
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: 6MVauqqtTsRGYrJEMoxyLipPOZt072UjqoGE3+rXCrI=
Subject key identifier: F4:7A:CF:72:BB:44:B4:4C:8E:88:7E:BB:E5:8E:EC:58:49:9A:5F:14
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 0199FA69E9D042ECDC97544217FA47697083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 03:01:09 +0000
Manifest this update: Sun 19 Oct 2025 03:01:09 +0000
Manifest next update: Mon 20 Oct 2025 03:01:09 +0000
Files and hashes: 1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: ZEnHMtBeLeldFptj3LW58UgBZun6IAydCB+A04t9t3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:e9:d0:42:ec:dc:97:54:42:17:fa:47:69:70:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Oct 19 03:01:09 2025 GMT
Not After : Oct 20 03:01:09 2025 GMT
Subject: CN=f47acf72bb44b44c8e887ebbe58eec58499a5f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:7c:37:f7:47:97:c0:3f:da:3f:08:1e:9a:
30:c1:d7:7b:80:61:c7:11:0a:ef:85:4e:7b:9d:0a:
5c:c1:00:4e:00:fb:49:49:00:13:60:74:76:d6:65:
e1:09:59:cc:8a:5e:9a:15:5d:a4:53:41:18:c0:14:
be:90:cf:8b:85:ff:f8:2f:21:93:e2:19:be:06:86:
5c:3c:74:34:19:cb:3a:af:b2:f1:7a:8b:32:1a:ee:
51:13:75:aa:f2:08:90:6f:22:64:9d:4b:ca:eb:12:
7f:42:eb:cc:21:65:e4:42:2f:f0:dc:7d:5e:e2:92:
3d:79:13:16:d5:b0:f0:c9:6d:06:b0:8f:97:9c:f3:
fd:a9:49:78:7c:25:d0:c7:da:07:f1:20:6b:ca:dc:
80:5f:25:63:5d:6e:70:75:df:16:46:45:47:9f:74:
b8:07:a1:e7:11:9c:85:0e:9e:03:cc:96:cd:2b:a8:
2a:03:1b:87:97:9c:e6:ed:a8:14:24:29:4b:ef:e1:
60:c2:6c:79:ea:e5:33:9a:26:ea:ad:93:03:6b:55:
fd:1d:46:1f:76:e8:3a:53:3f:71:4f:57:1d:b3:3e:
6b:22:b9:2a:79:ee:36:ce:a3:55:2b:d6:68:42:2e:
64:a0:76:c0:eb:a5:58:9f:bd:cc:19:b3:00:a3:9e:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:CF:72:BB:44:B4:4C:8E:88:7E:BB:E5:8E:EC:58:49:9A:5F:14
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:c8:e1:f4:53:69:32:b0:3c:25:5c:97:a6:26:f5:3f:ce:bc:
8e:3f:06:b8:91:6d:8e:0d:17:da:39:2c:c9:1e:12:6c:c6:26:
04:d6:8b:83:0e:1c:aa:3a:7a:53:7b:62:46:3b:c7:f2:8a:08:
4e:6b:0f:73:5f:04:c3:92:c5:a7:d6:10:4c:b9:d8:8d:6f:58:
e4:a8:3f:2b:52:84:b0:4b:9f:aa:20:3a:7f:de:87:27:73:e8:
ea:55:a4:94:aa:cb:eb:52:39:08:3d:15:69:3e:7a:5d:15:04:
b5:b4:18:2e:7d:70:e1:f1:d2:d6:32:6e:90:d9:2c:fe:05:d1:
13:7e:9f:89:3b:a0:e1:41:5f:f6:a7:5f:f8:ae:32:93:88:a8:
ba:19:56:fb:57:bf:d7:37:97:97:9f:5d:43:0b:a3:1a:c3:e3:
64:d2:39:c7:89:1b:8d:02:42:c3:44:45:1a:54:7b:e0:3b:3d:
8d:33:c0:33:d1:b0:bc:58:e6:25:e5:fd:40:fc:59:fc:b5:13:
2d:8a:70:14:aa:da:e2:1c:62:72:fa:aa:2f:f8:81:32:39:82:
3f:e0:79:06:33:ec:2d:2a:50:f3:7c:0d:68:ac:10:e5:b7:33:
53:a2:54:d4:8d:06:fe:cc:49:11:cd:22:07:a6:d4:6b:db:5a:
17:25:dc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:30 2025 by rpki-client