Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier: P5vdpsdXCtKJFGPpefHXK+jCttLbEhpp4nRwftLgXjc=
Subject key identifier: B8:E1:7A:D3:51:BB:B8:11:E4:4B:86:E4:AE:87:55:B5:A0:09:77:E0
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 0199FDD94D0B46DBA090FAAF7908D83E7132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:40 +0000
Manifest this update: Sun 19 Oct 2025 19:01:40 +0000
Manifest next update: Mon 20 Oct 2025 19:01:40 +0000
Files and hashes: 1: mcCnj0YcjKVWKNRUEHJJ9oCILI8.roa (hash: QCD+FHuTsYXCE9fg4S64GzeBQUQDK650c6oIs3Pqi/Y=)
2: qnmXcL8dUJj7rdFkLv5IIJUwDDY.roa (hash: SbXai8opNHzQzJTVhIMV1eYK9jsCmNmT7MYPyjYeprw=)
3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: 8oyY8dU6E6PkfkF4q8QHQRRJB1k1tcoS2/R/pjXQLuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4d:0b:46:db:a0:90:fa:af:79:08:d8:3e:71:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: Oct 19 19:01:40 2025 GMT
Not After : Oct 20 19:01:40 2025 GMT
Subject: CN=b8e17ad351bbb811e44b86e4ae8755b5a00977e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:ac:c4:c8:d2:60:b4:9c:80:0d:5d:29:05:
08:f9:c6:86:96:9a:2a:b5:f1:5c:77:93:7c:7e:eb:
44:d6:de:cf:26:40:17:a2:a9:e2:06:3a:d9:0d:db:
84:2c:c7:20:f3:f4:f8:db:98:b2:06:af:05:f9:85:
66:b4:65:7e:63:62:af:e1:62:a8:78:45:81:16:2e:
30:99:21:64:a5:a2:5b:28:2f:18:ca:d5:9a:7a:ff:
0b:25:5d:49:6a:fa:de:da:95:c1:0d:f2:cf:2f:27:
27:0d:c8:0e:ff:2f:bf:58:33:b5:59:86:bf:01:f0:
4a:64:15:18:de:87:96:5a:d7:5e:48:00:dc:22:0a:
8f:7a:ed:54:48:e0:18:2e:bd:4e:02:13:05:73:ff:
75:f8:0a:a6:55:51:9e:40:83:12:86:7d:b6:d4:24:
4a:76:73:1a:25:41:ad:9f:0d:2d:4c:ab:49:d9:b9:
29:41:8d:e9:ee:26:59:24:32:d3:60:00:17:68:78:
d7:5e:5b:81:55:18:0f:d2:22:f4:9c:cd:5f:6d:fe:
2e:ae:59:78:7d:5c:67:40:17:60:8b:02:da:67:9d:
71:c7:64:29:26:2a:30:16:cd:45:8c:3c:0c:8f:fa:
51:d9:61:c2:cd:ef:fd:33:8b:f7:08:c3:63:50:12:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E1:7A:D3:51:BB:B8:11:E4:4B:86:E4:AE:87:55:B5:A0:09:77:E0
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:73:c6:71:25:ec:90:6f:7f:8b:b3:ce:c0:67:6c:07:89:b3:
a7:92:b4:aa:85:60:74:9a:0b:fb:96:81:d6:65:c4:96:c7:05:
4a:b4:3a:04:3f:eb:a0:cb:17:2a:91:d3:d1:a8:20:9f:38:7d:
86:24:a6:94:77:7a:6b:cd:3b:16:bc:94:6a:6d:3c:8a:5a:3a:
1f:24:f1:8c:68:a1:b9:e2:8f:e1:e4:87:94:59:27:9a:e3:56:
ef:66:26:4a:49:1e:44:f7:fd:6a:98:0b:ba:85:13:46:49:fa:
88:a8:8a:eb:3f:b0:98:7f:0a:96:85:11:94:7f:df:b0:13:b3:
85:49:c1:f4:89:f8:c2:51:62:7c:5a:80:ad:03:44:ea:52:a5:
4e:f1:82:6f:37:4c:96:ba:2a:9b:08:21:a8:95:6d:f6:c7:c7:
93:58:98:bc:4c:d0:7d:57:37:57:87:3f:1a:6d:59:52:9e:0b:
de:01:a5:bc:dc:69:c9:bd:c7:90:48:50:15:9f:a0:b6:c0:ed:
cd:fb:10:2a:93:8c:3a:e0:9e:58:6d:cb:19:32:06:cd:bb:47:
8b:c9:ab:b1:3b:09:25:43:8f:e2:15:a1:ba:20:15:9b:d1:c8:
ff:08:72:53:46:cf:5c:3a:06:fc:56:f4:5c:b8:19:dd:c3:40:
77:f7:d8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:14 2025 by rpki-client