Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier: 1kIF46EM4RPjNB0LkTjo9ZWGAgNYh2oAVbntb8Gem+I=
Subject key identifier: 8A:B0:31:63:C9:A5:2C:50:E8:C8:D0:B2:81:B4:93:E8:61:F4:AA:B0
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 0199FBEC23DF151B83AC9B97C74B58C368BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number: 1612
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: A+sqOu9Wd+6Dy0IT/og2Q/SgfheB1r3oXa6gC6cdzQw=)
2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:23:df:15:1b:83:ac:9b:97:c7:4b:58:c3:68:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=8ab03163c9a52c50e8c8d0b281b493e861f4aab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:50:95:36:07:5c:bd:1a:a3:6a:df:94:df:
85:49:e7:37:f7:43:51:10:f8:c4:f5:1b:af:36:29:
81:a3:0e:6a:e6:56:a7:30:3f:5f:2e:a1:c2:03:97:
30:99:ed:01:7c:30:c4:a9:bd:4c:bd:fd:22:b4:77:
66:fd:95:6a:2a:6f:87:a0:a8:64:3f:5b:b2:06:f8:
b3:54:e0:9d:ba:94:42:a0:9e:dc:0f:f2:6a:89:0b:
ec:b6:d6:38:97:ad:1c:0a:e9:5b:32:84:fa:04:1c:
b8:de:bd:3c:39:4a:a1:3c:c2:1b:fb:8c:a2:f7:5e:
80:48:ff:a0:6e:b3:91:7c:57:b2:44:16:57:a6:39:
9e:35:a0:11:94:c1:6f:8d:8b:23:b7:5a:84:42:1f:
1a:49:d7:81:71:3c:12:ef:14:66:4e:20:27:5f:36:
dd:5d:95:1c:a5:38:39:c8:f0:b9:22:f1:06:4f:86:
04:3d:8a:09:c5:ae:07:33:b6:de:ea:45:bc:3b:df:
ba:48:9b:18:b4:37:65:20:46:bb:02:52:50:4a:44:
a6:f7:1d:61:64:74:30:7e:37:ce:a0:79:69:5c:dd:
e0:cb:cb:75:2a:6d:01:16:ea:ad:fb:f1:c2:84:0a:
d2:6d:60:d7:8f:13:95:9f:80:d6:9c:58:d9:00:4f:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B0:31:63:C9:A5:2C:50:E8:C8:D0:B2:81:B4:93:E8:61:F4:AA:B0
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:30:76:77:d3:30:43:c1:e7:c1:d5:dc:78:d9:0c:e6:42:e9:
fd:01:76:7f:23:67:ae:40:7d:53:1d:cc:b6:b2:40:5a:fd:33:
d9:4e:d3:1e:65:4d:f2:2f:07:1a:5e:ec:d7:87:25:0f:21:9d:
1e:16:25:7d:36:9d:01:02:61:43:bb:af:2e:21:66:91:6e:33:
8c:7b:13:b8:b7:8e:59:eb:f1:23:59:b3:77:13:d9:82:97:62:
dd:1b:a0:66:f6:f7:21:a2:c5:c9:7b:78:48:53:ef:dc:70:1a:
19:0b:af:a3:e4:46:83:01:e4:bf:b1:15:a5:78:46:92:62:cf:
bd:ce:d1:5e:1b:ff:1c:1e:a3:14:de:c2:5b:1b:55:9b:45:c9:
c0:40:00:82:5a:75:a5:62:9e:e0:e2:f9:b6:19:40:84:6b:41:
8f:b3:61:6d:20:e8:7c:5f:74:65:d8:cc:0e:40:5a:f0:34:4a:
9b:00:04:30:e1:af:7d:17:a6:51:a0:a4:e5:63:48:18:b1:49:
d3:b1:62:60:20:f6:24:83:f7:7c:72:21:f7:89:57:67:dd:3a:
58:62:f9:8f:71:ad:6a:87:27:c3:5d:85:f0:17:38:2a:2e:75:
3b:9e:ff:fd:d7:7a:38:19:88:2b:e1:bd:fe:d7:0d:3b:36:1c:
fa:c6:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:48 2025 by rpki-client