Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: /gSRvYI8xLBUED8xTaFUwebz+h7tX/RmHSRSE+Qv9+I=
Subject key identifier: FF:CD:28:0F:3A:DA:73:73:35:58:EA:53:A9:F8:00:D9:F3:E4:45:25
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 0199FE46DB2F490CA60C119A5BD05E8F422E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 21:01:20 +0000
Manifest this update: Sun 19 Oct 2025 21:01:20 +0000
Manifest next update: Mon 20 Oct 2025 21:01:20 +0000
Files and hashes: 1: FCsvVRb4swZVn7i4DbPOyl1zfXM.roa (hash: pWG3xc+TD2BjxXH94IjEoL3ycjPpI1BrWH3pnVMhatw=)
2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=)
3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=)
4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: zG3w7CYOmgC9xcuicWmhOhMnn8OwzNutOeA8m21aih0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:db:2f:49:0c:a6:0c:11:9a:5b:d0:5e:8f:42:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Oct 19 21:01:20 2025 GMT
Not After : Oct 20 21:01:20 2025 GMT
Subject: CN=ffcd280f3ada73733558ea53a9f800d9f3e44525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:19:2c:58:80:e9:29:14:b9:cd:52:4b:4c:
0a:d0:e0:9b:23:08:cf:d5:b9:b4:bc:c2:43:ae:7d:
42:2c:17:6c:52:8a:d9:2c:9c:04:a3:6c:ef:d4:ca:
07:f1:fd:e0:f0:cf:8d:95:f4:29:be:99:7b:30:c6:
66:83:4f:67:7a:19:63:17:c0:6e:15:60:86:16:e3:
6d:7d:11:b2:df:16:aa:67:29:c6:56:73:1b:6b:fc:
6d:6a:a2:65:42:a1:f4:32:21:f5:54:09:a8:c7:b0:
85:3b:59:95:d5:43:75:27:a8:73:88:ae:d6:32:a0:
b6:33:fc:b9:3b:e4:58:5a:42:00:18:0b:55:8a:b2:
14:4f:23:87:22:5f:82:68:1b:6e:91:e7:8a:95:72:
71:0b:bf:55:0f:f3:48:78:17:fa:64:66:9d:6a:84:
93:34:04:c3:7e:4e:af:f6:1d:dc:1a:21:20:45:c3:
53:52:bf:7f:57:11:4a:64:8e:23:05:a7:4e:98:ac:
4b:66:43:b3:c4:3b:42:a3:0e:6f:94:f4:19:e2:2d:
8f:be:e7:d1:fa:5a:44:78:a6:ca:cd:26:cd:be:0b:
08:23:27:88:e1:fe:45:61:80:85:c8:53:ce:56:e4:
58:19:2c:d5:ca:b1:54:ac:d1:4a:ee:fc:34:74:10:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CD:28:0F:3A:DA:73:73:35:58:EA:53:A9:F8:00:D9:F3:E4:45:25
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cd:e0:ce:e3:8e:26:38:e1:bc:b3:60:60:bf:d3:90:36:1e:
15:55:27:71:d9:ca:8e:57:85:e8:a1:6a:de:ba:c5:fa:42:d3:
86:b0:4f:7b:a7:5b:78:7b:10:66:61:0f:2d:0a:e0:ab:4f:21:
36:99:6e:26:df:17:66:af:74:0a:d6:26:3b:c8:5c:9d:3f:79:
7d:9b:37:6a:5e:da:f2:55:48:9d:12:fc:3e:aa:dd:07:8d:df:
6d:73:cb:07:d4:15:f5:3d:be:b7:41:aa:40:86:66:2d:0c:e8:
b5:c4:27:54:1f:e1:31:b2:6f:53:ba:99:93:83:bf:88:dc:24:
33:5c:68:2a:bb:92:8a:84:86:9f:85:20:6e:8f:0d:cf:4b:6b:
b5:38:4c:e4:3f:14:d3:b1:75:9e:76:64:06:7e:7f:f6:f4:b8:
31:6b:c7:e5:44:c0:58:32:a9:c3:ca:93:68:41:6c:6e:99:28:
14:2c:c3:eb:d0:70:78:5d:75:f0:5a:79:ed:47:74:54:8f:98:
1a:dd:67:30:ff:69:c8:83:7a:89:62:54:bd:09:0a:cb:ba:de:
39:fe:cf:66:0a:d9:c2:5f:d5:8e:7c:1d:47:7f:f8:d8:2a:5b:
c8:6f:18:0c:a0:0e:d1:d5:99:ba:71:c8:60:d2:c9:cd:7b:1f:
2c:4a:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:29:34 2025 by rpki-client