
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier: 1GPMkEG/cy0h2RTJUYlEyO+GYkR+21O7gSG2dFg1oJY=
Subject key identifier: AD:BB:B4:76:D9:BA:B6:30:C2:64:74:F3:AE:15:44:EF:E5:EA:C2:D8
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 0199FD349F771E395F3F15374D59F09730E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 16:01:48 +0000
Manifest this update: Sun 19 Oct 2025 16:01:48 +0000
Manifest next update: Mon 20 Oct 2025 16:01:48 +0000
Files and hashes: 1: HD6zC7xfGA0SAuF4e7yz2Af08gs.roa (hash: VEGKVVclN7mqg9gsZ7F7LgAgXxZFarPfa+qJz1ng4Pg=)
2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: Zt8CMMrjNVc/9iuvZnqsyqB9mGYnVOrryGiAOsko1E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9f:77:1e:39:5f:3f:15:37:4d:59:f0:97:30:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Oct 19 16:01:48 2025 GMT
Not After : Oct 20 16:01:48 2025 GMT
Subject: CN=adbbb476d9bab630c26474f3ae1544efe5eac2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:ab:02:51:79:9b:7c:91:bc:9b:49:9e:38:
f9:83:ce:ce:42:ab:37:a2:1d:21:fd:b2:84:bf:5d:
72:40:bc:7a:8b:90:55:3e:fc:fa:92:f9:c2:41:ee:
77:61:6f:fe:04:ef:a7:07:e2:80:05:8b:97:de:9a:
5d:e1:41:56:10:37:3a:77:59:b1:ae:47:32:9f:c5:
6a:2a:01:ff:45:85:82:52:c9:e6:ad:c2:df:26:60:
dd:d3:3b:85:6a:89:f6:cb:55:78:78:d2:89:89:dc:
65:88:7e:df:cd:ce:62:8d:98:2d:99:84:4c:1d:7d:
75:71:c8:cb:1c:6a:b7:db:6f:03:af:ce:5a:a7:b3:
03:aa:c3:f6:ca:b7:01:04:18:24:f7:df:7d:ee:a0:
d7:ad:7a:97:e2:37:aa:e4:5d:d1:e9:48:3d:83:7c:
f6:56:c9:ab:12:48:47:d6:e1:9e:63:5a:74:7b:12:
33:01:4d:c2:62:04:59:3c:ff:81:5d:d6:fd:a0:b8:
d5:63:33:b5:74:55:0b:8e:ef:e9:55:a1:7b:5d:ad:
0c:ba:76:63:fd:f1:f7:87:c9:98:90:a7:b1:83:05:
d2:f2:e0:e8:5f:8d:5e:64:08:63:76:03:de:0b:c1:
60:c1:c4:0b:d9:6f:21:6b:e9:c8:31:cd:3c:4a:09:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BB:B4:76:D9:BA:B6:30:C2:64:74:F3:AE:15:44:EF:E5:EA:C2:D8
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:68:25:da:3e:59:ea:bf:39:d7:f6:22:38:ae:c5:de:64:42:
11:b0:c5:5e:f2:aa:73:23:5c:e6:71:08:5e:f0:31:bb:53:92:
eb:98:7f:42:3e:17:6d:ac:b7:e2:d4:8b:e9:5b:bc:34:c3:fa:
76:f0:a3:56:f4:fa:ef:6f:a3:83:64:7a:a9:d0:ee:d7:ee:53:
38:67:ea:fc:fe:23:6f:76:55:05:77:18:0e:a6:e8:f0:4e:24:
28:77:eb:31:d6:5b:fa:ae:49:4b:2f:fc:20:7f:20:5d:a3:f3:
e3:6d:b7:c3:05:88:21:9b:f2:71:f2:08:81:0d:68:32:7a:bb:
c0:5b:f2:37:fc:2c:3f:36:60:04:48:af:f2:ff:ff:9b:27:15:
5b:81:9e:9c:6b:1a:39:39:db:20:48:d0:63:d3:8e:76:0a:20:
cd:d3:e2:4b:f1:31:11:68:16:e5:1e:ca:40:c2:ec:f9:eb:06:
bd:d8:71:89:2c:4c:5f:75:20:5e:93:12:1c:5f:d2:f2:33:3f:
e0:6a:06:fe:56:ca:df:f9:e5:9b:ce:1e:c4:9c:d7:2c:c9:dc:
69:13:6d:d3:7c:60:5a:c4:99:04:2c:58:f7:e8:c4:b1:7a:95:
2d:18:9d:31:88:a9:db:e7:1e:df:59:2c:4f:f7:e2:eb:ef:0b:
f1:ca:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:22 2025 by rpki-client