Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: eWW6yz1i+Xe8WQJwG0pWyOFeBrtpcxXwY37H+lPvkNg=
Subject key identifier: 87:53:C2:4B:A2:55:8E:76:74:B8:23:C3:19:41:CD:42:A2:23:D3:35
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 0199FE101507967E460C378AD7100427DD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 20:01:30 +0000
Manifest this update: Sun 19 Oct 2025 20:01:30 +0000
Manifest next update: Mon 20 Oct 2025 20:01:30 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: yYgcSinUEl/FkTHJF8+auzqJgj5vOc8uP5e6cVWgj2c=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:15:07:96:7e:46:0c:37:8a:d7:10:04:27:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Oct 19 20:01:30 2025 GMT
Not After : Oct 20 20:01:30 2025 GMT
Subject: CN=8753c24ba2558e7674b823c31941cd42a223d335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:bd:9b:82:68:7d:2f:f5:bf:b0:93:ec:67:
99:03:a9:98:4a:8e:d5:2f:e8:a6:9b:65:ca:09:6e:
05:d7:dd:fd:ec:28:13:73:95:db:dd:3c:1b:a3:98:
7e:14:39:a5:84:c0:73:bf:f3:eb:e3:0d:82:93:0c:
7b:cf:96:b8:b5:fa:57:20:61:c7:4f:fd:bf:18:b0:
a7:64:98:06:64:03:1e:d2:6d:a7:9e:60:e6:b3:37:
c2:3b:b5:4a:17:f0:ff:84:88:db:6a:a5:8c:a9:7d:
9e:d0:7e:8d:9c:b9:91:1d:40:07:5f:1b:2b:15:e7:
6d:71:aa:80:0a:d5:ae:88:0a:a1:6c:35:2d:48:84:
85:f3:d6:07:5c:a3:a8:db:2b:60:c4:34:81:1c:48:
bc:e5:a1:c6:17:1a:c5:72:78:ba:12:c6:b5:50:7c:
df:07:36:1d:8b:4c:a3:b7:00:74:a4:72:ac:fb:b3:
d6:e4:ea:5d:82:e3:71:b8:d3:19:5d:e3:71:48:6a:
da:af:ba:b3:2c:f5:84:fc:17:44:c9:ad:41:0c:2c:
6c:4a:94:f6:f7:02:2f:17:f0:36:f7:55:08:df:ad:
c9:2b:18:9b:6f:6f:b6:88:25:62:13:bd:e8:3c:9f:
dd:9e:a5:0a:e4:51:80:e8:27:57:99:76:44:36:8a:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:53:C2:4B:A2:55:8E:76:74:B8:23:C3:19:41:CD:42:A2:23:D3:35
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:55:48:4d:6f:f8:a4:47:2d:36:b5:46:7b:81:44:a2:b5:29:
ef:a0:5d:4f:b5:e7:28:b0:41:28:c4:0f:e1:61:0b:1b:b6:93:
c2:c8:3c:c3:99:a3:07:7c:d3:50:07:52:d0:b3:f1:4d:9a:d8:
96:ca:fa:b8:39:60:53:28:a8:30:73:e5:d2:be:1f:9a:d3:6c:
ca:a1:09:cf:4b:b0:10:88:bf:99:b1:10:cf:7f:cb:05:98:4e:
e3:e1:0d:35:48:83:eb:ee:27:4e:32:ae:5e:bd:1b:61:50:e9:
14:3c:d8:2c:c4:60:8e:a0:14:68:61:cd:e8:f7:61:29:ef:b6:
27:b6:ba:f9:24:18:16:00:f5:99:95:c8:40:da:c4:f4:36:27:
5f:0d:61:6f:c2:dc:ba:e6:8a:c7:73:6b:3f:49:d2:10:fa:91:
2c:6e:2c:58:4b:a3:45:e9:ea:6a:fe:bb:4e:46:04:50:ae:6a:
f5:67:fa:62:f4:44:4c:e2:33:14:c9:0a:a3:69:e8:b2:a5:ca:
c2:fa:5a:d2:61:a5:b6:64:5d:60:31:77:6d:77:78:a5:a0:37:
a4:73:05:b5:44:a9:29:55:ed:57:62:5f:d3:e4:51:f0:c1:79:
8a:de:80:79:9c:a1:dd:37:f2:89:58:64:08:5b:d2:dc:9b:c9:
91:6a:a4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:16 2025 by rpki-client