Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: qK2MTQ2L+5SGmBkoU8gIu7hDHgs6IyiGOyYHq4QMccc=
Subject key identifier: 76:85:8C:9A:88:43:22:A9:83:E6:A0:56:60:CB:46:6D:44:7F:EB:CC
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 0199FC21B9929A822244CDDF0115CE58E89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 1657
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: kclBuRKTMfByXqrmrwIbc_lZEnM.roa (hash: MQr5fqlXn7Xd/Z8IgiENjDF+OVj4PMx+/5QB1sHm+8E=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: VvnZBTQBmyN+zSYUobl5RfyAYszahBwgOF94mXK8eXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b9:92:9a:82:22:44:cd:df:01:15:ce:58:e8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=76858c9a884322a983e6a05660cb466d447febcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:09:0a:20:d9:d4:2b:fd:72:cb:4d:14:5d:
49:51:92:88:ef:b3:44:84:4f:4c:bb:ec:35:71:77:
5b:27:b7:ba:ee:a0:8c:54:6e:03:8b:f6:07:a4:40:
0b:ec:40:a3:55:fc:f6:c2:99:46:f3:0e:15:0e:00:
98:23:c2:bc:33:5f:13:58:49:d2:4d:f8:c8:c7:4f:
33:3a:74:75:8e:2b:94:3b:6c:8e:f1:3d:99:ef:2d:
34:9a:6b:09:fb:ad:e3:85:49:36:dc:56:57:d4:70:
18:ed:2a:5d:e4:d6:0b:78:76:67:14:cc:27:f2:77:
d8:ee:bf:d2:b4:12:67:06:dd:5c:4f:82:65:5e:0d:
4b:a8:15:57:67:09:bc:06:9c:6f:ae:4e:ac:01:83:
8c:e6:8b:c5:25:9e:70:8b:f3:f4:45:71:b5:84:76:
d4:ac:57:99:83:0b:6e:56:90:ee:cb:b0:a7:ec:4e:
b1:a4:7f:90:c2:e9:db:e3:55:fd:2e:e1:b1:71:64:
d4:39:e6:f9:3c:41:5c:e7:1f:ef:43:aa:51:7b:ff:
87:ec:1f:4a:61:a0:f2:b5:5f:63:4f:5b:cc:09:7b:
c0:99:3f:f1:ce:a7:10:df:86:a3:31:8e:64:47:68:
1f:5b:3a:97:a3:69:24:03:53:2c:8c:03:d8:ba:06:
52:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:85:8C:9A:88:43:22:A9:83:E6:A0:56:60:CB:46:6D:44:7F:EB:CC
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:33:51:7a:9a:9b:26:15:7b:8b:78:f8:ea:97:53:ff:bf:dc:
6f:b9:56:8a:67:41:65:b8:ab:51:0c:a2:17:30:1c:bc:93:c5:
e1:e9:73:91:52:c9:d7:94:f4:b1:dc:8f:cd:47:4f:3c:0b:02:
fe:26:c5:9b:a2:8b:d8:b3:e4:16:af:78:16:e9:30:9e:47:70:
0d:3f:aa:89:86:eb:3c:f8:9f:2b:14:67:ed:6b:a5:e6:88:a7:
2a:80:e0:7e:ee:9e:45:c1:0f:24:f0:86:aa:16:65:a4:79:8c:
ee:81:f2:ef:96:46:e8:97:16:3b:7b:0c:8d:88:97:c0:ce:79:
05:59:80:48:95:34:ab:a5:71:9b:4e:4c:db:44:98:52:8b:34:
a4:f9:dc:e7:b4:b1:32:ca:3b:ed:91:fb:1b:fd:ce:05:78:8a:
af:05:9e:4e:25:36:1f:6d:45:34:5e:57:d3:4c:fb:ae:25:6d:
f9:ba:3f:4f:2f:db:33:6c:49:fc:99:f8:ff:47:ce:fc:b7:13:
b8:30:60:bf:52:fd:f8:4e:13:08:2e:ba:ee:a8:1d:52:ed:29:
03:29:2d:45:d3:69:cf:bc:02:e9:85:c1:e9:ee:3f:c3:be:9b:
55:ba:1a:57:05:d4:06:d1:99:aa:19:ec:8d:90:78:6b:54:13:
00:b2:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:34 2025 by rpki-client