Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: mC11FmOwpWV1mjocTRZYm0yzfnpZtTLJUWhsgow+1iQ=
Subject key identifier: D5:1E:EF:21:61:9E:5E:AD:D1:5D:62:AC:E1:A3:04:BD:12:0A:BD:75
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 0199FBEB377CFBDAA5FC6CCF0B2E3C964FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: rrdNrkCpWhSlmqv/S6Ikjv6Ata0jSt6NJEY2rNNUL7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:37:7c:fb:da:a5:fc:6c:cf:0b:2e:3c:96:4f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=d51eef21619e5eadd15d62ace1a304bd120abd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:35:0a:00:d7:9c:57:01:80:bd:99:5f:6e:
db:bd:25:27:e8:01:53:44:45:15:51:37:be:40:b0:
20:cc:57:32:82:fd:66:c0:35:ab:b4:d5:97:1b:82:
04:ca:9e:e6:da:d6:32:8d:5f:78:50:3c:e0:37:2e:
eb:7d:76:fa:94:eb:b2:d4:e2:5e:b2:98:b0:bc:e3:
5c:1c:f4:8c:83:b1:f4:a7:d1:88:81:52:9f:c6:e3:
94:93:46:99:6c:8d:01:d2:d0:68:53:3e:4d:af:c1:
24:20:ab:93:06:27:c9:77:ec:10:4f:51:99:29:a7:
58:40:b0:cb:fd:cc:20:4d:49:4e:b8:cf:c0:61:ff:
43:19:95:02:2c:d8:0c:d5:68:dc:3d:c0:1d:cd:9c:
56:29:37:56:13:ae:15:d5:bc:5f:c9:c5:06:62:65:
1c:d7:14:09:46:56:7f:c9:5d:8b:e5:0f:b3:4e:ba:
4d:c6:27:fd:00:c8:7c:87:64:bb:1d:36:cd:50:93:
7d:72:8d:b6:4e:45:af:18:12:da:cd:8a:d6:8f:40:
a3:41:b5:b9:ab:3f:ab:06:62:36:2a:ec:4e:ba:41:
f6:ef:d0:a6:e5:f9:90:6d:ea:61:24:3c:0b:6f:d6:
fc:3f:31:d9:84:47:d1:0d:ed:cc:b0:a5:83:e8:20:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1E:EF:21:61:9E:5E:AD:D1:5D:62:AC:E1:A3:04:BD:12:0A:BD:75
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4d:fa:24:f4:f2:71:e2:a3:f2:b3:f6:f3:41:c9:f2:5a:33:
71:21:f2:c3:7d:6f:4e:17:90:de:4f:ea:d5:b9:1e:66:2e:f5:
20:c8:0e:ae:1c:02:21:50:f7:91:91:84:34:92:c0:fe:83:86:
fb:98:af:9d:84:24:6b:27:a5:ea:5a:d6:f9:c6:60:34:53:cb:
c4:ef:3a:d2:e4:db:2f:e9:82:18:a1:d6:37:6d:aa:a0:57:85:
24:c8:7a:11:64:83:1c:83:39:45:fb:60:d6:04:c0:0f:d3:d2:
9d:7c:7c:ac:a4:41:d4:d1:6e:9f:91:2e:e2:61:a7:11:08:36:
30:d1:62:7c:8d:78:a8:89:15:c1:ae:ca:56:40:82:6d:3a:c6:
3d:5b:82:ab:ae:20:52:0a:78:0e:fa:c5:c4:c7:e7:9f:8d:28:
a0:cf:b0:2f:09:d5:86:22:57:83:5f:a2:6f:12:2a:7e:47:e2:
2e:b2:ad:b1:39:44:78:01:13:a2:a5:77:75:74:dc:d3:67:57:
c5:a6:af:83:80:ac:fd:8a:6e:bb:b2:e1:df:22:bd:c5:c8:39:
23:15:a2:b1:ab:30:f1:c3:95:c2:3d:4a:34:29:7f:77:45:88:
d1:43:cf:ac:54:93:b2:f6:ca:0d:d7:06:85:47:2f:e9:28:ec:
78:65:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:16 2025 by rpki-client