Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: OQp/E3WPRZrjm/CJbK3hH8BImcWyjqjnyrHATm7qDTY=
Subject key identifier: 99:22:1F:79:6A:64:B2:DB:ED:1B:DB:25:6D:9E:38:9A:73:85:F2:2A
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 0199FB7C744F303E6EA9C7A50876B0EDCB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 1430
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=)
2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: NYaTeEfuXeK/ZN4rsdymj5NzpluwxCSyzq0Kkd/7v0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:74:4f:30:3e:6e:a9:c7:a5:08:76:b0:ed:cb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=99221f796a64b2dbed1bdb256d9e389a7385f22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:35:8a:c8:71:45:14:0c:a4:dc:dd:8c:02:
07:b2:c7:61:c0:7f:3f:59:5a:5d:92:91:2c:0f:1e:
b1:dd:64:6e:10:aa:c4:04:5f:c0:0c:6f:1d:fc:11:
a0:90:09:ed:a8:c8:e9:d5:c7:bc:b8:b4:a6:0b:38:
46:4b:58:ea:93:1c:69:5d:0e:95:81:02:c6:68:bc:
8b:48:a3:29:67:73:c2:f9:c7:71:f2:9a:71:db:95:
52:63:e1:99:62:a7:9a:37:a8:b1:61:a3:49:57:7a:
83:51:f6:d3:89:32:2d:77:21:d2:75:28:cf:90:cf:
f5:c5:0f:3f:a6:ca:c4:ec:74:52:4a:b4:e7:78:7b:
39:f1:49:fb:4e:9b:38:99:60:39:89:c9:e8:c2:b4:
a2:45:8f:46:f8:6f:e6:1e:cf:b6:da:16:0d:63:36:
1e:10:ff:76:f0:96:5b:bc:1a:c9:38:39:da:a3:29:
b8:3a:2b:e1:f2:1b:aa:3c:be:b4:86:ca:b3:bc:c8:
42:6c:c2:bb:33:da:2a:7f:89:6f:0c:3a:58:65:42:
c5:30:94:8c:dd:da:ba:5c:d4:e4:d8:05:e1:48:b5:
62:a7:67:74:59:33:51:49:39:c0:16:8e:70:e6:cc:
93:c6:b8:6b:04:8b:c2:c5:a8:a1:e6:ac:14:d9:01:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:1F:79:6A:64:B2:DB:ED:1B:DB:25:6D:9E:38:9A:73:85:F2:2A
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9a:c5:09:80:45:79:8d:de:3a:68:e9:eb:4b:76:27:54:27:
8e:a0:2e:66:01:11:62:82:9c:c9:fa:6e:69:fb:03:e1:9c:81:
dc:1a:41:d6:5c:5b:11:4a:92:31:36:97:03:4f:2c:ef:b3:eb:
9b:35:66:15:c0:f5:b4:0d:f3:8c:ab:e8:de:d3:94:62:5c:bd:
c5:ff:68:12:06:7a:99:ed:b3:be:0b:31:9c:72:f4:8f:b0:c7:
78:c0:80:26:e3:87:96:39:ec:92:85:c7:30:03:1c:cf:f2:f3:
3a:23:93:b3:23:a1:3d:f3:4b:84:c9:3b:48:9c:9e:0e:9f:d9:
82:52:5f:a5:bc:26:4d:2c:17:28:4e:67:f1:2d:62:ad:75:ab:
b2:9b:a8:87:c8:56:54:8c:2b:50:12:a9:11:e0:0f:25:d9:ba:
77:d8:92:40:19:3b:fa:ad:78:48:f7:91:7e:d9:ca:f1:fa:2f:
ce:7c:fc:a7:66:0f:70:9a:c8:39:5f:2d:27:e4:1e:fa:3d:34:
b7:ce:d8:1a:ea:92:da:33:21:47:69:e2:0a:bc:4b:1b:89:09:
4b:45:eb:18:e9:46:d1:fe:d4:94:5d:c3:88:c6:ae:b3:87:2f:
b5:f8:63:c9:3e:51:aa:0d:38:09:af:ec:30:47:2c:29:cb:c7:
83:82:6a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:58 2025 by rpki-client