Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: NDXFUOcXrwxY419b9Gq1xD0gyawG52PzUfT8CMVXvZk=
Subject key identifier: 46:38:62:B6:21:F7:FB:6F:DF:1C:19:CB:AE:6D:93:75:A6:81:11:9C
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 0199FCFD7A43A441E6FA6ED3968B1B952EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 081A
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: JDjJbvl4ebpvlhRby1TBilhaGyhIgFDubbUhUELzFe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7a:43:a4:41:e6:fa:6e:d3:96:8b:1b:95:2e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=463862b621f7fb6fdf1c19cbae6d9375a681119c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:15:12:9d:eb:d7:51:c5:8d:cf:e6:d0:5f:
df:95:39:fd:5a:3b:2e:64:47:21:c2:fc:ea:98:e7:
da:95:2e:93:7d:b9:35:5e:77:12:f7:bf:48:ad:b1:
a8:a0:5c:36:be:54:43:7a:d4:fd:cf:a6:48:5f:80:
6b:2a:5a:fe:b8:e6:18:a0:f4:ee:f8:c7:f3:53:08:
25:10:16:37:6a:18:bb:1e:22:8a:cd:92:e1:61:41:
f2:3f:bd:19:c4:07:f8:5e:aa:04:1c:8e:37:ff:3d:
29:b7:5f:48:ec:c7:43:00:fd:6d:6f:bf:69:c6:1d:
0d:b8:47:7c:7e:d5:36:c3:6d:51:81:b0:c0:8e:60:
88:af:60:e0:3d:a2:29:c2:c0:90:66:c9:42:a6:81:
b6:19:53:ea:68:a3:4d:b9:4a:c2:5e:94:09:bf:88:
c0:3a:95:b6:50:49:a9:ee:af:06:8e:37:cd:dc:e6:
19:f3:ca:cc:4d:ed:90:38:78:82:e1:a7:6d:be:97:
89:42:c3:6c:61:eb:bb:fc:e2:47:ff:aa:c5:35:59:
79:3a:c4:30:cf:11:03:7e:7f:8d:fa:a6:66:91:43:
2b:ae:c9:f5:dc:3b:0b:0d:c7:02:06:19:be:07:16:
45:9d:81:78:29:f7:a8:bc:6a:f2:8a:59:6f:33:88:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:38:62:B6:21:F7:FB:6F:DF:1C:19:CB:AE:6D:93:75:A6:81:11:9C
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0d:b1:55:15:a4:00:8d:2d:8f:1a:ff:cb:b2:3c:1f:e0:d0:
1d:aa:72:12:67:6b:e8:7d:a9:7c:32:0a:cf:e2:d2:9a:15:63:
5a:65:bc:f9:dd:fc:a6:c9:37:b4:4e:96:15:4f:ac:2b:7e:04:
44:22:ad:df:eb:61:21:53:c5:fd:d1:6d:95:a1:19:82:fd:ab:
5a:c0:05:f1:48:b1:10:65:10:d5:b6:67:b1:ac:00:bb:67:b5:
97:3d:b7:ea:8c:ac:e7:f4:ea:6d:39:fe:12:97:a4:5e:05:20:
40:ac:34:16:a3:a5:13:9f:e7:c9:0e:76:60:df:37:ad:31:67:
ac:41:22:fa:dc:92:e8:80:2a:93:00:d9:eb:15:07:32:b9:a3:
51:81:97:1a:3c:c7:63:2d:30:4a:2d:7c:8a:26:05:02:a1:73:
0f:bf:01:d4:99:74:52:bb:86:14:40:43:7c:68:ff:ad:32:b0:
2c:62:d3:1c:17:0a:cc:f4:d0:d0:1a:6c:5d:dc:da:ab:2d:f7:
12:7e:9d:00:8b:74:25:62:95:78:b3:41:09:0c:97:f6:cd:90:
42:f2:ce:9b:8a:f9:4e:bb:1f:a3:2b:f4:32:54:71:a7:4d:31:
9d:02:2a:92:12:08:22:ca:86:fe:ba:e4:40:0c:bc:c2:64:0f:
b2:b5:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:28 2025 by rpki-client