Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File: ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier: 7KouG6J2uIclK3Kvv6jh0OekPEEV+eebVvJROCgyXHM=
Subject key identifier: FC:9D:0B:35:5A:68:C9:BA:A9:35:9A:3C:C7:0F:02:C4:6D:F7:98:B5
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer: /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial: 0199FEB49BA46040433EE365DE0B2DD567F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number: 043E
Signing time: Sun 19 Oct 2025 23:01:13 +0000
Manifest this update: Sun 19 Oct 2025 23:01:13 +0000
Manifest next update: Mon 20 Oct 2025 23:01:13 +0000
Files and hashes: 1: luS_MUgmzdMuGS76ZPW7jEugNFA.roa (hash: zmYIzq2i+Cnfy8rt1xmt5c6X8SNFIcSJe0+Xd9kMxgE=)
2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: gPZhx880MlH9ocpqCY/4EAqoIqS3nGKyFBKn9B7Shec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:9b:a4:60:40:43:3e:e3:65:de:0b:2d:d5:67:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Validity
Not Before: Oct 19 23:01:13 2025 GMT
Not After : Oct 20 23:01:13 2025 GMT
Subject: CN=fc9d0b355a68c9baa9359a3cc70f02c46df798b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:86:1c:0c:d1:08:01:cd:43:7c:1b:b9:5c:
45:88:16:15:0f:cf:11:47:c8:18:55:74:be:9e:53:
26:24:18:ed:3d:6d:9b:7b:0e:c2:b6:f3:44:e5:cb:
80:e3:92:e5:a9:cb:8d:22:56:c5:bc:30:c0:67:9c:
c2:51:26:79:21:69:57:72:d0:3a:50:57:9a:60:31:
6e:30:05:c6:a4:4d:d7:7b:d4:ad:dc:4a:87:1f:00:
16:7f:2e:be:74:b2:4c:bb:0c:bf:fd:e7:64:5a:a4:
74:33:fa:8b:aa:c4:c6:31:52:41:fd:b5:1e:e5:53:
7b:3e:d7:35:d0:3d:bb:dc:04:1e:a4:f3:f9:a5:86:
73:a3:52:0b:81:b8:13:52:38:11:36:34:59:05:1a:
03:2e:35:6f:43:d1:2e:b8:02:e3:e4:fc:03:c3:d7:
f0:f5:b9:14:4d:96:61:ac:82:74:e6:ce:63:f3:46:
26:d7:54:20:fd:bb:7d:2e:37:70:75:73:73:ee:c1:
fe:cf:7d:23:43:b5:78:2d:77:c1:57:03:c5:7e:d0:
26:0b:c4:16:eb:ed:1d:06:7a:1a:60:60:7b:62:a5:
cb:ed:e0:06:ba:3f:f4:05:d8:50:0c:22:2b:2f:51:
a8:b2:9f:9a:4e:07:0b:54:ee:07:c9:d9:79:9d:6c:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:0B:35:5A:68:C9:BA:A9:35:9A:3C:C7:0F:02:C4:6D:F7:98:B5
X509v3 Authority Key Identifier:
keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7e:06:03:ad:6d:b5:6e:68:75:29:cb:e4:ac:2a:03:a1:68:
53:3d:64:3b:2b:66:f9:1d:bf:f3:00:53:a0:de:2a:76:c3:06:
ab:b0:28:fc:4b:73:54:c8:d1:8a:a0:b9:35:26:51:81:ed:3d:
8e:e4:96:d9:04:b3:71:dc:35:66:de:52:15:9d:61:54:0a:19:
20:73:ab:fc:28:6b:58:44:86:a4:8e:66:57:07:8a:b2:7d:fd:
bc:91:72:f5:1b:89:39:aa:a6:08:76:7e:39:3a:2a:9a:1d:52:
8f:ce:e3:35:d2:56:86:7a:6e:a9:11:c2:01:3b:8e:e7:8c:af:
be:0d:ab:3a:26:ce:06:56:a1:dd:ba:0c:f8:82:11:9f:b8:db:
39:78:cb:8b:10:23:69:6c:12:a5:1d:33:0b:7a:88:0b:37:10:
68:bf:a9:88:89:19:0d:e7:6d:50:3a:03:ae:5e:8c:1c:28:fc:
22:80:f9:5c:da:e3:d2:8e:a8:41:65:d1:1a:1f:22:8c:55:d2:
c3:19:29:6e:67:40:74:0a:9f:3c:84:e9:7b:9c:28:78:f3:5a:
6a:c4:8b:30:cd:e9:d3:65:3e:71:68:3b:93:d1:e8:9a:be:c9:
9c:7c:49:74:2b:c5:3c:14:90:e6:d9:da:6c:28:32:43:23:fa:
85:fb:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:20 2025 by rpki-client