2025 21:01:30 +0000
Manifest next update: Mon 20 Oct 2025 21:01:30 +0000
Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: 5RhorhiEMerHzhrC50NZkdlNZJvwHcA9+ixFNdy1EDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:02:19:61:dd:e3:80:49:3d:ea:4a:16:1f:ee:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Oct 19 21:01:30 2025 GMT
Not After : Oct 20 21:01:30 2025 GMT
Subject: CN=1adc41af9021f146ea2fcb67201f28be0772e570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:20:f9:7e:17:56:b5:f9:03:26:10:51:05:
5a:8e:52:94:cb:5a:45:89:d6:23:07:22:de:a7:dd:
10:ee:5b:2e:f6:9b:04:27:d0:e6:2e:bb:5a:90:9c:
7e:61:69:fa:43:fc:59:28:60:a6:c4:40:c8:8f:d9:
bb:62:86:bc:9a:c6:05:cd:70:12:50:79:36:e7:03:
0f:04:5d:57:08:f8:9b:93:57:df:d7:64:c6:70:1f:
b7:22:ca:5a:6d:58:f0:3f:66:74:44:77:81:0f:c0:
c3:97:a2:98:22:97:bc:fd:91:93:ff:ca:07:ed:a5:
07:8b:67:3e:91:a7:04:cb:b1:b3:95:8f:e8:f3:84:
2e:dd:40:bf:26:b0:60:10:86:2d:15:f2:75:f5:d7:
92:2c:bf:18:21:82:c5:75:cb:6e:fe:3f:5c:36:71:
07:c3:71:e9:67:62:2a:05:80:43:70:fc:bc:2c:82:
38:0d:e7:d5:70:6c:8a:34:98:b8:8c:61:1c:71:92:
7b:fe:7d:98:79:4b:5a:85:b4:48:84:a9:03:6f:70:
29:e1:c4:c1:0d:db:f4:98:af:3d:77:98:f4:68:96:
fd:ff:38:cc:bd:ca:2c:96:2f:2d:c2:3a:f4:80:6f:
ed:89:0d:dd:c7:09:16:70:83:49:36:79:d3:dc:c4:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:41:AF:90:21:F1:46:EA:2F:CB:67:20:1F:28:BE:07:72:E5:70
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5d:1c:91:b2:c7:d8:28:07:4d:86:82:f9:3f:41:f9:25:1c:
a5:d2:c8:d5:b8:09:88:e7:38:8d:79:fa:0a:68:72:ca:36:bf:
78:bf:a1:58:6c:96:93:1c:bb:c2:69:6a:18:02:61:b2:81:d0:
78:a3:cc:aa:e3:2f:5b:89:33:41:2a:46:fd:b6:e3:bf:ff:21:
a9:d1:0d:b6:66:6f:e8:64:3d:35:25:65:7c:fd:50:03:00:06:
54:49:8b:73:39:a9:1b:50:5f:2e:a0:33:8e:72:93:1c:37:5c:
7e:ca:3b:38:16:b7:2f:04:a5:8e:04:2b:e5:75:ed:2a:84:f0:
f7:87:55:91:86:57:11:70:18:bb:ec:56:e0:fb:1c:0b:92:93:
32:47:a9:77:07:0c:d0:ce:b1:4f:ad:ee:03:99:91:05:80:fa:
60:ec:75:36:47:77:04:92:db:21:d8:b5:9a:b0:5b:6e:e5:ee:
2a:57:10:30:01:c0:45:3b:23:cc:ec:b3:b2:70:5d:79:86:5b:
97:86:43:3d:90:ad:0f:b2:fb:32:2f:cd:53:25:c0:f4:bb:1a:
24:15:fa:b9:f9:51:f4:21:f2:d4:09:60:2a:cc:0b:55:2a:e9:
65:b3:e8:9e:9a:4b:14:1d:16:15:d0:51:35:20:5f:2e:dc:8c:
e1:39:75:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:40 2025 by rpki-client