Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File: 0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier: Kt+gf3wZHBbZwIMqIj/gASzRN+s41lXfjUWPYDGs2go=
Subject key identifier: 5F:5E:9F:FE:38:F4:26:E8:60:8F:04:DE:2E:1B:F1:EC:F6:4E:B6:3D
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer: /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial: 0199FFC83F05298F3DAB7B081D20B16D185A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:02:17 +0000
Manifest this update: Mon 20 Oct 2025 04:02:17 +0000
Manifest next update: Tue 21 Oct 2025 04:02:17 +0000
Files and hashes: 1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: Xt8Kjf1O1k9LyhLwEoxQq2BHt/rK3RvwCRo9cqfqEjE=)
2: ZyIu060SPaMWxMQNL4CIeyP46Zk.roa (hash: GVU/SWZQhKij7yAFfd4z7w9wi6LHgd9IcJaXLlSPbVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:3f:05:29:8f:3d:ab:7b:08:1d:20:b1:6d:18:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Validity
Not Before: Oct 20 04:02:17 2025 GMT
Not After : Oct 21 04:02:17 2025 GMT
Subject: CN=5f5e9ffe38f426e8608f04de2e1bf1ecf64eb63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:48:6b:ce:96:8f:aa:a0:fa:50:e0:d9:24:
a1:e5:d1:3f:fd:4e:ff:4e:4e:b0:88:96:cf:d2:6f:
47:46:8d:45:99:48:d3:9d:7c:41:f7:45:ff:ba:f7:
63:b6:f2:d5:0b:7b:b2:46:49:45:3a:7c:8e:77:ee:
a4:66:62:dd:12:94:92:e3:7a:68:24:c9:9a:23:23:
9e:a2:63:09:99:57:3b:49:0a:61:4f:fe:b4:26:c3:
7f:57:38:2a:de:77:c9:a5:80:99:ea:6f:5f:bc:eb:
6e:b2:e1:d4:a6:fa:11:5a:fa:25:13:15:9d:d4:69:
f5:3b:da:48:bb:ec:97:e1:32:4b:f4:c3:ac:60:ff:
35:9d:f5:d2:c1:30:69:78:fc:1d:35:ca:ce:a7:9d:
44:ae:5e:a9:ba:44:7e:84:56:ef:57:b5:61:27:64:
a0:e8:e8:b3:4d:e6:a5:89:a9:f9:f5:0b:46:e3:d4:
8b:59:8e:30:c5:48:cb:8e:c2:1b:ef:44:f1:da:5a:
20:23:6c:b9:ac:59:cd:b2:41:52:cb:d6:23:33:a5:
5e:e8:07:1b:d6:09:00:0b:a2:86:68:10:c1:4f:48:
63:44:62:f9:bb:9f:69:0f:6a:fd:6d:60:73:90:9c:
29:c2:35:8f:bc:21:a1:00:cf:45:75:1e:d6:8f:36:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5E:9F:FE:38:F4:26:E8:60:8F:04:DE:2E:1B:F1:EC:F6:4E:B6:3D
X509v3 Authority Key Identifier:
keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:55:5a:9f:77:a8:ac:dc:2c:fe:52:78:f6:b3:f5:4b:6d:3d:
f6:89:9f:59:48:78:19:f4:b6:4b:a5:22:9a:8a:83:b1:d5:ed:
23:3b:82:63:c9:81:17:86:97:90:58:a9:7d:18:37:28:28:9f:
33:ed:44:89:8a:0f:e4:0e:f8:0c:fd:fc:be:be:6e:47:42:bd:
04:65:6b:a1:36:c5:30:e1:22:03:a6:50:cc:1f:6f:a9:bd:cd:
6d:ba:c9:5d:5d:bb:0c:68:fb:04:09:75:04:b3:96:8a:9f:af:
5b:80:4e:09:78:9a:93:eb:e8:26:d6:1d:88:e3:d7:7e:a4:dc:
3d:36:8d:fc:d2:66:4a:66:1c:3e:47:f7:5c:2c:1f:f3:61:49:
b8:09:de:62:4f:b9:3a:53:91:02:78:43:90:70:a6:b6:8a:15:
82:ee:b1:b0:61:34:ca:95:e2:1b:a2:96:f8:69:21:56:53:e4:
d9:25:66:26:d2:b8:a5:09:f4:ca:f8:84:4b:c9:20:25:5f:93:
75:fb:37:ba:5b:33:2d:8d:60:8e:9b:e0:a9:f4:e5:c0:7d:48:
ef:56:8d:83:b0:7b:52:b2:cb:70:bb:a3:54:61:a9:66:e9:73:
f7:28:bc:89:2a:ae:8b:5a:89:9f:b3:d6:9e:d6:e3:88:e1:11:
e7:e6:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:04 2025 by rpki-client