Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: iatcyY9B7SO2pHpWaWgqAsi5HBZJqjgt7+jJqrWnuc8=
Subject key identifier: E1:3C:8C:93:13:F7:1F:22:C3:81:B8:99:1C:63:0E:56:E4:75:3C:AA
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019A0111347C6B9397EE097EE5806274376A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 012E
Signing time: Mon 20 Oct 2025 10:01:36 +0000
Manifest this update: Mon 20 Oct 2025 10:01:36 +0000
Manifest next update: Tue 21 Oct 2025 10:01:36 +0000
Files and hashes: 1: YkbGKc-LGqIQZMDerpDN8XDOTbw.roa (hash: RY+DUa9ZajYzyfuzC6xFjBj7ICr29ESsVlrxpHdgeWw=)
2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: s+xcxASJx7M/ODk2mncVKyMo3rRFPoXwFLVgn+bE31g=)
3: zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa (hash: OEzd69K7Il75QSQW6UQvA0dRBfsE2azJdJL9XybJ68I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:34:7c:6b:93:97:ee:09:7e:e5:80:62:74:37:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Oct 20 10:01:36 2025 GMT
Not After : Oct 21 10:01:36 2025 GMT
Subject: CN=e13c8c9313f71f22c381b8991c630e56e4753caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:80:ff:c9:2d:20:de:7f:21:fe:18:0e:b7:
9f:3a:48:bb:80:04:0a:f7:f9:79:d8:e0:9f:ad:87:
68:0d:09:2e:7e:73:79:95:9f:b5:6b:c9:bc:72:d6:
bd:36:e3:09:ca:f5:2d:be:98:56:d7:4b:d7:f7:08:
f6:87:07:de:aa:40:26:40:78:70:f3:3b:40:9b:9a:
dc:7f:6b:52:fc:6b:ae:29:39:0d:e0:a1:37:90:ed:
a7:78:bd:5c:c2:bc:85:0e:d8:39:43:5e:4b:f4:e9:
45:d5:93:73:bb:33:f7:93:3e:09:b6:2d:08:65:96:
f4:12:4b:4e:63:7f:4a:f2:54:80:ce:53:79:d0:bb:
ef:d9:33:74:4d:be:9d:88:50:f9:e1:54:d6:79:4c:
a8:d3:93:7d:ba:13:ab:1b:ae:58:20:18:d0:97:df:
44:fa:43:1f:fb:62:0c:5f:c0:73:57:9e:76:0b:17:
23:af:15:8b:fe:16:1a:38:ee:26:bf:b2:c5:b4:70:
7b:66:01:5e:f9:98:31:14:73:f6:51:a4:08:09:56:
15:7e:28:f4:02:d3:fe:ba:6c:fb:74:a8:2b:5a:9e:
24:13:54:d0:96:33:c3:79:e2:4f:a6:f4:ed:63:21:
09:64:76:e4:e7:f6:59:de:83:2c:a9:c2:a8:c2:7c:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3C:8C:93:13:F7:1F:22:C3:81:B8:99:1C:63:0E:56:E4:75:3C:AA
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:37:a3:a9:b0:3c:8d:61:5a:38:aa:1d:95:4f:b4:86:a5:db:
cf:57:90:02:02:c2:61:db:47:51:02:85:cc:71:90:37:4b:56:
e0:5b:d6:81:3e:cb:ac:58:7f:4d:aa:e9:f7:9f:7f:86:d7:d0:
c4:8f:65:7c:7a:07:3b:c7:7e:6d:d8:01:fd:c1:93:32:35:7e:
11:1a:3f:88:91:54:d4:7f:30:54:6c:62:97:ff:09:75:93:11:
88:ab:19:b3:f2:0c:10:2b:d6:13:29:61:a4:e4:a4:e0:e3:4c:
fc:ed:31:b3:20:3d:27:80:44:14:11:29:b2:a3:6d:88:f5:01:
39:10:c0:0e:41:3f:09:1c:cc:f8:2a:6f:98:2d:aa:e1:61:66:
24:7a:5e:4b:d4:50:9b:96:de:d1:98:8f:f0:e7:ec:65:aa:df:
97:8a:f0:e4:f9:00:db:6c:78:a0:d6:20:9e:9b:7d:39:92:47:
d2:1a:48:4e:b4:a9:17:3a:11:60:50:de:f3:23:1f:5b:8c:d8:
be:42:a7:2b:69:a1:1d:05:0a:c1:8b:22:36:74:56:e8:8a:1d:
53:95:9e:75:26:2b:08:58:c9:b9:cc:d4:c2:9d:6b:be:64:a7:
66:06:9a:b5:77:14:95:d8:5b:c9:a6:a3:eb:3c:e9:0b:38:b9:
e4:2e:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:35:26 2025 by rpki-client