Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier: HqSbfDGj0vmPfcpyVtdhaUZhKj36By+S93XSLi8udrY=
Subject key identifier: DF:5E:62:DB:48:CC:CB:54:DC:56:77:62:33:58:73:DB:2A:6A:12:0B
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 0199FCC6B1F6010AF01D4135E77EDAF3B3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: 9iBw7VZ6SE+uUx7VxB6EN8gzbpHCsurLZT2xaQxLZFw=)
2: apB7016k1B8Xf8viYBYRSP8KhJw.roa (hash: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b1:f6:01:0a:f0:1d:41:35:e7:7e:da:f3:b3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=df5e62db48cccb54dc567762335873db2a6a120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:31:1b:b9:5f:b2:c0:41:11:de:9e:fa:41:
4d:e8:ac:16:f2:77:3c:a6:23:c7:32:34:5b:56:21:
b9:29:b8:d3:a7:69:d9:b6:48:48:48:e5:08:0a:83:
85:95:5d:1f:82:8e:1d:5e:5a:9e:38:8f:38:34:88:
b6:af:4c:8b:68:4f:e5:fb:09:60:51:7f:ea:ee:1b:
0d:88:b2:bc:11:b4:e7:83:97:c9:b1:ae:38:72:19:
1f:9c:67:a3:81:09:08:c0:d3:dc:65:11:20:f8:d9:
07:c8:ba:42:8d:8b:d7:77:38:60:5f:e4:46:23:5a:
97:71:78:02:1d:ef:a9:a6:fd:40:ea:3b:10:96:c6:
53:5c:77:0a:a0:ff:fc:05:92:a0:7f:0e:65:d1:63:
59:27:32:c3:9e:08:f6:c5:43:f3:29:1a:6c:01:9a:
2b:11:8f:be:df:ff:80:7e:68:16:7a:fd:73:cc:fa:
cb:90:95:0f:a3:f0:77:7a:7a:17:b9:78:93:2e:af:
dc:a6:ea:08:9f:f3:ad:7c:0a:2b:3e:33:20:a7:e1:
57:fd:5d:db:e5:04:f8:fc:2a:30:d2:95:6b:77:5d:
62:a9:50:e9:7f:e5:a6:f5:93:66:2c:23:b2:9b:4b:
fb:12:48:60:88:f7:72:9c:71:a8:c1:11:af:6d:33:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:62:DB:48:CC:CB:54:DC:56:77:62:33:58:73:DB:2A:6A:12:0B
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:40:bd:a3:11:a1:c5:8a:b1:08:1b:54:97:c6:97:cc:52:2c:
f1:cd:8b:41:97:37:57:1d:97:b1:ff:0b:cd:b9:37:72:67:88:
70:e4:17:60:76:16:f3:23:48:04:b4:7b:a2:d4:cc:47:b3:98:
a4:8d:87:e7:b2:89:87:8a:07:ed:46:2f:cf:f3:5d:9a:1f:4f:
b0:07:38:9d:9a:ca:90:5a:89:02:cf:b8:c7:2d:5c:bb:d1:e7:
e2:b2:3c:de:f9:69:ce:4b:4f:c9:cd:e0:72:3e:14:b6:20:d3:
c0:c0:84:d2:05:e5:07:54:a5:2a:ca:44:d9:97:4d:f4:a8:a0:
2d:99:10:1f:b5:18:8d:65:08:fd:f8:9e:2b:63:5c:22:34:3b:
ab:4e:44:14:b4:11:a8:73:b2:e5:77:01:2d:3c:ff:43:c9:0e:
e4:74:b2:b0:07:33:83:27:00:56:5d:44:9c:da:d6:06:58:84:
40:67:49:94:ec:02:bf:17:9d:65:18:ab:b8:a6:c8:58:cc:2c:
cd:5c:37:96:95:e9:79:c6:d4:05:58:2b:cd:6c:c8:27:53:92:
f2:25:fb:42:92:bd:5e:01:65:41:ae:10:c3:3b:3e:c0:8a:01:
6b:2f:60:8b:64:1b:8e:76:df:63:73:2c:23:6e:c0:9f:18:8f:
a7:34:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:42 2025 by rpki-client