Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
File: ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft (raw, json)
Hash identifier: nISYS33N2ahWbsdFLRcM8f0/Wl8ou0Sp5zUurLtqcv8=
Subject key identifier: CA:20:A4:C5:0F:96:43:12:79:0D:EA:2D:9E:3C:AA:03:33:C4:71:12
Authority key identifier: C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
Certificate issuer: /CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Certificate serial: 0199FBB36CED33B3AA5BAC319441285D0562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
Manifest number: 86
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: pPj0AN_LbIG5edwMDA59ThE3RKk.roa (hash: tv9SuA0cMfqr0L1nuGX2Myng2miGRH68D2F/qwMX0QU=)
2: ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl (hash: vNxNX+Fqv2gbUr5sbSgIr6P5S6lNQiuXwDP94KvMAkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6c:ed:33:b3:aa:5b:ac:31:94:41:28:5d:05:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=ca20a4c50f964312790dea2d9e3caa0333c47112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:f4:0e:6d:d1:78:d5:06:63:c6:8f:7d:89:
a4:f3:e1:44:a4:2b:77:57:5f:30:8a:8e:ee:5a:6f:
fc:9b:a1:47:c3:e4:92:95:c2:fd:fc:cd:75:70:6c:
13:57:ce:98:30:fd:43:ca:ca:88:1a:e5:9a:d3:68:
60:65:4d:c6:13:b6:77:0e:53:ea:62:68:48:df:66:
fd:56:08:44:5d:de:dc:75:f3:ef:69:01:15:97:62:
bd:12:59:a0:b6:ec:59:20:f3:92:1f:f3:70:f9:27:
0d:4c:5a:6a:08:9f:4b:7a:cc:54:f2:81:48:65:6c:
5c:36:77:9e:26:5c:29:27:17:48:de:a7:65:f9:e0:
a7:56:12:11:35:f5:16:f2:0b:bb:df:64:48:d2:3b:
95:21:48:5e:67:fc:b9:7c:15:bf:d9:9f:9b:52:3b:
b5:14:4b:89:72:4e:24:fa:0f:36:b0:25:0d:32:90:
35:8b:06:59:ee:3d:bb:58:bf:97:41:ed:d8:47:d0:
60:fd:12:6b:22:a4:04:b0:46:34:6e:0c:e1:d9:87:
93:f7:34:ba:8e:56:f4:66:7c:7c:f8:3b:1e:3c:b0:
18:59:5f:f8:95:b7:51:ef:49:4f:d6:51:1e:cf:9f:
8d:1a:36:11:f1:76:d7:9b:3c:29:bc:28:7d:b4:96:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:20:A4:C5:0F:96:43:12:79:0D:EA:2D:9E:3C:AA:03:33:C4:71:12
X509v3 Authority Key Identifier:
keyid:C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:18:e6:8e:16:8d:39:cc:ae:a1:23:d2:00:46:6e:8e:b1:b9:
ec:ce:58:bb:cc:05:22:ae:91:c1:b7:76:f7:de:cd:e1:7b:b8:
fa:e7:70:53:21:fd:56:e1:0d:49:5a:99:98:d9:e6:17:80:db:
05:ce:2e:31:51:d9:70:8d:fb:1a:fe:6c:93:d5:25:8a:9c:18:
20:3f:af:33:62:16:a3:63:a6:b9:8f:6c:7b:7e:b0:8e:b2:03:
09:8c:2c:7a:87:07:06:41:ee:02:e7:d7:97:67:63:7d:30:b1:
ab:1b:0f:78:e9:95:f9:fd:6d:db:12:d2:b6:29:fa:4b:64:ed:
9f:4d:2c:e6:0f:dc:b5:a1:52:65:36:43:98:b7:2d:1a:25:8f:
42:69:83:8d:13:09:70:67:98:18:07:91:73:e6:fa:e8:3c:fb:
76:3f:fe:da:0f:db:f1:63:2f:6e:3c:98:31:e7:c8:fa:83:4d:
55:36:e7:ef:85:0f:8f:68:7b:32:35:e0:2f:0d:bd:bc:8d:ee:
52:c9:12:96:14:05:54:9b:cd:01:52:45:f9:d0:8a:a5:f4:ac:
eb:4c:d9:79:78:bf:b3:ef:26:c7:8c:b8:12:cd:b2:59:5a:30:
bd:bf:8d:7e:1f:7e:4f:25:5c:6e:f8:6c:19:f8:9a:33:39:3d:
6a:64:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:53 2025 by rpki-client