Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier: fI9mpWCFwTIaWgpozWNsGSwrE/UteOKDydV8Eh9sHDs=
Subject key identifier: 5C:C1:AA:24:D8:51:71:27:F7:DB:27:A6:53:42:0B:B0:E1:2D:C2:0C
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 0199FBEC3F2C0BD89FF86C8BA483DEE6A9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number: 104B
Signing time: Sun 19 Oct 2025 10:03:07 +0000
Manifest this update: Sun 19 Oct 2025 10:03:07 +0000
Manifest next update: Mon 20 Oct 2025 10:03:07 +0000
Files and hashes: 1: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (hash: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=)
2: C1FyQJSK2-uv7URyciZXxMvVb6c.roa (hash: CAmInxyQhyb9MZHRVwkcOEX1WeCGUI9sXRoPqIH4UiI=)
3: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (hash: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=)
4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: uSCWRVlX98+NMXS5c1UVlXtJAdKT4u9hkmufKFrY44k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3f:2c:0b:d8:9f:f8:6c:8b:a4:83:de:e6:a9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Oct 19 10:03:07 2025 GMT
Not After : Oct 20 10:03:07 2025 GMT
Subject: CN=5cc1aa24d8517127f7db27a653420bb0e12dc20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:86:f9:61:82:38:aa:f0:f2:32:19:2f:06:
62:a2:1b:f7:70:2a:ad:21:12:be:bf:6f:a1:99:ee:
56:9d:e6:96:1f:6d:fd:e8:fa:14:12:bd:61:5a:24:
ea:7a:5b:d2:87:cb:51:d6:cb:13:63:25:6a:99:26:
7b:53:90:04:62:e9:0c:1b:cd:e4:e6:d1:34:b5:bf:
0d:5b:12:aa:cd:13:0e:e4:de:02:c9:ff:8d:56:fd:
9b:01:a0:20:4f:e5:81:44:d3:a5:7e:38:52:27:21:
d7:3b:c8:19:0d:2f:c9:e3:0e:50:c1:50:1d:03:2c:
52:76:db:12:fa:08:2d:90:0e:82:04:ae:c3:a5:7a:
82:b1:6c:0f:30:57:61:90:df:ff:df:5d:f3:1f:6a:
0b:15:ed:46:ef:c3:dc:59:48:b1:36:47:e6:86:1b:
06:5b:58:5d:35:6e:4c:80:ad:a8:97:cb:6d:f0:c0:
ba:bb:e7:9c:77:db:6d:15:7b:15:f9:1f:ed:32:ed:
35:5d:44:9c:2e:57:21:46:e1:36:8a:e9:65:ce:3b:
d3:06:56:5b:69:bb:48:2c:99:b3:70:4a:9f:59:51:
9d:48:20:b8:2a:e5:c0:91:7c:29:61:1d:b7:84:d1:
92:21:cd:34:ab:18:7b:7c:fa:10:4b:a7:ef:1e:69:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C1:AA:24:D8:51:71:27:F7:DB:27:A6:53:42:0B:B0:E1:2D:C2:0C
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0a:b2:ac:c8:06:b8:9a:a3:90:b5:0a:3f:b7:70:80:f8:60:
b9:b0:e6:d7:76:cc:69:25:08:74:08:70:4a:a3:89:76:b2:5c:
d8:ff:6f:28:fa:47:f4:f0:1d:de:de:15:f9:95:9a:9d:4a:5c:
7f:39:90:61:82:65:1b:26:37:c3:60:37:c1:d4:e6:ee:f5:96:
fb:41:9f:6c:fd:df:a5:8d:08:93:d1:f1:5b:e4:a4:49:04:a4:
99:7b:d1:3d:f7:e8:9c:3a:98:c0:9d:e4:5f:1e:27:c9:2d:26:
a7:4e:b2:c9:f7:b6:c0:f8:a8:b7:9c:0d:29:97:cf:0b:c5:8f:
76:bb:77:88:01:d7:0a:1d:24:95:f5:ec:6a:b2:a4:56:b0:e7:
09:5e:d4:3a:5a:c4:17:29:4d:a6:b6:02:3f:a9:b2:89:e1:e4:
aa:81:fc:93:5f:b9:bf:20:cb:0b:4e:79:d4:4b:32:c8:13:ae:
85:99:ba:d7:15:1c:44:8f:b8:d5:57:f5:82:20:f1:f1:36:9d:
82:28:89:14:7d:7b:3d:9e:88:7e:c2:d5:af:c3:23:fa:e9:9e:
91:96:90:02:e4:c6:da:3f:ed:1e:7e:5e:0f:04:1b:29:fa:e4:
17:c0:c6:66:b7:ff:6b:cb:2c:56:fc:c9:5b:0f:7a:9c:1f:f0:
8e:62:b9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:58 2025 by rpki-client