Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: BsMk649kLjDHQPg1ZrACAB9HCN58Dp6gYOcZQ+e8ZrY=
Subject key identifier: B2:83:F3:63:BB:89:4B:FC:76:9E:F8:AF:1D:30:92:DF:26:E8:52:75
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 0199FDD91DE0111EDC7C45F781B8F08A12AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0A53
Signing time: Sun 19 Oct 2025 19:01:28 +0000
Manifest this update: Sun 19 Oct 2025 19:01:28 +0000
Manifest next update: Mon 20 Oct 2025 19:01:28 +0000
Files and hashes: 1: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (hash: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: Bj620vd5O9wAghRdUGbMX3t4sy0hwYMH998creTjLOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1d:e0:11:1e:dc:7c:45:f7:81:b8:f0:8a:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Oct 19 19:01:28 2025 GMT
Not After : Oct 20 19:01:28 2025 GMT
Subject: CN=b283f363bb894bfc769ef8af1d3092df26e85275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:4e:de:8b:0c:08:01:4b:75:c9:a7:88:ab:
87:26:c9:8e:16:fc:84:6f:8f:36:90:9c:ec:0c:e2:
e7:02:1e:28:2b:ed:43:2a:28:82:f5:40:f7:a8:a4:
e6:7f:e9:db:9a:1b:9d:70:0b:42:f6:eb:57:88:d4:
5a:d8:49:db:8c:00:2c:89:3c:f7:df:4e:19:12:b9:
4d:cd:85:7d:61:85:10:cb:80:25:b7:9d:f6:72:0a:
04:77:91:7f:69:a4:80:8e:59:88:c9:07:da:75:e7:
4b:1a:29:d0:6b:0f:a3:d1:2f:f5:f7:8c:05:ab:8d:
dd:40:4e:53:a8:0a:d6:43:59:00:7a:5e:20:7b:80:
53:81:8c:fa:3f:f6:dd:b8:41:79:a6:c2:21:ba:57:
81:9f:3b:1d:72:03:c8:3f:3a:ea:bb:a9:43:e6:63:
48:9f:a3:2d:45:89:a6:a8:4e:36:25:43:86:26:44:
95:7a:0c:de:b6:2e:34:58:d3:cb:cc:99:77:a3:d7:
c7:2f:1b:3a:36:68:8b:f1:41:b0:4b:34:c5:a7:f7:
5d:58:d2:de:98:24:63:e3:30:5d:64:60:7a:f8:6f:
a0:3e:0e:4b:3d:62:16:46:92:09:62:2f:a3:92:af:
3c:ea:a2:20:0c:ee:3c:57:3d:a1:8f:75:39:fc:f1:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:83:F3:63:BB:89:4B:FC:76:9E:F8:AF:1D:30:92:DF:26:E8:52:75
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:89:14:05:72:3e:f4:64:8a:b1:7f:43:91:d2:62:9a:e5:db:
69:72:d9:d3:ff:cf:0c:83:4e:d4:f1:44:cf:61:e2:66:f0:01:
d9:fa:23:eb:ce:f4:71:f0:a6:20:9d:30:48:11:03:a5:e1:a5:
2b:de:75:10:4c:b9:b0:5b:e3:03:1f:f4:86:db:e4:2a:86:cd:
54:b1:c6:b9:20:93:90:db:7a:1e:72:1d:5b:3e:87:57:70:4b:
f0:af:c3:e9:02:81:14:75:c3:4a:bd:c8:a7:11:fc:27:de:c5:
50:bd:72:4f:26:92:b9:a1:f5:c6:b3:09:f1:cb:b9:29:fa:0b:
9a:cb:d4:df:81:c5:76:f8:2c:6b:10:15:86:d9:89:99:95:b8:
69:14:47:9d:f2:d7:ba:de:9c:7b:79:aa:7a:b1:71:69:a3:3d:
2f:47:73:2c:43:3a:9b:ae:83:47:5f:e5:5d:5c:1d:3b:6b:e3:
0b:75:12:75:d2:3f:86:99:c2:6b:bd:9d:15:6a:b2:e6:a5:b1:
ec:c8:bb:d0:86:b3:76:78:f2:54:7e:f0:bc:14:cd:50:3c:41:
fb:b6:fb:7c:c7:d1:d1:91:ba:43:0a:9b:03:2c:5e:4a:49:b7:
ca:31:8f:da:c3:cf:2e:86:ff:7e:83:14:d9:64:da:24:37:d6:
ae:47:a9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:00 2025 by rpki-client