Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: w99by7M8gFnwmdskQt9b8vbyRK8e02YWtLU93vNjHZ4=
Subject key identifier: 1C:1E:14:C5:49:1F:34:3B:0B:AF:A3:6C:6E:1F:73:38:F4:C7:04:10
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 0199FDDA4CC82CBEABAF327D0262E8ED7605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 1563
Signing time: Sun 19 Oct 2025 19:02:46 +0000
Manifest this update: Sun 19 Oct 2025 19:02:46 +0000
Manifest next update: Mon 20 Oct 2025 19:02:46 +0000
Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: KTfXHFN78mk48HLQ6DtHv8kHUIeiEBdEr+Mp2NZPbfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4c:c8:2c:be:ab:af:32:7d:02:62:e8:ed:76:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Oct 19 19:02:46 2025 GMT
Not After : Oct 20 19:02:46 2025 GMT
Subject: CN=1c1e14c5491f343b0bafa36c6e1f7338f4c70410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:90:51:6c:77:38:50:1b:2f:59:60:f5:93:
a2:e1:1a:04:4d:42:dc:d3:9e:fe:dc:9c:02:a2:9f:
e8:2d:cb:87:ce:7b:59:52:a5:c9:ba:99:bd:aa:f6:
ed:06:69:7a:24:82:bf:24:10:9b:12:d6:3f:74:d7:
e1:0e:b9:94:60:a4:b7:fd:eb:7e:80:28:d1:f0:b3:
4d:ef:4b:84:e6:89:69:74:55:05:42:6c:04:68:6b:
05:be:f7:da:89:57:84:b1:79:a4:66:56:7a:f7:c8:
ba:5c:49:86:93:00:3d:10:db:a6:48:ea:81:e6:d2:
53:0c:05:6e:36:d5:a7:f5:ec:f3:77:41:38:76:88:
3a:48:10:c6:a9:03:d7:c0:16:ca:3d:fb:97:72:67:
3f:99:c8:5e:0c:30:5c:fb:e3:78:7a:9e:c6:0f:0c:
31:ff:58:89:fc:a7:10:42:84:20:62:33:63:7c:d4:
09:d0:69:21:45:69:bf:d8:1d:f6:f2:2d:1c:e1:ee:
5f:25:59:f3:53:59:32:93:2d:46:e9:38:55:ed:4a:
cc:5d:2c:0b:5e:07:be:60:bd:1c:0e:8b:37:db:3c:
b6:26:a0:b1:32:e5:4c:40:e7:61:06:ac:56:08:91:
b0:bc:7a:15:50:93:44:cc:51:50:d5:a7:3b:63:50:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:14:C5:49:1F:34:3B:0B:AF:A3:6C:6E:1F:73:38:F4:C7:04:10
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a3:e6:37:c4:61:5f:0f:76:77:66:fb:03:e8:30:54:36:23:
d6:de:cf:49:85:14:b3:88:97:d5:b5:98:c8:9c:66:5c:fb:04:
28:ed:f5:72:3d:00:e3:c8:da:9b:b8:ef:7f:76:a2:25:05:10:
31:e8:fa:e0:22:af:9d:e3:69:4b:2c:43:9e:ef:1b:3c:b5:be:
a6:ad:88:f6:03:b9:19:1d:9e:28:0a:2b:a5:4d:52:ef:a2:89:
e3:67:07:f9:10:49:9c:60:bc:ca:9b:60:71:1b:d8:eb:79:12:
f6:b1:db:1a:27:90:81:cc:c9:70:e1:33:08:59:19:81:4d:24:
03:26:e5:d2:c9:ab:0e:b3:f0:2a:3a:1b:f1:63:d3:58:69:44:
03:d5:12:ab:d4:cd:d0:63:80:35:3a:35:02:7c:b9:9b:45:08:
2d:b7:dd:f2:61:6b:78:8b:c0:a9:47:74:08:06:5a:57:8c:28:
96:13:19:39:22:0f:91:32:fc:fa:a2:6f:75:ca:ea:d8:e6:e6:
17:26:88:aa:7d:6d:c2:fa:d3:f8:48:bd:2f:ec:83:93:2a:01:
ef:54:29:9c:78:91:f6:c3:30:c9:bb:69:94:da:02:5b:7c:b6:
b1:0b:23:3b:3e:16:80:30:b6:2d:0c:8e:55:03:cd:46:18:61:
56:2a:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:33 2025 by rpki-client