Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File: y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier: JSrZ8A2ewbrmugS6lbN5FyoMpufHD1ewGjcu5JhxQ1M=
Subject key identifier: 70:E2:85:5F:C9:42:02:23:8A:E1:E8:22:6F:68:A0:CF:F1:E3:ED:C6
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 0199FF59A57CF706C36A4A214E6C5533FF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 02:01:29 +0000
Manifest this update: Mon 20 Oct 2025 02:01:29 +0000
Manifest next update: Tue 21 Oct 2025 02:01:29 +0000
Files and hashes: 1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: MRBthx/UfnLNj4oYzdQ0Y5VdKvSlYfhSO/DoP2ZUi/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a5:7c:f7:06:c3:6a:4a:21:4e:6c:55:33:ff:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Oct 20 02:01:29 2025 GMT
Not After : Oct 21 02:01:29 2025 GMT
Subject: CN=70e2855fc94202238ae1e8226f68a0cff1e3edc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:fe:4e:c7:72:94:2e:d5:d0:63:1b:ad:d7:
a7:d9:1d:f4:58:71:73:76:da:8f:5f:49:03:7f:a0:
ae:94:14:58:89:a5:17:5b:da:62:3b:1b:dc:39:09:
58:0f:db:0c:05:e7:a2:c3:8a:0a:ca:0d:99:17:0e:
a2:3b:24:88:92:21:04:e0:74:6d:46:0b:ea:bd:94:
48:5d:2a:5a:7e:52:1f:48:26:c9:7e:97:e9:ee:e2:
60:70:1e:4f:a0:3e:5f:43:64:e1:1e:86:c4:5b:c5:
1d:8c:ea:d1:6d:18:c4:79:d8:34:0f:89:57:73:5b:
26:70:c9:a6:fa:95:04:ae:59:1a:9f:ad:2f:c8:7a:
98:84:6f:51:ba:c8:85:7f:e9:d5:12:34:46:2a:92:
c9:05:cb:cb:15:76:0c:8c:58:3f:7d:fb:e0:31:2a:
7a:bf:30:94:73:d8:3e:8c:85:4b:fb:e2:bf:a1:55:
ad:22:5b:83:ff:66:8f:0b:75:93:50:d2:da:3d:e6:
ed:b9:2e:41:44:53:b7:70:34:cf:29:52:88:f6:d5:
63:c1:9f:4b:3e:b6:6a:35:fa:e1:57:ba:a9:0e:43:
e3:a4:50:15:2d:53:b0:0f:82:bc:e4:1a:e7:a4:d6:
a4:4c:fa:54:dd:c4:f5:3c:7a:e0:26:5d:fa:87:e8:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E2:85:5F:C9:42:02:23:8A:E1:E8:22:6F:68:A0:CF:F1:E3:ED:C6
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f9:57:84:a9:18:cd:68:4a:08:66:29:ab:f3:5d:b2:0f:27:
19:37:37:2c:8e:2f:bb:17:bd:de:02:58:d1:5c:c4:58:23:fb:
67:6a:50:33:84:8e:95:f5:58:37:7e:fa:db:26:58:ca:a6:97:
3c:e9:ad:01:51:1e:7b:62:ad:32:f3:d2:5e:3f:03:7c:4a:43:
c3:bb:24:3c:64:77:89:f1:0e:38:3c:de:f7:22:5e:b1:30:2d:
f6:a9:d4:2b:bb:76:13:97:7f:8c:d3:df:28:fa:62:63:62:48:
11:8c:da:bb:5b:1f:90:83:ca:65:a7:8e:46:a1:5f:14:1d:12:
cf:6b:cd:f6:b4:40:0e:58:41:2f:7d:80:19:1c:ca:2a:d3:ce:
e4:94:17:fc:10:11:45:32:70:f9:c8:c6:6b:44:5a:6d:01:8f:
de:05:24:c7:87:55:f6:07:18:7e:b1:b1:91:f6:eb:66:98:9d:
f4:a9:b4:8b:b8:24:0d:13:04:b6:9f:72:3b:b6:c2:4e:87:a0:
14:2d:c0:4b:1a:9b:b8:bf:4f:6c:6f:39:e7:8d:8b:5e:d0:92:
3d:ed:b0:96:0c:00:89:0a:aa:d9:04:11:c3:8d:42:9d:f0:54:
c3:e0:46:4d:ac:d6:05:aa:f4:f0:a9:be:52:2f:b8:7f:0a:9e:
f9:c0:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:09 2025 by rpki-client