Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: bbWJp6X3OL7xne68Skkr9VwT8+m6ZHAJD18EZaIICJE=
Subject key identifier: 71:33:0C:42:E9:DB:71:96:9B:48:3B:61:36:23:A2:16:C9:81:4E:1E
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019A02C76230750014990D96CCDD3F9C7B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 18:00:12 +0000
Manifest this update: Mon 20 Oct 2025 18:00:12 +0000
Manifest next update: Tue 21 Oct 2025 18:00:12 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: ddzuJKDdfBfD05pd5AAViQoA2Pc.roa (hash: 2lQWzIDIqMXuR/qxqLFrOSTAaFdBjF2vdhRCL0julW4=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: JYyDXeCV3j/ElZfCbd5pak6Z+Fx7t9UO9ZcMxew7yY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:62:30:75:00:14:99:0d:96:cc:dd:3f:9c:7b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Oct 20 18:00:12 2025 GMT
Not After : Oct 21 18:00:12 2025 GMT
Subject: CN=71330c42e9db71969b483b613623a216c9814e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:69:a3:5d:e0:22:7e:e9:a0:fe:f8:84:d3:
d9:76:ba:1b:e8:9c:e7:71:31:ba:b9:61:01:95:ee:
3e:b3:ef:f9:d3:bc:fc:3a:82:7e:e7:7f:5a:18:d8:
75:c6:6d:06:e4:c1:b6:ce:e5:11:f2:bc:49:1d:37:
06:15:4f:f3:26:18:bf:60:a7:b1:b8:00:91:90:4d:
5c:b1:32:3b:a6:ca:f5:c4:82:39:38:bd:48:b7:ce:
72:f0:2d:fe:ff:b6:81:55:60:84:e2:cc:28:8c:e3:
6a:98:20:59:7a:7b:e6:24:6f:c4:4f:d1:d5:39:a2:
2a:ec:1b:38:a8:1d:7b:3e:fe:b3:c6:0d:e8:68:02:
44:e2:08:36:89:ab:74:8a:15:0e:ce:fa:4a:49:84:
a3:b9:73:43:5b:23:f0:4d:c8:36:72:84:92:b5:20:
d0:a9:94:c9:36:44:cb:fc:5a:9b:30:11:34:0f:ca:
a7:e8:fe:ea:d4:c7:e4:10:d2:0d:33:a6:95:a4:d3:
11:ac:0b:37:5c:6d:b1:48:a6:61:9e:59:60:56:10:
e7:6f:12:1e:76:b4:da:3b:c1:d1:43:48:b4:29:62:
08:ac:0c:f2:9d:81:e4:f5:29:d1:fc:77:16:56:d4:
4e:b2:10:79:da:9b:ac:40:3f:f1:b8:3b:ba:6f:00:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:33:0C:42:E9:DB:71:96:9B:48:3B:61:36:23:A2:16:C9:81:4E:1E
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2d:a2:87:4e:5c:09:df:88:44:53:9c:c4:e2:dd:c6:98:4a:
5f:81:e0:2f:50:5f:f8:10:b6:1a:4c:41:be:2e:db:2c:21:0b:
1b:39:2e:7f:08:9a:9e:20:5c:1a:83:66:21:c6:c1:da:93:f2:
5d:bb:0d:8d:a7:4a:d6:2f:a3:ba:ac:6d:20:18:3e:d7:90:dd:
c0:6c:e4:cf:c6:54:a2:5c:57:a1:ee:67:84:48:0e:d2:a2:3e:
16:5f:82:7a:6f:a1:76:d9:a5:64:12:d7:64:ac:f9:6b:25:e4:
b0:cb:6d:8e:f9:40:fc:bc:10:e7:6f:af:bd:4f:45:ae:f6:77:
51:c0:57:2e:60:ad:34:80:42:51:84:d2:49:bc:b6:f5:48:f7:
1b:1d:cd:b9:3b:9c:59:7a:5f:a4:51:b0:31:17:a8:ef:1c:cb:
6f:62:d3:82:22:78:6a:b9:88:cc:e6:18:02:47:5f:9e:ae:97:
91:4b:ff:f2:ab:ae:06:6d:fb:e2:e2:82:b9:fa:5c:72:e5:8b:
08:33:01:3a:02:1a:19:d3:bd:53:18:0e:3d:00:73:85:92:7c:
aa:63:a6:90:98:fe:ce:09:32:e5:f1:4a:0a:90:cb:55:29:ab:
47:98:80:15:af:69:d0:98:68:c8:7a:f6:af:d9:af:db:5a:24:
b0:b2:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:42:32 2025 by rpki-client