Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: yLt+Bi8mcjCwj4cQt6TaZnRkNq6x3uAfwscfaXu4fSI=
Subject key identifier: 2B:85:2B:88:EA:9A:C3:87:F9:DA:3E:9A:B0:E0:2A:6E:D6:FD:86:2E
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 0199FE7DA1BBB253CB273D3940D8FB0D0145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 22:01:10 +0000
Manifest this update: Sun 19 Oct 2025 22:01:10 +0000
Manifest next update: Mon 20 Oct 2025 22:01:10 +0000
Files and hashes: 1: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (hash: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: xHKDD0SIFGFwqKpInMxrmtXPsmT6Y/DHjvrt3an75Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:a1:bb:b2:53:cb:27:3d:39:40:d8:fb:0d:01:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Oct 19 22:01:10 2025 GMT
Not After : Oct 20 22:01:10 2025 GMT
Subject: CN=2b852b88ea9ac387f9da3e9ab0e02a6ed6fd862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:8c:b2:a3:06:22:85:dd:3c:c9:29:2c:71:
7a:95:5f:12:34:da:a6:9f:df:3a:cb:17:d4:41:55:
f3:7e:aa:20:7e:ad:ae:e4:9e:c5:ff:e4:a5:de:c1:
91:48:c2:5c:f9:1a:b3:16:d0:98:00:92:9c:b4:f6:
be:89:73:37:47:05:18:5a:db:3d:07:c2:94:ff:6b:
9e:62:ab:f0:04:d8:55:f3:a6:52:61:66:79:5f:37:
cd:34:c7:cb:61:cc:77:f6:ac:98:14:0a:34:61:85:
25:a1:00:f8:23:9d:2f:87:8d:eb:53:29:d3:b0:9f:
de:f4:15:a3:77:d6:f9:25:f7:20:49:c3:a3:91:3f:
98:90:b5:98:46:b4:72:88:60:be:fc:b7:b4:10:7b:
75:52:97:a4:36:7b:71:50:7e:cb:2d:64:ed:fc:6f:
47:46:31:49:5c:6f:34:25:3b:38:0b:ac:76:db:0a:
8d:08:e8:e2:f0:15:11:ca:fd:93:e9:05:7b:26:12:
0a:58:dc:d7:b1:7d:bc:47:d9:c0:28:93:2b:df:e3:
74:db:6f:dd:dc:3f:bc:39:dd:83:e1:a8:c9:1a:f8:
65:e0:e9:51:5b:62:5b:d5:01:cd:45:97:1c:d7:15:
6c:69:8f:25:93:79:2f:36:9a:b3:c2:29:c3:52:a3:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:2B:88:EA:9A:C3:87:F9:DA:3E:9A:B0:E0:2A:6E:D6:FD:86:2E
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:83:35:69:1a:45:9f:0e:d5:46:3d:7b:86:89:ea:e3:f1:e6:
53:13:3d:a7:80:2f:c5:9f:6a:e0:cd:e9:4d:76:d8:34:49:e6:
c3:4f:90:cc:b2:b2:fb:d2:53:a1:4e:16:67:62:04:21:7b:c9:
b5:02:4b:a5:17:6b:e6:9a:13:ca:27:79:69:c2:81:41:ab:94:
31:8d:1a:78:40:c6:89:bf:0b:44:e2:75:df:56:03:f4:6d:2b:
91:af:60:10:22:a9:81:2d:10:57:e2:3d:f2:68:ac:07:74:36:
43:20:63:44:4a:14:1d:30:af:8b:a0:69:af:89:95:24:f5:db:
02:68:5d:27:4b:4e:b1:75:80:ea:61:c0:59:2b:ad:ed:9c:e4:
80:e7:3d:89:b7:48:00:c6:4e:34:d3:89:c4:87:a3:a8:88:c8:
4f:a2:2c:d8:42:93:d7:af:e7:22:6e:be:30:83:56:84:e6:50:
ba:9c:b5:d8:44:88:bc:69:26:d7:cf:1a:72:bd:15:e9:34:ea:
1c:11:dd:22:48:11:60:98:ae:14:f9:a3:e5:f4:4d:82:21:2f:
e1:e1:84:0e:69:2f:bd:ea:de:3d:8c:0b:dc:9c:dc:ca:50:2f:
78:7e:07:a1:43:ed:bb:4d:dd:b1:82:6c:f5:a4:30:ad:d5:52:
41:5e:07:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:58 2025 by rpki-client