Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: uP2GYYfiHO/LpdpIIl5cnAt1K+BgnPUiL4EnxL9kXys=
Subject key identifier: 19:92:6F:D7:C4:99:68:77:21:15:35:13:8F:5B:47:29:4F:E0:18:4E
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 0199FBEB7C2E4B62EF09305BCBE0A6DE02E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 069A
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: q9nXiOdPGbuwEb0a3zNdaPo7X2ksGVWarc1XEosMYAg=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7c:2e:4b:62:ef:09:30:5b:cb:e0:a6:de:02:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=19926fd7c4996877211535138f5b47294fe0184e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:5b:d6:d1:05:2a:dc:79:3b:ae:46:2d:69:
ca:97:e5:f6:97:b7:05:49:e0:c8:ce:a3:c4:28:44:
7e:0d:da:cf:c5:aa:e0:5e:26:42:f2:ec:fc:4e:1a:
05:a7:e5:8c:45:97:fb:56:8d:7b:4c:3d:56:c9:65:
ac:dc:a6:e3:42:57:fd:30:90:e4:4a:6a:67:f8:11:
1f:38:28:9d:d3:25:e6:87:a3:13:b8:77:e0:cb:2c:
e0:40:dc:93:a5:78:f8:33:b5:22:36:ac:38:7c:88:
9c:a4:70:de:17:5a:d1:e0:28:6f:99:26:f0:c6:32:
f4:84:8e:b7:b6:90:03:1d:c3:62:f7:c3:f8:65:32:
b5:64:01:49:4f:5d:5e:a1:87:07:2c:17:1f:b8:5e:
61:46:c7:c1:65:cd:cb:cf:31:0a:89:95:c2:ee:fa:
53:e5:60:4b:e7:d3:a0:1f:9b:88:6c:85:5b:17:84:
5e:d9:dc:49:d6:a3:89:bb:4c:d7:92:94:89:23:90:
cb:f0:f1:8b:b1:76:b3:cb:cc:bd:8e:27:66:7d:fb:
f0:d6:f7:4a:08:5c:60:32:33:31:60:48:fc:dd:63:
d8:ec:c7:86:7f:82:7f:9d:99:c8:56:8c:9b:08:58:
12:15:93:52:12:e2:cd:1f:ec:8a:2a:41:6b:cc:b8:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:92:6F:D7:C4:99:68:77:21:15:35:13:8F:5B:47:29:4F:E0:18:4E
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f4:fb:37:29:fc:20:a8:59:2a:ec:98:5f:a7:04:cc:46:71:
87:b4:02:fa:92:89:db:a0:9a:07:e5:48:53:3b:6d:46:a5:71:
11:6f:03:91:ce:0b:e6:48:7e:3c:98:49:ed:88:f8:af:8d:59:
95:02:f5:d9:ab:1a:7d:e5:e5:5b:f6:62:b2:71:57:7d:51:8a:
d9:75:f9:ce:72:78:ef:04:29:e8:3b:ce:1b:08:af:44:3c:fb:
19:fe:fc:b6:cb:e8:8f:7c:83:6d:88:69:19:2b:da:a5:80:ab:
74:ac:3c:8b:f5:b0:a9:97:5c:c5:4b:4c:53:23:15:3c:01:36:
b7:16:a5:9f:bc:1c:0b:66:1d:b9:af:9e:68:ea:b2:a7:46:bc:
5a:26:d6:19:4f:e2:23:75:33:7c:87:c4:e6:48:94:1a:cb:21:
ce:13:42:c1:57:a0:cf:bd:9b:e6:2d:26:9c:f9:33:80:6b:0a:
28:3b:29:21:b8:ab:c5:09:60:ca:72:09:6b:72:fd:36:84:aa:
7e:fe:fa:d8:d2:cb:55:c4:99:a8:bb:6d:e7:6d:16:35:42:95:
53:fa:3d:fd:ce:4d:40:8a:d8:4d:85:96:a6:02:12:1a:d1:4d:
ae:2c:b2:94:7c:b2:05:20:8d:3e:76:98:b9:6c:cb:34:fd:e8:
2b:6a:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:31 2025 by rpki-client