Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: d/S03bWnCWUAPonE7SZZlqmSa0+p0wcmn55w405spE8=
Subject key identifier: 05:DC:CF:CC:21:64:4C:34:E2:34:0A:A2:49:A7:12:E4:AE:A7:40:21
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 0199FD6B5A6A398A16D09DD09B074F30F3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 0E72
Signing time: Sun 19 Oct 2025 17:01:35 +0000
Manifest this update: Sun 19 Oct 2025 17:01:35 +0000
Manifest next update: Mon 20 Oct 2025 17:01:35 +0000
Files and hashes: 1: XsLpmpu2xvBP4JjcplMw-4A56mY.roa (hash: zDQ4NxbIV24C02r59jK+8GO4r9TIoUq4yC6lv1rRxf0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: a0X28xGiUHGHvvgNdpHkua2OyiTtkCbXxA4nv/S08Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5a:6a:39:8a:16:d0:9d:d0:9b:07:4f:30:f3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Oct 19 17:01:35 2025 GMT
Not After : Oct 20 17:01:35 2025 GMT
Subject: CN=05dccfcc21644c34e2340aa249a712e4aea74021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:82:a0:fd:49:b9:c0:81:f4:03:b2:88:02:
1d:ad:02:36:30:05:fd:3f:8c:92:ed:68:0c:5b:9e:
34:02:a8:f8:fe:4e:ea:79:57:16:ed:bc:38:da:af:
39:ee:80:d8:98:08:1b:b1:59:0a:b4:15:76:3f:8f:
c2:d0:a9:95:77:3c:16:57:e4:22:b7:8e:b3:92:6d:
26:b8:52:53:b4:4f:a9:cf:ef:84:7b:2b:63:90:01:
98:f5:40:93:a1:7d:8f:2a:49:9d:69:97:41:c2:61:
42:3a:9f:17:02:1c:57:3e:f6:a5:89:0c:c5:fe:95:
79:68:83:c1:61:a5:a4:01:70:f0:ea:c6:f2:f4:b2:
85:67:0e:a5:4d:47:7a:8c:9f:fb:f7:d9:55:d3:15:
8c:4e:56:b1:14:bc:36:39:eb:fc:ef:35:29:d2:21:
eb:52:80:2e:bb:d5:f7:7a:a9:fc:69:7d:a8:33:7f:
cf:18:4f:4f:33:78:67:f3:7b:f8:ef:be:2f:e4:2f:
89:68:e2:01:e4:d3:ee:72:ca:5b:63:cc:cb:53:7e:
ff:e2:14:0b:e7:d6:1e:7b:84:1e:5e:18:7a:fa:7f:
9c:1b:87:50:bc:cb:0b:35:ac:0d:88:f9:a0:c5:35:
87:f2:a9:bb:3e:06:50:6c:ec:89:46:89:5b:54:72:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DC:CF:CC:21:64:4C:34:E2:34:0A:A2:49:A7:12:E4:AE:A7:40:21
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:97:23:ab:11:72:3e:e0:af:8b:0b:ac:43:ef:dc:c2:2c:53:
cc:03:da:99:1e:55:89:50:8f:66:6e:4e:b4:57:3c:32:86:bd:
cb:b2:01:47:a4:db:0b:2d:b5:40:17:c0:2d:dc:e8:35:89:87:
d5:4f:c5:97:0d:99:7d:01:0d:8d:5d:bd:ca:e9:37:64:18:75:
29:6b:b7:3f:a7:4f:1e:1f:40:81:b8:da:91:d4:13:9b:d4:aa:
15:05:52:fa:a0:c3:83:64:d6:88:6a:9f:cb:cd:a3:c0:82:0d:
73:24:82:ee:63:a1:32:d6:ff:ab:32:71:7e:2d:b3:dc:4e:24:
16:0a:6a:c6:e2:ce:e4:04:09:76:d0:12:a1:9f:f3:5e:9c:37:
18:5f:81:f9:c9:e2:31:e1:00:80:a6:57:60:ce:2d:cc:1a:2d:
5e:83:b3:36:42:ef:80:63:fe:eb:36:57:9c:bb:a8:26:eb:86:
11:0f:ee:c3:50:97:30:f7:fa:2d:49:f5:b6:d9:56:b0:fb:3c:
0e:a4:6d:b2:59:2a:e7:d5:be:35:89:9b:13:f6:51:4e:70:9f:
a5:81:58:34:a1:ea:5e:c3:58:1c:25:24:ee:15:3f:8b:24:55:
90:fb:7d:da:c3:ca:b1:64:2b:84:1f:fe:04:60:b5:79:a3:a0:
f4:c2:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:36 2025 by rpki-client