Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: m2Y4fPxJchskdQzmenpGe1g7mbp0SBKwqpGsPwAotOc=
Subject key identifier: 75:DA:F1:FD:B6:32:50:AD:21:26:5F:7C:38:5F:5D:BB:9F:49:12:FF
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 0199FC590100CD1EE3D0D5A6290C9CE3F80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: vKmVyZKo1mVbWaxUYsU2k0zxDdU.roa (hash: gYV9eOLfrWkPtH6rFSHehM6qyeO4Oplr2KmQKju1kVs=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: PAJcQtzk1gEdZCpyL21nDxwJbZJsMnZRW7IqiHFplFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:01:00:cd:1e:e3:d0:d5:a6:29:0c:9c:e3:f8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=75daf1fdb63250ad21265f7c385f5dbb9f4912ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:02:53:00:0d:91:3c:28:b2:d0:72:0e:c2:0d:
27:5c:5e:1a:ea:54:93:5a:38:bd:5f:f7:7c:ac:c0:
b5:5c:b7:c7:01:03:80:9c:3c:1f:75:e2:87:e8:c1:
47:9a:1e:07:5c:76:25:9f:28:65:75:73:53:e3:87:
66:a8:85:4c:83:ae:95:6e:27:7d:3c:e8:7b:8d:9d:
db:2d:df:6b:1e:68:bc:20:01:86:09:b3:7c:83:8e:
dd:81:9b:6b:6f:f3:d8:df:7d:d4:a7:63:d7:37:10:
ac:75:b0:4b:a9:14:26:f5:6a:d9:d6:77:9a:38:64:
a7:8b:d9:7d:8c:39:02:5b:21:0a:8d:e7:9e:20:0e:
70:ea:17:65:06:36:9d:3d:9b:3c:83:59:6d:b9:34:
9b:44:32:e5:1f:c7:0a:b7:27:49:75:3a:3f:47:29:
0e:d6:8f:a8:e8:dc:56:9b:d4:f6:9f:26:c6:9b:2e:
0b:69:ad:b5:40:8d:85:8d:02:b0:97:75:f2:4e:2d:
9d:36:a6:6d:37:3a:5c:6d:c5:04:c5:c0:67:23:f7:
33:e0:90:25:11:a5:a6:38:8d:64:1f:6b:5b:72:b3:
56:f4:26:21:38:72:d7:a2:7a:2d:35:ca:ac:73:6c:
b8:fa:3f:fe:c1:72:6f:c3:3a:bb:bb:0a:cb:1a:a4:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:F1:FD:B6:32:50:AD:21:26:5F:7C:38:5F:5D:BB:9F:49:12:FF
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:8d:10:3e:8d:b5:35:45:67:0e:37:44:0c:af:ce:bb:90:09:
83:b4:a4:30:d1:e4:7f:41:e5:9c:bd:6f:4f:79:38:f4:1b:8d:
8c:1c:a6:90:1a:04:7c:44:57:e9:96:e3:2a:c7:eb:8c:82:a5:
60:b0:f7:5e:e5:df:0a:1f:1a:f7:c6:d9:e9:e9:44:f6:b0:33:
ca:cb:d0:97:3a:c6:b6:27:29:03:e7:ab:4c:86:dc:20:3e:a3:
11:cd:47:c5:ea:4f:51:25:99:5d:09:a8:51:88:38:bf:15:bc:
8e:12:0e:a2:78:65:37:f1:69:9d:c0:10:d6:34:14:30:b9:c8:
21:87:99:eb:87:60:e4:62:d5:d6:2d:04:df:f9:91:92:9a:cf:
bb:8f:c0:c5:23:45:ed:0d:8a:7a:5d:b3:48:87:5b:30:10:d3:
5c:b7:8e:22:93:bf:97:19:40:a5:9c:f7:c7:17:2d:c0:9b:b8:
aa:00:b5:77:f3:5b:fe:ad:44:9d:c9:b6:2c:22:a7:69:0d:0c:
1a:7c:a1:a6:5d:c8:f7:a4:f0:2c:11:53:75:22:9a:00:27:b8:
7e:28:2c:f5:3f:61:16:2b:a3:a4:3c:bc:d2:99:88:81:4f:e0:
e6:d0:de:ca:14:1c:d6:b2:cd:77:f5:f8:c3:65:2a:c1:e1:3e:
ed:70:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:43 2025 by rpki-client