Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier: pRLaZHQtadkCkUkb3u8zKOnatNZmL29i5J8Tqrq7NaE=
Subject key identifier: 76:E9:12:16:26:3A:F9:0C:5B:3F:A8:DC:12:E7:9B:0B:80:8D:CC:9E
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 0199FAA0DD5242348C9B901D46527C1E200B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 04:01:10 +0000
Manifest this update: Sun 19 Oct 2025 04:01:10 +0000
Manifest next update: Mon 20 Oct 2025 04:01:10 +0000
Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: 2MT9/ZEUwRkTeizVMNbF7Ccja+aGxcpljfHThLLdcpQ=)
2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=)
3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=)
4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:dd:52:42:34:8c:9b:90:1d:46:52:7c:1e:20:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Oct 19 04:01:10 2025 GMT
Not After : Oct 20 04:01:10 2025 GMT
Subject: CN=76e91216263af90c5b3fa8dc12e79b0b808dcc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:ce:eb:ae:0c:7c:9e:ef:53:7a:2e:d1:2b:
76:6f:ad:93:1e:2b:1e:1c:a8:68:b8:1d:06:8b:9a:
ad:62:15:23:e9:c3:36:f1:cd:ee:cd:5f:43:6d:c6:
af:27:bc:88:12:57:bb:4b:d7:db:e5:79:5e:57:bd:
b4:2b:e8:be:f5:a7:5a:eb:7a:42:29:cc:59:a9:18:
44:cc:30:08:73:bf:44:1c:7d:ae:e6:7f:62:6f:cf:
7d:9e:59:9f:d8:32:ff:b1:7a:1c:9e:b1:74:23:f8:
49:aa:82:a2:8c:f0:37:ec:cd:87:48:87:50:c8:89:
e4:6d:ed:64:8a:98:24:12:d9:4e:4b:a5:e1:c6:ab:
85:61:23:97:63:ef:ac:bc:b8:34:b2:51:de:83:cd:
82:2e:0e:08:b2:12:b2:e2:d4:84:90:30:16:5a:55:
5d:6f:b7:3a:1f:93:e2:e6:a5:ca:1c:6d:1b:f6:32:
26:9e:c5:d8:f7:6b:ff:7d:d6:4f:b1:e3:40:c2:04:
bd:62:53:1a:84:17:bd:19:96:8e:78:e8:08:27:90:
1e:e8:74:00:b1:97:73:c0:d6:b8:91:c1:4f:32:ca:
a2:bf:d0:f6:9c:86:1a:b8:ca:16:b3:99:36:d9:97:
c1:61:d9:7e:03:34:76:bc:41:52:c0:f5:47:e1:9c:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E9:12:16:26:3A:F9:0C:5B:3F:A8:DC:12:E7:9B:0B:80:8D:CC:9E
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:78:c8:5c:de:e5:c4:7f:83:31:de:f4:d2:d2:36:05:b3:9e:
bb:bc:ab:8c:9f:fb:f2:40:44:f5:b0:7e:18:fc:c6:90:08:b9:
75:42:fd:0a:97:8d:5d:74:11:ed:ae:bc:66:f7:8b:10:9a:2a:
10:a5:03:aa:2e:80:ea:d8:db:6f:68:e9:dc:7a:77:b4:8d:75:
72:fe:eb:f8:01:ca:83:82:3b:74:33:9f:2d:c2:ee:66:ca:28:
cb:2d:e3:62:35:a8:90:9b:e7:20:eb:6b:a4:30:ef:30:f2:88:
6b:d6:1e:1a:80:48:57:f1:3f:93:80:eb:ab:35:49:6d:ad:d1:
49:5b:50:c1:bc:33:84:a7:43:39:ac:9d:9f:85:04:8e:8f:26:
29:4b:9c:01:5e:69:ca:85:e5:ec:38:7c:8e:a1:91:82:61:b8:
16:96:a1:fc:67:28:6a:40:a8:93:aa:ca:4e:e1:5e:a3:9d:2b:
36:88:35:91:2b:8c:99:25:ed:5d:d7:f5:4c:1e:8e:00:c1:77:
88:13:14:60:7e:a5:ed:54:56:1e:a1:7d:4b:37:49:4a:f7:c4:
e0:04:92:fc:ae:0d:5f:3e:f1:f7:f6:3b:0f:c1:ed:43:25:a0:
6f:8c:7e:bc:1b:16:8e:57:10:81:04:d8:5c:cc:0b:fe:70:a8:
61:31:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:31 2025 by rpki-client