Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: ahYtQ7rCrl+7kbMx6czBKC69FZCgL48c+p0r3e+mJjY=
Subject key identifier: A2:12:44:CE:88:8F:62:DB:A7:AE:A2:6D:AE:35:49:91:6E:ED:DB:83
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 0199FCFD1F8D2A95E8D00CC8B111BEF10909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 0D1C
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: IlHeExFCZOwDVGR-pn-Mj6btqHA.roa (hash: G3OUewbUbdIfclHozVugqBGDnmkGwJv9DxeJNbUzFpM=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: qPbxqpaN/zIHmhIC35329ZyrJUv18LUpLf/DyNad/Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1f:8d:2a:95:e8:d0:0c:c8:b1:11:be:f1:09:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=a21244ce888f62dba7aea26dae3549916eeddb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:dc:16:af:e9:0e:fb:dd:1f:c3:44:08:9b:
85:99:de:3c:7e:d2:89:37:43:90:30:41:a4:8d:24:
54:26:00:dd:83:66:98:00:8d:22:32:c5:10:e3:5c:
c3:1f:6f:51:bc:4d:00:59:5d:ec:72:75:07:cd:0e:
d2:8d:df:f2:93:d9:d4:a6:6d:01:24:6c:e1:27:ce:
61:9a:80:89:15:2c:5a:dc:f5:81:87:d3:18:95:17:
e1:9f:95:1f:02:5f:cf:d5:d0:58:ea:06:f2:37:d7:
b1:fb:83:93:34:43:00:92:58:06:f7:34:7e:f0:34:
e6:d8:3a:a8:45:06:32:42:52:a2:4f:f7:ca:72:cd:
94:98:a9:3f:ae:5a:fa:f1:b7:6e:65:de:1c:0d:4f:
27:f9:0c:e2:ea:1d:84:1a:5a:f6:14:9e:e1:0b:46:
52:71:47:63:eb:60:3a:86:ed:75:e1:3f:b4:3b:b4:
8a:86:49:7e:a4:03:6e:75:59:d7:ec:ea:e1:8e:0b:
09:6e:96:5a:40:aa:7d:00:c6:94:f1:ce:16:34:5f:
2e:b9:44:62:88:fe:43:04:fd:1f:52:a2:48:36:c2:
71:59:32:25:2e:aa:d8:0b:69:01:06:37:54:c5:ce:
85:f0:02:8d:ea:d1:65:97:94:7c:c9:2b:f4:c0:86:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:12:44:CE:88:8F:62:DB:A7:AE:A2:6D:AE:35:49:91:6E:ED:DB:83
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:22:24:41:f7:77:ca:8e:2c:f2:f4:78:0f:27:18:d6:c9:b2:
b6:d4:a7:a6:9d:13:d8:41:83:21:b7:c2:77:3d:a2:79:5b:3c:
aa:ab:74:53:0c:8f:49:e1:0f:a1:61:38:ba:bf:53:53:70:01:
27:26:01:3f:d6:be:b9:64:98:81:cc:aa:bf:86:97:db:6d:80:
6b:a5:ff:9b:b9:4a:a3:8b:3c:f1:88:eb:fe:d4:d6:86:fa:66:
ad:04:16:85:6f:71:f7:01:97:49:a3:fd:c3:66:94:36:7e:10:
57:11:fb:16:d8:8b:a2:12:ea:27:91:2b:ca:2c:01:74:c5:19:
cb:d2:2e:61:6f:e5:58:0f:06:32:da:37:04:0a:32:06:2e:a7:
fb:c6:88:e3:e9:dc:75:10:8d:b5:d0:ce:c1:0f:02:4a:9f:72:
63:11:c8:a0:01:d4:a3:b8:59:71:b0:e5:ec:ee:3f:ac:9f:ce:
8b:99:41:ed:4d:0a:5d:20:a0:da:6d:52:e7:67:88:83:fa:ae:
6e:fc:30:fa:b4:ed:66:1c:e5:0c:d3:84:cb:ab:84:d5:8a:85:
71:df:1c:7a:2a:d7:74:ee:23:bd:f7:6b:c4:e1:2d:fa:05:ee:
76:75:97:c6:0f:fa:b2:cb:33:14:24:b6:19:12:d7:3a:2e:6a:
72:71:f6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:25 2025 by rpki-client