Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: 3Xno/rCqezJBCRfuyRgczR7enCvCt4WW0+68TiouLto=
Subject key identifier: A8:DD:FD:20:98:7A:75:F0:2D:FA:83:84:13:BD:8D:B3:45:54:03:B9
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 0199FCC62DD263E8197E97611649D46A440E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0BB5
Signing time: Sun 19 Oct 2025 14:01:10 +0000
Manifest this update: Sun 19 Oct 2025 14:01:10 +0000
Manifest next update: Mon 20 Oct 2025 14:01:10 +0000
Files and hashes: 1: 67MB3uIiPBNhFM08ZckoWW6iFi8.roa (hash: JV/MdthgHrxhWbvFQASmk0ngMZHEyExozVaoGSmnqvc=)
2: 9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa (hash: HpbK15QHkCq2yrHDhDOHMvxiVYVvHPgmBjt3qtyByjQ=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: zwXS6G1BNDWSyTVr8PQ/36J4KMDK6W8/S4ZjudVZcZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2d:d2:63:e8:19:7e:97:61:16:49:d4:6a:44:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Oct 19 14:01:10 2025 GMT
Not After : Oct 20 14:01:10 2025 GMT
Subject: CN=a8ddfd20987a75f02dfa838413bd8db3455403b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:00:73:87:7d:60:6f:6d:5b:80:30:e2:9f:
04:7e:60:91:30:5d:81:f7:15:70:dc:58:2e:1c:9a:
94:42:52:ea:44:7a:48:af:46:f7:5c:52:68:3b:7f:
b6:89:28:02:01:f4:70:87:9b:b8:4b:dc:44:68:02:
66:b7:5f:0a:81:37:68:2a:b8:77:58:90:63:9c:8c:
3d:f6:38:7f:32:b0:f0:54:fb:90:f0:fe:cf:c4:bd:
f3:c5:2c:ca:85:f1:8b:ec:8f:cb:fc:fe:7d:57:ac:
55:b3:7f:17:f2:3a:93:8e:78:5b:b0:8d:01:24:22:
a9:f1:2c:4a:16:71:28:30:f0:0b:aa:f1:1d:af:00:
63:a2:b9:5e:53:30:6a:a8:c0:be:ec:2a:f2:49:2e:
b3:38:59:8b:24:98:5d:3f:09:5b:9e:87:a2:90:a9:
c6:4c:c6:b0:72:fe:33:61:ff:fe:78:7e:1e:aa:28:
d8:55:51:71:86:4b:98:85:83:54:db:ec:8d:74:f2:
08:a8:91:97:7f:60:6a:0f:01:73:6c:0c:0c:c7:ec:
1f:45:30:29:26:9b:b9:fd:f9:56:fc:e7:de:d1:a6:
4d:50:68:05:50:c2:4a:64:82:11:17:0a:13:1d:89:
56:5a:f1:6f:66:e4:01:25:00:2d:0b:a9:8d:bc:d9:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:FD:20:98:7A:75:F0:2D:FA:83:84:13:BD:8D:B3:45:54:03:B9
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:19:2b:df:7c:67:f0:4a:b4:76:76:99:8c:f3:65:9a:bb:
1f:be:08:9d:f5:12:9f:9f:ee:44:7e:77:34:0d:ec:3a:a1:75:
a7:ef:df:33:7a:4c:6c:73:e2:ab:78:85:c4:e6:90:90:02:6c:
f3:f7:03:0c:c9:d1:ad:34:dd:30:6e:22:24:42:83:f8:e6:38:
8e:88:df:85:3d:c0:67:79:56:b9:6b:c8:d2:71:7d:57:b1:87:
18:14:1b:94:bf:99:a8:dc:d7:31:92:4c:43:6a:ec:26:b7:75:
b9:84:92:a3:60:7a:82:dd:e8:ba:a5:98:5c:47:4a:de:8f:f0:
a3:49:29:ad:2b:52:c3:92:ce:21:d2:ed:a3:24:69:a3:be:c6:
b6:dc:35:97:c7:28:68:32:af:c1:d7:1f:38:61:49:a8:c6:37:
93:bb:b9:6f:19:f5:28:97:01:f9:65:0b:7a:6b:5b:66:a6:6b:
f2:48:b8:bf:32:e2:55:0b:0a:26:d5:fd:80:67:da:6d:1f:62:
12:8e:f9:0c:83:4f:94:4d:cc:6e:a5:3a:91:3e:47:01:db:4e:
14:ec:c5:2f:30:f9:01:de:4f:22:bc:eb:2c:e5:b3:3f:c8:b5:
74:4b:0e:ca:5d:59:6b:d0:cd:a9:28:60:0a:6b:3b:9e:63:df:
cf:d8:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:09 2025 by rpki-client