Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: unQ9WppYVZlxCLPe9GQfG+nDTIp0pUwQXWaIpzoaUUE=
Subject key identifier: D6:D0:78:6A:60:9E:AF:93:6C:F7:01:19:88:A3:8A:60:29:08:4A:96
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 0199FC21AA6C9F8F72B150BED4329CCE1D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0D66
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: Y/k19RRMytZDOR0PPpvFAPMFetfZMckMDrHEggAGZj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:aa:6c:9f:8f:72:b1:50:be:d4:32:9c:ce:1d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=d6d0786a609eaf936cf7011988a38a6029084a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:bd:b5:62:ee:b9:e5:84:e7:93:d7:90:8b:
e1:52:41:7c:1b:b9:d8:b9:e3:66:7c:6a:f5:f2:db:
39:aa:86:ec:b7:e3:e1:22:ce:a3:cc:00:14:1c:bb:
81:3b:d7:0b:f3:e5:99:97:21:d8:7f:5b:0e:18:46:
38:45:40:fc:3d:f4:84:18:02:96:2b:23:92:fb:1b:
26:97:74:fe:e6:93:4b:86:cc:88:cc:6c:60:42:e4:
96:04:5a:70:a4:45:fd:e7:d6:b5:c4:f1:eb:8a:d7:
2f:12:6c:df:65:df:f9:73:ab:69:5a:17:24:7d:76:
bd:75:07:d8:89:ac:f3:e0:be:91:13:bd:66:aa:64:
42:73:86:0a:72:b8:78:98:32:5f:89:ba:f1:7d:8e:
6b:66:ee:54:eb:9e:81:b8:8c:8b:21:59:a6:44:ff:
98:7c:d2:a7:a8:28:30:98:bb:cf:66:bd:65:6a:9a:
cf:97:a1:75:12:b6:e0:07:28:49:8f:f4:38:69:1a:
a7:2e:76:1e:7b:00:f1:b3:16:f5:ab:d3:1f:55:36:
2f:e6:3f:df:6e:8e:92:2b:7b:15:88:8d:53:2e:19:
bd:30:b0:5f:aa:ac:70:96:da:96:12:ca:e1:20:90:
be:59:4e:4e:43:63:b4:87:99:08:79:d3:ff:12:a3:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D0:78:6A:60:9E:AF:93:6C:F7:01:19:88:A3:8A:60:29:08:4A:96
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e4:a6:77:21:33:6b:e7:3f:22:d3:fd:9a:3d:67:3b:be:f9:
6b:7e:0a:55:82:7f:9a:8e:0d:a6:fd:43:1d:8b:29:6d:91:49:
17:85:16:13:6e:d2:e9:10:bf:33:23:10:9f:69:2a:0e:9a:7f:
b6:7c:c8:bc:1a:ef:9c:d5:ed:4e:25:21:67:c8:ab:0a:8c:f6:
d2:c4:55:27:e8:38:36:df:c5:d7:1f:b5:1c:fc:87:cf:2b:58:
a3:cb:81:1d:15:c8:ef:7e:1a:99:e8:64:d8:08:04:4a:59:12:
34:63:15:eb:e2:d5:15:99:2e:6c:7f:cc:ec:41:34:9e:8b:db:
a2:02:4c:7c:91:b8:b6:b7:07:ce:70:38:19:95:89:99:6b:0f:
9b:56:e7:ec:8e:46:32:ec:1b:d6:f6:d2:df:50:ec:f5:7e:be:
33:ed:a8:8e:cd:68:b6:18:c2:e0:ce:2e:14:14:83:e3:52:d8:
f9:f8:2c:17:07:0b:d2:68:21:a2:f3:ca:09:79:0d:38:21:d0:
23:56:0e:8f:8f:65:bf:b1:6b:77:95:63:b8:3e:b3:d7:f9:91:
d1:d5:09:f6:b5:72:5e:ca:ff:9f:70:8d:36:e4:93:6a:b2:6e:
10:e2:71:30:57:a2:48:d7:21:8b:ed:cd:4c:9a:d2:de:16:ae:
df:a5:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:10 2025 by rpki-client