Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier: qahExxhHzasSs/gK4IL0CCvnz1d7R+52ROVa/V/a7wM=
Subject key identifier: BA:AB:79:91:35:6C:77:B5:CA:52:76:82:A8:B3:F0:D3:B3:F1:D3:63
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 0199FEEBDF03565FDCF9CA5272FA6A3BB310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 00:01:34 +0000
Manifest this update: Mon 20 Oct 2025 00:01:34 +0000
Manifest next update: Tue 21 Oct 2025 00:01:34 +0000
Files and hashes: 1: A9fnzzZSIyyk78DkykeGYg11L2Q.roa (hash: jan8f+is44AYa9jG93HTE50pBitsknBS00si8XIMwqI=)
2: DHmLK6qv7LDp9GSFF3bVVqiSSSs.roa (hash: 4c04LYJlSQnDFsWUTe3RinfcXPa5HIaLB5gKn1wNfQ8=)
3: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (hash: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=)
4: cM2WijieWcfz1get8DBHQkXXH94.roa (hash: YN463PMg+163k21SmND+h8gKso19maJII2obZdv1r0M=)
5: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: J4Frt4DgM67BW4Y8up0BnIV1J4IG4A2wI74rLAXMfiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:df:03:56:5f:dc:f9:ca:52:72:fa:6a:3b:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Oct 20 00:01:34 2025 GMT
Not After : Oct 21 00:01:34 2025 GMT
Subject: CN=baab7991356c77b5ca527682a8b3f0d3b3f1d363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:11:d0:4c:f8:51:e1:80:fc:88:82:66:90:
1f:fa:40:04:8e:00:29:53:de:8e:0c:b3:b6:18:b1:
ba:24:33:c7:f5:f5:a8:71:b3:22:87:1b:18:82:33:
8a:56:a5:77:43:53:de:95:93:35:22:df:b1:f9:ee:
6f:b8:c4:86:06:bb:2d:0c:ac:8f:9d:38:91:93:0e:
01:02:a9:81:00:71:5a:b3:0d:c8:57:b9:b9:42:c2:
b7:bd:f6:c3:4d:93:65:09:7f:3e:cf:f3:41:22:62:
a5:cc:19:a5:2f:af:25:98:a0:21:3f:7c:4a:00:25:
13:f6:09:e0:b6:b2:e8:08:3a:5f:32:2c:8e:04:f1:
b2:9e:ee:8b:8f:f8:d1:b2:08:cb:84:c8:8f:b2:d1:
27:a1:34:1a:4b:6b:31:8d:29:db:d0:b2:88:60:a8:
37:ec:38:2e:87:15:20:97:51:6e:67:3a:85:da:7c:
5a:7f:ac:e5:7d:86:dc:24:29:5b:87:a8:d4:a0:2a:
e4:9b:29:ae:d3:38:14:66:9c:ee:d8:cd:ec:32:1f:
c6:3f:c2:ef:d7:82:ad:e8:bd:fa:61:1f:af:b4:56:
b6:a8:0e:cd:e6:d7:81:ed:d9:49:22:18:b6:7c:d0:
19:dd:8e:c9:3b:b3:e6:6d:7b:22:0c:50:0c:ae:f7:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AB:79:91:35:6C:77:B5:CA:52:76:82:A8:B3:F0:D3:B3:F1:D3:63
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8f:70:a0:93:96:59:e5:11:16:27:57:d2:e9:e0:e7:ae:e3:
e6:42:c3:0f:30:a3:47:5b:60:c5:d5:50:b5:ff:06:c4:ff:13:
38:64:11:be:cc:27:26:aa:c1:ad:ff:6d:46:ed:57:c5:59:62:
63:b7:ac:0c:1e:8d:90:22:d4:dc:f1:8c:bc:22:39:6c:97:b2:
69:c4:ec:ee:6b:4b:b4:3f:1d:42:e4:dd:b5:e6:1d:f9:f6:1b:
1b:90:f5:83:8c:c4:a2:d1:7f:0d:51:a1:8e:55:16:05:35:f6:
8a:c9:84:10:7a:4c:aa:50:86:bc:1c:61:a5:55:4f:5f:8f:f5:
83:db:41:a7:fa:07:71:51:33:4a:d8:bd:5a:c5:5d:63:ef:45:
35:6a:dc:a4:74:76:4b:98:a3:db:4e:97:9b:3e:7c:1b:c5:50:
3f:a9:ae:b9:34:02:51:a2:ea:20:c7:dc:b0:f5:6d:2b:1e:96:
e8:57:ca:b4:ad:d3:8a:3d:79:4c:dd:2c:ac:97:76:a4:79:3e:
cc:36:25:6a:67:aa:6f:35:b3:e3:35:c0:30:4e:e0:87:a5:fe:
89:25:c3:d8:71:05:ea:5e:4f:1c:7f:e1:90:db:94:40:3c:21:
b4:2d:a2:ad:07:0e:ca:4c:46:a2:22:4d:75:5b:19:d7:cb:32:
0b:a6:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:46 2025 by rpki-client