Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: oiNUbWkvHh6NTqlvPsTFCJbdwZR1AfPsj37fv0bIm74=
Subject key identifier: DB:9A:7C:B8:0B:0D:1E:75:08:1A:34:BF:47:87:FE:5F:F6:50:EB:B6
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 0199FD3408897BF72938F77BB67AF0054C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 16D5
Signing time: Sun 19 Oct 2025 16:01:09 +0000
Manifest this update: Sun 19 Oct 2025 16:01:09 +0000
Manifest next update: Mon 20 Oct 2025 16:01:09 +0000
Files and hashes: 1: bOJn3C4X_HbVq1h6UbPmeHa89Xk.roa (hash: 0VXWmptilJp/NZdJSyteya06wYsuekGmJXgRcUTXwzQ=)
2: ri-zVL1OpUAxwvXX4JQ4t1YUuHM.roa (hash: Ck77Ae9V6KDMYJzNdjCSazt5tuNU78Yt+UmBsf4uG94=)
3: u_6Z2m-kttn1KGvW0DMCRJb-wGc.roa (hash: 8dKKNumWXSexpArn6diHEL6UixSl6qSaZ9jIxuDxNf0=)
4: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: 0E+O9RE9MmmlWgiehb7PW4YKnezNmqHIRMaNhmXeZtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:08:89:7b:f7:29:38:f7:7b:b6:7a:f0:05:4c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Oct 19 16:01:09 2025 GMT
Not After : Oct 20 16:01:09 2025 GMT
Subject: CN=db9a7cb80b0d1e75081a34bf4787fe5ff650ebb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:57:73:85:9d:b9:f4:63:94:64:e6:43:8b:
4c:40:8e:6e:36:34:2e:9c:11:23:89:51:64:9f:e7:
f7:74:ac:90:25:4b:47:88:04:88:56:ea:7e:45:d5:
72:05:e1:4f:28:41:70:f1:18:8a:3c:f1:20:a5:16:
d5:7e:f8:9f:ec:9e:49:c7:18:93:13:32:b0:e1:e7:
de:82:4f:87:1c:ae:cb:da:ba:b5:da:e1:56:e9:23:
3e:e1:56:8c:03:fe:5d:70:a3:28:bf:e9:8c:bb:8a:
d5:57:2d:6d:5d:39:02:86:32:e8:35:2f:07:27:23:
d9:75:49:51:30:40:78:74:f6:00:94:53:d1:43:43:
2e:86:19:6e:6f:51:d8:40:af:2e:e7:cd:0a:c0:f4:
a8:93:4e:c9:4b:c6:32:b0:36:09:f8:2d:4f:c4:c6:
df:e4:20:39:36:be:dd:8f:fa:2c:4d:96:ce:ba:03:
d1:46:96:a0:44:66:17:c7:08:48:f8:85:a4:3d:63:
7d:f1:96:d4:1f:87:7e:5d:d3:68:d5:1b:3f:41:59:
1d:47:9f:80:aa:30:ee:57:04:bd:bc:9e:27:33:11:
09:31:3d:63:b7:5b:58:cb:ad:27:d8:ff:c3:b9:37:
e0:c6:db:58:b7:e7:6f:ea:8f:bd:03:4c:29:3f:70:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:7C:B8:0B:0D:1E:75:08:1A:34:BF:47:87:FE:5F:F6:50:EB:B6
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:66:c4:4d:69:86:5b:fc:93:00:26:d4:20:73:7a:16:2f:23:
d1:8e:8b:a4:67:6b:8f:3f:8f:d4:d8:e2:4b:15:c5:fc:53:e5:
92:28:7a:11:b1:31:da:6f:5f:6d:86:5a:e8:08:b5:af:68:d6:
7e:ec:e7:5e:13:0e:e4:82:89:d5:2d:5f:61:4c:aa:9a:c5:c5:
2d:00:f5:ce:97:1f:67:a7:64:26:25:90:9a:63:00:7e:03:8d:
be:b9:92:03:51:34:c3:b8:f7:e3:0b:f8:a7:61:11:26:5b:9a:
8d:ce:47:a2:1e:69:a5:ce:97:52:8e:ba:05:36:64:d4:28:14:
41:4a:e4:5d:42:3c:54:b0:31:3f:21:24:80:1c:92:07:69:f9:
3b:02:89:ea:c2:b3:7e:49:b7:f9:0b:94:c4:94:c5:63:f7:d0:
24:31:91:8a:58:19:95:83:1f:09:43:93:0a:85:7e:d3:0d:c5:
1e:42:c5:ef:cd:99:44:0c:76:ca:a2:7f:b7:b0:a9:cc:4a:05:
21:bd:4d:3b:fc:97:bc:92:f5:12:9b:b3:e9:ac:f8:7f:5e:84:
42:36:6e:0a:b9:fc:3b:96:e2:d8:92:88:9f:23:d8:f3:e1:07:
2a:83:4c:cb:96:79:cd:8d:2c:61:38:1c:b9:5d:0b:25:db:d4:
64:65:2f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:11 2025 by rpki-client