Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
File: YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json)
Hash identifier: zCpDHIBqBgQr+7gApPXCkg+B/h4PJ4ESUQ+kCbY3z8o=
Subject key identifier: CC:B2:92:14:C0:91:4C:45:9E:E4:76:95:EE:2E:FE:53:67:6E:DF:D7
Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
Certificate issuer: /CN=6007365e0cf30ca8fce98c62660d186a979bc959
Certificate serial: 0199FCC60219FB63332D79D8C60EDCE8CE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
Manifest number: 0A40
Signing time: Sun 19 Oct 2025 14:00:58 +0000
Manifest this update: Sun 19 Oct 2025 14:00:58 +0000
Manifest next update: Mon 20 Oct 2025 14:00:58 +0000
Files and hashes: 1: Oc_LJaADC2cknQ1kKmCdsTOaMZk.roa (hash: JMTbvNQOvHmoLJzyFa8UDUWlgTHr2CpWgpqDOMIvsck=)
2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: JoEMng33lOozmJprR9fPOiFdZY55ed6fJu3IGcnw0Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:02:19:fb:63:33:2d:79:d8:c6:0e:dc:e8:ce:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959
Validity
Not Before: Oct 19 14:00:58 2025 GMT
Not After : Oct 20 14:00:58 2025 GMT
Subject: CN=ccb29214c0914c459ee47695ee2efe53676edfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:03:e7:92:6c:40:2d:6d:7b:fe:62:08:ab:
2e:73:19:9c:6c:48:fb:b6:72:a8:e1:2e:89:b9:1e:
48:34:1b:ae:0a:25:42:9d:a8:4d:40:4e:5c:cc:36:
d2:e7:36:03:d2:5a:ca:8a:08:02:2c:35:22:b2:ae:
c4:ae:f8:7e:6d:fd:81:12:47:95:64:24:a7:e7:59:
79:91:af:7d:da:a8:a5:5f:97:38:bd:c0:05:fd:0c:
b2:72:0c:0c:30:a4:ef:7d:79:65:ec:2a:be:35:28:
c3:44:9e:ca:5b:3b:f1:89:3f:94:a0:05:3b:f5:c1:
04:28:6e:15:22:56:5e:6c:7e:91:16:ae:f5:76:a0:
67:05:0f:53:b1:b7:44:5a:bd:51:37:39:5f:41:c0:
ff:78:e0:7a:68:ea:1c:ed:4d:f9:9e:e5:3a:e1:02:
aa:ae:6a:3a:6b:9c:52:da:63:a8:b1:0e:c2:30:57:
66:68:5d:0d:db:70:5c:28:cc:8b:54:ad:3c:c5:fe:
77:69:11:10:cf:65:7e:3b:73:15:77:0d:de:9e:9c:
16:2c:0e:7b:cd:59:77:02:20:20:85:3e:60:94:8b:
74:8d:76:00:46:e5:7e:1f:6e:91:1b:32:8d:5b:85:
07:71:46:b8:3a:ab:e8:8c:08:91:03:f9:60:fd:b4:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B2:92:14:C0:91:4C:45:9E:E4:76:95:EE:2E:FE:53:67:6E:DF:D7
X509v3 Authority Key Identifier:
keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ff:b3:33:7a:5f:fd:2a:80:2e:30:a0:b9:78:19:d1:7a:ff:
e1:4f:ed:b0:ed:4f:7c:41:c3:7a:c3:1d:e1:09:02:58:41:4f:
cc:ce:0e:63:1b:3d:f5:16:d9:db:1d:d0:af:31:6a:39:46:7a:
e3:7a:37:ce:31:6a:73:19:11:a4:f6:61:54:14:b8:bf:c9:c0:
5c:cc:47:26:95:d0:20:95:0b:d4:35:33:a8:bf:39:c6:56:40:
fc:e7:4d:82:00:da:45:86:33:dd:a1:c3:d6:86:f7:84:8e:22:
2f:e5:82:c5:33:cd:fe:d3:d8:c3:fe:cb:a0:21:4d:4a:aa:23:
1c:3c:20:1e:41:86:0b:85:5f:d0:ae:b6:4a:d8:e4:d0:0b:54:
34:5c:15:4d:bf:e1:10:45:77:85:7d:89:3c:4d:5d:0a:55:86:
a3:cd:84:ef:41:6b:04:1d:9d:80:c2:b6:20:4e:3e:10:bc:2b:
62:33:3a:d2:77:03:b5:53:5b:e8:7f:24:cf:93:15:3e:c4:cc:
7c:35:2a:6d:bb:ec:ae:69:52:fd:b9:b3:1a:aa:cf:8f:09:d3:
64:c8:d2:cb:ce:9d:f1:19:3f:7f:fc:52:4b:90:da:44:a8:6c:
da:e0:66:50:5c:27:8a:0c:db:8f:5b:2f:6e:06:9b:bb:bc:4f:
c6:63:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:46 2025 by rpki-client