Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: Ce9XAg7o47ik+HH36CjonunuOo1+ijTVr4SygQQNYos=
Subject key identifier: 92:2C:E6:D1:B2:24:06:17:B1:C4:3F:A2:1A:CB:85:73:3D:21:AF:DF
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 0199FB7CB159E78CE26DE2707E295904E734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: yoLOsDl5b7AyyNRXGErU2Y+g45QR8lpnjxNuIcFOUc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b1:59:e7:8c:e2:6d:e2:70:7e:29:59:04:e7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=922ce6d1b2240617b1c43fa21acb85733d21afdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:32:b9:7a:48:4e:b5:4d:ed:45:0e:37:d9:
d7:8f:51:d6:46:fa:62:be:c1:97:fe:3b:f1:b5:ef:
33:b0:1a:d4:4c:d4:16:40:46:39:92:0b:e8:70:f1:
e6:77:d7:fd:00:53:36:fd:d4:a9:49:1a:7f:35:64:
72:6e:00:15:06:98:95:7a:ac:4d:73:fa:56:46:a6:
32:77:97:02:e1:16:3f:43:d9:d5:2b:2a:54:29:cc:
bb:e6:d2:5b:46:88:25:d1:4b:c7:50:fe:57:6b:12:
77:cc:a3:0e:ea:12:43:f2:ab:d7:79:fc:72:24:91:
3e:c1:8f:24:b2:12:05:67:ac:c0:f9:9d:ed:71:f0:
4c:f5:a0:4f:83:25:90:f7:ee:ac:de:56:8a:60:08:
b1:f8:3c:67:f0:0a:8e:92:63:2d:fe:1d:47:2a:29:
f8:de:33:1b:6f:2d:1c:54:09:63:ed:ca:f0:e7:4a:
ba:8a:06:f1:2b:83:41:61:83:d6:7d:f4:aa:b7:4b:
ff:71:a4:8d:65:fe:9d:2b:48:fb:d4:dc:f1:e3:ea:
18:35:27:1f:45:44:8b:ef:c4:49:32:55:4e:c8:9b:
34:6d:cd:b3:12:12:ac:37:4b:b9:e7:e9:bc:44:b6:
86:bc:7f:09:af:54:8b:b5:8a:36:3c:21:17:07:a0:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2C:E6:D1:B2:24:06:17:B1:C4:3F:A2:1A:CB:85:73:3D:21:AF:DF
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:df:71:86:0c:8a:b7:bb:64:8b:a4:e0:a4:fd:df:31:3c:1f:
51:01:16:b8:bd:14:f5:c4:b0:b8:f9:43:fa:78:f3:d7:e5:66:
f5:bc:4e:f2:a3:a9:60:cb:e4:16:fc:93:af:60:54:a6:2d:0b:
8e:00:0a:d8:14:03:1f:be:ca:e7:34:2e:22:45:a2:24:c0:b2:
f9:a2:65:26:db:f5:fa:7c:96:d3:18:d0:17:50:59:01:69:11:
3e:86:ec:f1:24:7f:1c:6f:ed:b8:4f:1b:d7:f3:00:a5:52:1b:
1f:37:5f:ac:7c:50:91:42:f5:8a:76:98:a5:84:09:bb:9a:98:
ef:8f:16:7a:53:93:c6:83:ba:65:04:a4:ad:e7:3b:4a:13:45:
50:93:bd:4c:53:da:94:f2:4f:c5:aa:7a:95:25:7f:77:4d:88:
ca:45:97:29:93:94:82:7b:e7:4c:cb:88:8b:11:54:53:2e:a3:
6c:4f:82:a0:10:4c:16:40:bd:2c:29:94:bd:b4:f7:0a:94:52:
ac:a8:c7:b1:2a:41:da:c2:a3:2f:37:e8:00:2c:4b:da:61:34:
9b:4d:72:3c:31:53:73:da:8c:13:b4:0b:48:c4:9b:06:3d:30:
d5:80:a7:5d:dc:74:f7:4e:55:7f:23:d7:65:7b:a5:0c:c2:aa:
44:9f:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:48 2025 by rpki-client