Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: et2I/6tOyEFto2bBQ+I4fkzKQ36E1VVwrGyt3NzMwxo=
Subject key identifier: 0B:75:FE:AF:08:7E:04:7E:05:2D:D6:88:D6:22:24:16:8E:D8:59:DF
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 0199FD34372D5750176AC3E1A294DD94A445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:21 +0000
Manifest this update: Sun 19 Oct 2025 16:01:21 +0000
Manifest next update: Mon 20 Oct 2025 16:01:21 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: ibLGn6uVYnXz882GsJQc8vz69VXAX/eMsWzLiViwUwo=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:37:2d:57:50:17:6a:c3:e1:a2:94:dd:94:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Oct 19 16:01:21 2025 GMT
Not After : Oct 20 16:01:21 2025 GMT
Subject: CN=0b75feaf087e047e052dd688d62224168ed859df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:66:dd:d9:db:00:ed:32:0c:37:cf:6a:d5:
16:ef:88:79:53:cc:6f:2f:d3:51:01:c7:5e:40:d6:
b9:e2:e7:35:ef:4e:cf:12:18:3f:e0:f1:5c:ce:a0:
67:6e:52:74:38:f1:45:75:e4:65:a4:3e:8e:3f:b3:
28:c5:ba:0c:fb:cb:c3:07:43:54:90:bd:52:67:b9:
ec:04:7b:60:c7:1e:32:21:f1:5c:16:1e:11:91:c8:
d6:f3:b4:e7:a2:71:64:e5:6e:08:1f:be:c1:ae:60:
07:1a:7e:2e:4f:09:ea:a5:33:fc:97:f4:99:fe:46:
45:21:67:96:8f:d3:fd:71:c4:12:af:a0:a7:f6:7a:
d2:df:a9:9e:b0:3a:9d:3d:0b:5e:fd:c4:f1:83:75:
46:7b:6e:99:71:87:0d:5f:53:52:6c:15:d7:3d:bc:
a7:b6:57:01:d5:23:d0:f7:7f:d2:df:3e:80:1a:7d:
ec:05:2c:a5:4a:cc:28:b7:c1:eb:5a:74:21:81:af:
cd:a2:48:d4:8b:f6:ba:14:9a:7c:f0:25:66:fc:ec:
3c:f4:db:99:b9:54:91:2e:8c:10:5e:63:38:1a:a6:
34:fa:00:d0:7f:d8:44:53:92:39:d9:42:1f:de:ab:
59:83:10:33:3c:ef:86:fc:b5:8d:d8:25:d4:13:9c:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:75:FE:AF:08:7E:04:7E:05:2D:D6:88:D6:22:24:16:8E:D8:59:DF
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:93:af:38:e1:5b:e2:56:a4:d0:92:bc:9e:a0:19:15:c0:d5:
8a:f3:52:1d:f8:00:65:18:b2:32:f1:f1:56:ad:4b:77:da:b8:
8a:35:66:2b:c6:8c:92:1b:16:0a:c0:d8:d1:db:73:8a:9b:19:
f2:15:01:65:11:17:a7:01:4f:cc:6f:47:03:cd:37:f1:0c:4a:
b0:4c:7e:ab:6a:64:d8:a7:2e:d6:e3:d5:ff:db:c7:a2:d3:de:
a8:db:9f:78:ff:1d:f4:07:97:58:02:11:7d:61:ce:65:6f:e8:
57:ef:19:26:4c:7b:23:3d:14:62:ad:9b:9c:05:53:7d:8b:f7:
98:a4:dd:69:65:c6:af:e4:72:fe:cf:d7:b1:0b:e5:2c:47:51:
cd:03:31:01:7f:97:47:88:41:8c:8a:3d:be:81:c6:4f:78:c6:
64:97:5b:43:79:7e:7e:f6:17:34:c2:ed:76:13:dc:e0:0c:41:
2c:46:f8:71:bd:2a:6f:d4:a0:f2:a0:62:1b:1c:57:89:b0:9f:
45:b6:bf:3b:ae:eb:51:91:a2:be:db:fe:1e:5c:15:38:5e:84:
cc:32:51:d3:25:50:cd:7e:7b:b6:14:5f:5a:db:9e:6f:84:8b:
95:31:c0:8f:c9:4e:c6:0d:1d:d2:65:0e:84:e2:2b:c2:c8:c4:
c5:f9:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:21 2025 by rpki-client