Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier: RZlX2L6MzX2uFJFICYeRqoEGN//XNRhy1pAqt6LHHdQ=
Subject key identifier: 7D:E5:E6:E5:3D:D2:80:BB:2E:28:8C:40:C4:3E:CD:05:92:47:D6:50
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial: 019A01B62A7543D6ED13B2E2AE4812B511D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 13:01:46 +0000
Manifest this update: Mon 20 Oct 2025 13:01:46 +0000
Manifest next update: Tue 21 Oct 2025 13:01:46 +0000
Files and hashes: 1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=)
2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: 3PL8rVS8zPFKBMXdL89X5t7ZYFPaXT/ceS8HXnmi8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:2a:75:43:d6:ed:13:b2:e2:ae:48:12:b5:11:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Validity
Not Before: Oct 20 13:01:46 2025 GMT
Not After : Oct 21 13:01:46 2025 GMT
Subject: CN=7de5e6e53dd280bb2e288c40c43ecd059247d650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:fa:e9:dc:ee:5c:b1:43:85:d1:d1:02:a9:
57:1d:41:6e:b9:e5:32:ad:6f:3d:2b:3c:a3:62:52:
81:c7:31:ec:b1:60:88:eb:98:21:59:0e:f4:02:b6:
c6:bc:1b:af:44:ff:25:ad:b1:0e:be:9a:e1:a8:12:
db:3d:e3:a0:fe:61:a2:37:d7:ec:66:a2:14:f3:1f:
52:c0:4f:6e:e4:cd:97:23:fb:3f:74:27:2a:24:c7:
86:77:0a:bd:15:79:f3:ff:71:70:d4:19:0f:4c:b4:
b7:bf:13:96:96:71:76:26:05:cd:1e:40:ee:09:b9:
a1:36:ab:2b:a4:c2:59:61:2f:05:5e:6e:5a:6e:14:
93:a7:a2:bd:1d:a4:3f:1c:ce:02:52:6a:f1:9a:02:
26:1d:25:14:d0:45:da:d8:0e:fa:6e:b8:ff:62:12:
65:4a:fb:01:79:2a:cd:f6:b4:78:7b:52:66:7f:74:
20:62:70:7d:d9:07:31:05:43:a2:27:bd:c4:de:9f:
51:8b:8e:7f:2d:29:d5:69:93:1f:76:9c:53:49:f0:
fd:28:80:2e:0b:58:f3:2a:22:b3:52:46:59:9d:58:
e5:30:82:57:34:57:8d:0b:aa:ee:92:c2:22:cf:24:
1b:35:9b:39:1b:44:85:25:4e:78:d8:1d:3f:9e:68:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E5:E6:E5:3D:D2:80:BB:2E:28:8C:40:C4:3E:CD:05:92:47:D6:50
X509v3 Authority Key Identifier:
keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:db:07:82:c2:c8:2d:a4:18:64:0d:0a:f3:83:40:d6:86:f0:
36:9e:a5:b1:ea:30:a7:58:bc:74:f8:77:d6:c2:3d:30:31:56:
46:69:77:c7:f3:e5:74:90:45:47:d9:64:6f:bf:72:9d:53:90:
6f:74:4c:35:0b:bf:ff:c3:bc:ef:22:b0:57:9b:16:34:40:e5:
48:cf:28:7c:74:01:5b:57:83:4d:8b:7b:53:e6:30:c8:9c:cf:
ec:46:a9:cb:f9:c8:bb:62:4f:19:35:ee:cc:d5:e8:9a:95:d6:
01:29:10:a3:f6:7f:c2:61:93:d9:54:f5:ed:6a:67:8f:00:25:
ac:d6:37:fa:dd:f8:32:75:bf:ff:2b:95:d7:a8:0e:94:88:09:
e5:b3:48:fc:0a:b6:95:91:58:02:47:f4:8f:45:10:40:a2:64:
01:3f:b5:ab:2e:d0:b8:1a:4c:6d:5f:10:da:40:32:4d:e2:0e:
16:ca:fd:ca:31:9a:af:1a:fa:4d:d3:3a:ec:54:ff:a0:67:c8:
8f:44:5d:e9:e9:c1:99:ca:ca:e9:ea:2d:13:d0:59:96:3f:89:
88:7d:26:3f:02:34:e5:05:52:d6:86:50:da:11:a9:ad:13:7d:
cc:c7:01:2b:4a:ad:aa:e4:4d:0c:3e:87:71:17:44:a3:21:63:
ad:f6:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:03 2025 by rpki-client