Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: Y62abGvAXxQTwy1jQM773b+1Aioi2Uc+zgQIJm/D6PE=
Subject key identifier: A8:3B:88:44:5F:12:4B:AC:23:5E:6E:43:62:AD:0A:4F:91:70:EF:2C
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 0199FCC68F9E9D0E599A523542CB07C2F359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: T_e8rESGCEo93LhSN21hTfmrTUk.roa (hash: atiJpHuf3SkNFx9qJY7AqgXkIGShTie6KIKrkLdR6O0=)
2: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: /te4L6PvI5qmf08WAtjl6K7ngziYq+v2Opy2LtyO5vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8f:9e:9d:0e:59:9a:52:35:42:cb:07:c2:f3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=a83b88445f124bac235e6e4362ad0a4f9170ef2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c8:f9:6a:1f:df:ed:07:d8:cf:3c:d3:8f:2f:
42:0a:58:6b:81:34:24:d7:99:fa:19:7c:46:84:66:
11:3d:0e:82:b9:02:39:90:4e:91:ac:3b:2b:05:9e:
4b:98:0a:29:b2:f8:99:b7:dd:b7:73:ee:d9:c9:d1:
43:1f:73:4d:03:76:5f:31:d3:8f:68:78:87:e2:0d:
55:a0:c1:69:8f:9f:01:32:b5:e5:59:bf:12:3c:3a:
23:1b:25:f4:ef:c6:b1:00:a5:81:1a:35:c4:ef:99:
dd:8b:d9:76:21:0c:bb:d0:1a:98:eb:64:a5:b8:64:
2a:e0:a0:fb:b6:1f:c8:66:03:22:c7:bb:23:cc:8a:
54:64:fe:ef:be:c9:56:ea:b5:80:47:64:70:be:47:
1f:1d:72:ac:30:b9:3c:e2:8f:7a:67:d2:7c:b9:e9:
29:0a:bf:db:ba:11:37:02:01:61:cc:f4:c5:d8:fe:
05:6f:40:0f:93:09:e7:2b:d9:a5:b5:29:f5:a9:92:
f2:fc:04:c6:5f:78:1b:00:3c:45:e0:cd:9b:22:ae:
c3:2d:26:19:b1:8b:bd:af:8c:fc:96:67:8a:1e:96:
ac:0d:43:e3:07:30:16:3b:e9:03:86:94:ed:12:20:
5d:3b:20:a9:3c:5e:b2:2c:bd:82:2a:68:1f:a6:47:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3B:88:44:5F:12:4B:AC:23:5E:6E:43:62:AD:0A:4F:91:70:EF:2C
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d8:d7:48:7b:f5:18:5f:e9:85:d8:b5:72:aa:bc:63:8a:dd:
83:d8:10:0b:2b:20:f2:22:fc:4d:84:86:22:1b:08:65:93:be:
7f:7b:91:67:26:2a:4a:bd:65:49:50:08:c8:a1:81:30:13:71:
23:0a:74:11:1f:42:d8:b1:d4:09:2e:8c:c6:14:01:28:17:73:
e4:38:1f:af:4a:fd:79:5a:fc:64:44:51:6f:1c:a9:c7:24:48:
ed:25:d7:c5:93:c8:30:5e:4c:61:4b:e1:d0:65:2a:bf:4a:17:
be:55:83:bd:5f:b7:6b:f1:54:e5:39:1e:df:94:8a:55:77:87:
4c:fb:c8:a6:e7:0f:a0:c1:9d:a3:a7:d0:74:67:6c:5b:60:50:
64:a3:a1:fc:49:c1:a3:74:b9:19:d6:57:62:fc:7a:f4:2e:71:
de:5d:cc:42:e1:b6:52:24:e4:9b:79:a0:86:c4:ad:f5:4a:89:
fe:d6:fd:f3:c0:5d:fe:29:2a:75:c2:b6:5b:47:ad:10:d6:68:
3b:02:48:01:29:85:2a:3e:ac:e4:3e:c5:87:59:88:2d:d7:26:
64:cf:94:be:3f:40:5f:cc:df:d2:68:17:f0:df:eb:31:3e:58:
67:98:04:89:13:a0:37:20:0a:db:c2:22:e0:9b:17:be:73:4f:
22:71:3c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:38 2025 by rpki-client