Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: oXAs1ZN5vAt06tON9yt9FJWSwUmI+z/ev2sMDA8N4YY=
Subject key identifier: C9:EF:7C:94:F5:FC:51:94:EF:9E:16:71:15:3C:50:45:7B:4A:CD:D9
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 0199FE0FD53DD874F1F72F152E6374C56AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 1364
Signing time: Sun 19 Oct 2025 20:01:14 +0000
Manifest this update: Sun 19 Oct 2025 20:01:14 +0000
Manifest next update: Mon 20 Oct 2025 20:01:14 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: V4rkv9t0tcfg1JSXHY8/hLV4LQ3wrxKQHoNOF1L88Q8=)
2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:d5:3d:d8:74:f1:f7:2f:15:2e:63:74:c5:6a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Oct 19 20:01:14 2025 GMT
Not After : Oct 20 20:01:14 2025 GMT
Subject: CN=c9ef7c94f5fc5194ef9e1671153c50457b4acdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:fd:67:3f:74:aa:1f:df:a4:6e:3d:35:f1:
6c:b2:43:e6:07:1a:33:1e:a1:61:03:af:aa:72:e2:
74:ef:4f:08:ba:cc:1f:0b:d0:e6:67:6a:20:a7:8d:
27:6e:94:67:36:8d:d3:a5:d6:6c:75:1d:0f:b1:a9:
e0:7f:c2:f6:b2:d2:2b:e6:0c:68:aa:25:6c:bc:d5:
00:75:c6:b9:dd:66:5c:92:33:f8:61:92:0f:cb:93:
d1:ab:10:cc:c1:22:25:b2:4f:40:56:a2:7b:22:ea:
61:60:aa:e2:80:70:0b:12:66:e6:29:43:fe:d6:a3:
d6:86:e4:6d:92:78:8e:17:fe:c0:1b:b5:9a:fd:09:
14:10:17:92:a6:5b:c5:a4:e3:29:29:bf:33:38:6f:
3d:ae:a1:90:5c:57:f2:93:39:c9:68:4f:19:b8:69:
d1:06:76:56:07:e0:4a:71:16:61:3f:d6:b0:ee:0d:
54:c3:0c:df:3a:38:65:9d:b9:da:d5:eb:fd:ff:a7:
26:64:c0:2b:13:e2:2d:31:86:bc:58:af:ef:18:e1:
16:d5:ac:ac:de:cb:3b:be:71:d7:cf:91:93:b3:20:
a2:ab:b5:29:2c:2d:8e:2b:75:49:1c:57:33:45:39:
a4:b5:11:f0:3e:41:74:31:ac:c6:71:2d:26:e4:71:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EF:7C:94:F5:FC:51:94:EF:9E:16:71:15:3C:50:45:7B:4A:CD:D9
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:72:19:61:3f:93:82:27:0e:94:bc:da:77:61:87:3e:53:e8:
f3:45:3a:6b:f8:84:21:76:fd:15:fe:05:06:f6:d6:cc:15:93:
6a:18:92:21:55:b6:82:82:19:2f:67:15:35:15:d0:de:be:da:
76:87:02:f7:e3:79:8e:5f:49:28:64:8e:02:a9:02:f5:00:9d:
e0:4f:ae:86:e4:b3:3c:d4:2a:c1:b3:e0:23:d1:ed:56:e2:b2:
af:eb:a6:c2:6d:d8:21:e5:ca:88:03:c0:77:5e:48:f7:be:8b:
c0:f4:66:20:ba:83:7e:e9:5c:cd:ba:b5:9e:37:ea:2a:96:6d:
83:53:6a:56:c9:8b:f0:16:80:c0:2d:48:cb:c1:44:8c:95:b9:
21:7b:45:9f:d4:6e:14:20:9b:a7:aa:f0:91:9b:9d:45:b6:25:
74:e7:f4:ad:75:ef:b0:4d:86:ab:1d:d1:e7:88:3c:6c:17:d5:
5c:a0:b5:77:95:9b:8a:fd:99:51:70:4f:90:f2:11:83:9a:44:
8c:6a:ae:ca:38:c4:82:d9:d7:33:98:e4:22:8c:c9:fa:8e:1a:
fa:4b:8f:44:d9:85:d2:e1:41:4a:1a:60:a5:50:02:c5:d7:91:
39:87:93:7f:79:2f:6c:72:2b:01:a4:1c:3f:69:73:d4:da:fb:
98:e3:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:50 2025 by rpki-client