Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: QD112vjbdhTstXwvwQ+AB+tjvZ1n0/ANH27svTPWPXw=
Subject key identifier: 3B:75:39:85:0E:EA:A2:5E:67:6B:ED:1C:07:57:03:B0:62:97:97:52
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 0199FF5962C53FD8E50E8D3EB7770370F109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 08CD
Signing time: Mon 20 Oct 2025 02:01:12 +0000
Manifest this update: Mon 20 Oct 2025 02:01:12 +0000
Manifest next update: Tue 21 Oct 2025 02:01:12 +0000
Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=)
2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: 0NNjqPJPri6J+ivq+xtXoxhn4+oYxUWF1r+Rrwp5n6g=)
3: e9Z_8CtChGt4iClYaH_YgcqeT1k.roa (hash: 2K2jsaRk3MeR/R/Hwsml8Lc+ehwc8rBqNjGIvU2lgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:62:c5:3f:d8:e5:0e:8d:3e:b7:77:03:70:f1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Oct 20 02:01:12 2025 GMT
Not After : Oct 21 02:01:12 2025 GMT
Subject: CN=3b7539850eeaa25e676bed1c075703b062979752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:43:16:af:08:7f:51:8d:55:92:02:a4:50:
7b:f3:0e:a7:34:af:76:1d:3a:33:b0:71:1a:dc:38:
4f:4a:3d:08:9b:79:9e:94:cb:de:d9:ed:e5:d9:58:
d7:63:64:ab:5f:e0:e0:32:20:48:7a:fe:9b:b5:28:
98:e1:f7:de:c9:0a:f6:e3:fe:2d:fc:5d:49:93:28:
10:42:f4:d4:69:48:05:c0:20:6f:51:a9:ea:98:09:
cd:49:13:eb:b9:9c:10:5f:b1:5c:3e:32:3b:7f:c0:
81:b4:79:83:7f:ef:40:43:14:82:ee:24:79:1c:2d:
0e:e5:da:dd:3b:3e:17:61:6f:20:07:40:70:b1:c0:
d6:37:d3:11:c7:0e:af:40:61:dc:e3:3d:bf:93:9f:
39:01:81:c1:2c:7e:7f:78:6d:54:14:f8:3b:15:7f:
06:c6:98:54:47:2a:82:00:3f:0f:e1:a1:e6:e0:95:
d7:6b:2d:9c:56:ca:ca:41:86:12:03:34:4c:a7:49:
54:81:37:a9:a9:1a:fb:37:cd:0f:d1:e9:d5:72:4f:
3f:47:f2:96:96:06:68:30:bd:cc:92:df:1b:ce:dd:
f1:16:a5:ef:9a:f7:cd:bc:d5:39:46:00:88:23:e4:
1f:be:92:d7:bf:3b:89:37:d8:3c:7e:9b:ee:90:f1:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:39:85:0E:EA:A2:5E:67:6B:ED:1C:07:57:03:B0:62:97:97:52
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:23:4c:6d:ea:b8:5c:bf:57:87:ec:ef:f8:9e:e7:a3:60:aa:
7b:0c:2e:60:42:d3:a8:c6:fa:0f:5d:46:6e:45:5f:15:fd:c7:
9c:ab:38:4e:34:dc:c6:87:2e:ef:5f:d3:a2:70:b6:a6:dc:ea:
ba:4f:3c:57:4f:55:44:a0:1e:40:ae:11:5a:4d:27:55:1f:7c:
70:d8:01:c4:97:1e:eb:7d:c2:d1:5f:e5:25:af:95:b1:25:f9:
63:aa:a0:8c:23:ab:86:69:c4:5e:b0:6e:38:61:20:b9:ba:a5:
63:86:ae:63:3e:00:fe:fd:e7:e6:e0:a9:d1:73:52:e1:a5:6a:
88:b3:09:7d:93:ff:e2:8b:55:ea:13:fd:91:5b:fa:fa:ba:c5:
52:e4:ee:1e:12:02:73:c6:07:ad:8e:01:60:4a:6b:05:d3:2b:
26:1a:64:9e:51:63:af:ea:e7:75:b6:08:37:92:14:9a:43:b6:
f7:46:07:5e:b3:92:f4:cb:42:54:8d:35:cb:3c:ee:0a:90:6b:
9e:c5:85:b5:b1:48:06:ee:af:f3:b6:77:d0:aa:ad:19:80:2b:
ed:8b:ee:45:6c:6d:d4:33:25:54:b7:38:20:27:56:c0:43:e5:
a1:72:9f:d0:ba:3c:7f:f9:3e:c2:32:4c:ba:75:72:93:69:22:
a0:2f:03:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:59 2025 by rpki-client