Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: T4uqOggbvfA0TYOYcoZwNI4IzRE9VrnXy/z5scvHKs8=
Subject key identifier: 8B:EF:A2:EC:EE:3A:49:9D:88:3C:03:CF:A0:FC:E6:CF:81:BA:3C:A0
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 0199FCFD3645B5E7E53DFAD986EFA4925D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 0CC5
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: 2ATvNbnGawNlZZ5eknfDSbXFIzQ.roa (hash: tXSd9lU5fCgD64Z/fTQv/A1ZJJrB3ZcLdqsIZET5sKI=)
2: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: csGBc2mldPbN9413EobHjBvszOuRS1tzqtTt9yPG0Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:36:45:b5:e7:e5:3d:fa:d9:86:ef:a4:92:5d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=8befa2ecee3a499d883c03cfa0fce6cf81ba3ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:e0:8f:4d:99:1f:a3:7e:e5:23:ed:d4:f9:
e8:d8:be:44:aa:01:39:80:61:21:7f:32:fd:bc:35:
c6:a3:06:24:21:9b:e5:52:ad:de:be:9c:ad:29:5f:
97:7b:e1:69:64:ef:3e:e2:48:2f:68:9a:14:ab:ac:
0f:77:30:d4:07:e4:04:83:8b:98:8c:c8:b3:4d:0e:
84:ec:4d:32:75:2e:f6:7b:8c:1d:38:77:c3:b6:c3:
dc:a3:1f:e7:0a:0e:4a:cc:b8:53:7e:9a:fb:74:36:
38:ac:20:e0:1d:1a:4e:96:03:26:0b:73:dc:3d:6f:
82:8d:1a:7d:d0:eb:18:28:af:21:0b:99:3b:78:37:
fd:aa:c8:12:b0:24:b3:ac:28:c3:50:74:95:00:4e:
f6:0c:2b:5d:18:34:5e:0e:d0:fd:1e:d5:12:99:ae:
3d:ec:e8:ee:9b:36:27:bf:ed:22:99:3e:bf:12:d9:
2c:04:4c:77:e7:77:2b:fd:bb:df:84:a4:2f:2c:12:
cc:a9:56:93:0c:6f:40:5c:ab:5d:a8:b6:9c:89:4b:
b8:0c:60:18:07:61:9a:56:e2:14:17:fd:14:d7:29:
0d:f0:08:43:48:da:30:4f:4d:a4:72:77:a3:36:5f:
53:52:06:53:32:45:30:48:00:ed:69:f7:3c:8f:35:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EF:A2:EC:EE:3A:49:9D:88:3C:03:CF:A0:FC:E6:CF:81:BA:3C:A0
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:50:ba:21:f6:f2:b9:64:8c:b0:6c:65:53:b9:17:a5:fc:ae:
0d:3a:41:be:78:3c:52:30:74:c0:46:ae:0e:4a:1d:c4:8f:ff:
52:1f:2a:13:97:a4:34:bb:e2:2d:31:47:6a:12:cb:95:f3:e6:
96:51:76:2c:11:df:25:58:d0:e1:2f:3f:f8:75:42:5a:fe:f5:
d1:c4:3e:0a:5c:36:85:53:65:1b:69:57:06:d7:70:b7:f0:1b:
50:9d:48:d9:00:e0:9e:d7:3d:ee:52:6a:59:17:dc:d8:07:e8:
9f:cd:71:ef:12:82:db:4a:fe:aa:7c:2d:1b:7a:9c:be:a9:3e:
00:a3:9b:c9:3d:d6:55:fa:3d:02:4a:7f:de:40:bb:f2:a4:f1:
11:71:5a:0f:ca:54:a8:94:2a:08:a1:83:a2:e3:d3:9f:71:a7:
4b:a4:db:00:f8:9e:91:7c:bd:c2:70:9a:79:50:a7:eb:82:00:
78:87:ee:29:b1:b6:b3:48:e8:47:d5:d1:26:48:55:db:ff:52:
ba:4a:bc:cd:0c:86:fe:0e:4d:08:ea:1c:88:11:24:19:d9:6e:
0f:c5:d7:a4:8b:7b:04:c0:77:56:3d:7f:ec:a2:c4:3d:30:b8:
e4:aa:b8:ed:80:ee:ca:87:be:ef:f5:d9:8c:68:66:67:07:59:
54:60:41:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:13 2025 by rpki-client