Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json)
Hash identifier: DHJFnctBlXAnQNSQM1LR+uLdhjVwUNvF1Uce9ZFHgU8=
Subject key identifier: 18:C9:46:13:F8:D6:8B:80:73:2A:D3:6F:2D:9C:6F:77:D6:55:FB:EE
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial: 0199FEB4FF1CDCBD37C316D45D5F61587204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
Manifest number: 07DC
Signing time: Sun 19 Oct 2025 23:01:38 +0000
Manifest this update: Sun 19 Oct 2025 23:01:38 +0000
Manifest next update: Mon 20 Oct 2025 23:01:38 +0000
Files and hashes: 1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: 8yjsaDBkjH39uLn8SsK5EXiz0tTms4oJNqoCzP8+s2c=)
2: sJgvME5bJ6yVOF59D9xKTp2vpfs.roa (hash: RFFMtoYHpJBnhJPcD6pM/r00V/xv6R7sQSuEQXzi4Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ff:1c:dc:bd:37:c3:16:d4:5d:5f:61:58:72:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Validity
Not Before: Oct 19 23:01:38 2025 GMT
Not After : Oct 20 23:01:38 2025 GMT
Subject: CN=18c94613f8d68b80732ad36f2d9c6f77d655fbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:24:92:4c:d6:d4:7a:c5:35:dc:0f:38:c9:
c7:c6:b2:31:33:4d:10:50:bc:3a:f8:87:9d:af:e1:
ef:e9:2d:ad:c0:c7:fc:57:3c:31:79:93:83:a6:f6:
d9:93:3a:88:fa:a1:06:a9:42:84:52:35:53:02:91:
08:80:fa:dd:65:3e:5a:2e:f9:34:fe:b1:09:17:25:
0b:e2:2b:04:22:d5:b3:a1:c5:0d:3d:fc:c7:3b:a6:
10:24:37:21:d1:73:f5:3a:5c:70:aa:8e:b4:7a:71:
e6:4a:65:65:c6:0f:fd:16:c3:af:d6:c9:95:8b:75:
82:78:67:48:f5:40:14:e0:25:e8:92:45:c2:8c:68:
c7:58:00:c8:e6:80:ba:62:d0:05:9a:ff:e8:9f:e9:
6b:4b:ae:11:3a:cc:72:9f:13:b7:82:66:d4:4f:9b:
d4:e5:e3:37:99:81:3a:bb:3e:27:59:8d:05:ee:49:
9f:ea:e3:19:d3:e9:cc:2d:3a:a2:cf:d9:c7:df:a0:
d6:05:7c:45:e0:0a:e1:79:1a:c2:3a:a9:aa:6a:1f:
46:3e:c9:bf:5e:ae:f1:b4:6d:63:aa:5a:c2:54:80:
da:b2:91:7f:46:fa:69:55:f3:15:ee:ce:40:c6:05:
86:ec:9c:6e:0a:37:50:1c:c0:93:7d:2e:1a:81:66:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C9:46:13:F8:D6:8B:80:73:2A:D3:6F:2D:9C:6F:77:D6:55:FB:EE
X509v3 Authority Key Identifier:
keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:73:b3:22:eb:22:a2:29:b1:f9:32:a5:0d:3c:d9:86:31:fb:
67:35:6a:83:d7:07:6a:ac:e2:6c:23:62:e6:24:d4:31:47:89:
03:0f:b3:22:0c:43:8c:ce:8c:ae:5b:75:e7:9f:ee:b9:05:98:
cc:d9:ae:e3:b4:dd:e9:8f:09:a5:ed:f8:2c:29:34:b4:47:d1:
89:e9:49:62:2e:58:1d:91:68:43:e1:1b:b0:b6:56:4a:63:02:
e5:3f:12:b7:b1:e5:4d:21:97:52:a8:22:19:3b:85:03:59:4a:
5c:7d:9e:1a:e1:b6:34:7f:2b:fc:44:7c:a5:b0:34:8c:ea:68:
11:1f:b0:f6:6d:22:3d:31:96:c3:dc:c1:ce:a0:ad:df:b7:36:
c8:30:db:a8:b4:d8:f9:26:f2:50:b2:e7:26:d3:1d:b3:a1:17:
d9:18:b5:26:84:75:01:a7:4b:15:a9:68:98:80:24:ec:4d:49:
c0:c0:39:ca:83:44:89:4e:48:9c:52:9e:fa:39:21:e6:4d:bc:
72:19:db:61:17:67:44:54:bb:76:d8:d7:49:36:29:56:c1:0a:
97:ba:ce:7f:4f:99:9e:11:5c:a5:b9:cb:e8:4a:c1:d2:5a:ac:
2e:09:1c:b6:01:99:f7:a7:fe:f8:a0:ee:ac:99:62:e7:70:2c:
38:29:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:40:06 2025 by rpki-client