Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier: xllEaMNDL6pGZCBiQJO8kB1eBNuE/WGgCltpGN13+vc=
Subject key identifier: 5D:66:42:D5:10:BF:82:6B:6A:96:C8:FD:83:0B:A7:FA:12:25:3E:B5
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial: 0199FC213FABEB69F786637266CEAB8D65C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number: 016F
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: IqlpwJ2xW0fAs8ZGPBfSTtIDhwE.roa (hash: qbO1Ww6u5GvjQ0O8Z6mDFqL7l1gHc63dxnum3Lg38lg=)
2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: DXL3x6hm+i4FDDHklSyL0Q0RYcwcwPcDt6FilcKRmFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3f:ab:eb:69:f7:86:63:72:66:ce:ab:8d:65:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=5d6642d510bf826b6a96c8fd830ba7fa12253eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:d6:38:d1:bb:91:72:8e:92:f4:72:72:b3:
51:2b:65:fa:4d:64:aa:ce:e0:87:66:0b:06:c6:5d:
08:66:81:00:d0:88:67:30:65:75:22:ec:a8:68:ab:
e6:7b:b3:1f:ce:8c:96:35:9e:52:ab:98:35:00:d9:
37:c0:93:e0:19:18:81:a4:68:57:a7:0b:60:8c:6b:
a7:fd:5b:fc:f6:3e:81:f7:a5:0f:05:94:2c:16:4c:
3d:7d:2d:59:e4:f0:03:2a:44:60:c4:14:92:6c:a3:
ec:d9:7a:1f:67:7e:28:5a:46:89:27:dd:05:b6:13:
97:76:d0:4d:5a:77:ac:e4:21:b3:1b:b0:78:ab:bb:
c3:6d:0f:ab:0c:25:03:29:37:8d:26:87:22:b2:f3:
c8:e4:76:85:ff:70:3f:e2:4f:4b:9a:1f:90:37:72:
da:59:3a:c7:d1:b3:35:33:bb:6f:f8:51:bb:6f:8f:
19:18:88:15:b1:27:0c:d6:78:19:95:bd:5f:55:df:
41:e4:7f:c7:83:bb:8a:66:bb:39:2c:58:3d:90:2d:
f1:2c:73:7e:4b:49:83:f6:57:ce:25:f9:bf:0b:74:
f3:17:d1:78:3f:a0:ff:f7:86:ec:a9:f9:68:20:b4:
a2:ba:8a:03:1f:0a:82:fa:55:cd:01:b0:23:c1:78:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:66:42:D5:10:BF:82:6B:6A:96:C8:FD:83:0B:A7:FA:12:25:3E:B5
X509v3 Authority Key Identifier:
keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3d:3e:f6:96:47:25:ed:70:7b:03:42:d4:82:9b:49:18:b8:
b4:8a:88:ac:33:7a:8b:c3:6f:c3:82:e8:7b:61:18:d7:a9:d0:
d5:a0:18:ac:af:bd:5f:4b:11:14:79:8b:92:48:49:83:44:4b:
4c:c5:8e:89:37:d8:3a:65:e1:c6:e1:0e:69:d2:8a:46:54:ea:
b6:a1:aa:2e:58:3d:57:fd:11:e3:74:23:58:80:61:dc:40:c5:
38:29:c0:32:2a:82:ef:f2:41:7b:e9:2c:78:70:b8:b1:cb:df:
16:1b:e6:5d:05:5c:ad:f1:ce:5b:fe:6e:91:22:91:88:ff:03:
4d:75:26:39:12:96:97:30:90:86:90:ae:56:95:c2:2a:b8:b5:
24:9f:46:0a:ad:2d:49:aa:1a:b2:1c:d0:88:4b:c3:1d:4d:32:
75:b4:d6:c0:03:06:af:20:e4:28:e6:93:21:d8:40:5b:f8:10:
d1:88:81:bd:5c:d8:5e:d0:4f:cf:fe:a3:12:13:ba:17:71:2f:
3f:df:80:b2:c6:b1:d0:b4:99:4e:dd:34:5a:60:d5:b6:ca:ee:
f6:2a:01:83:78:ac:b2:81:27:2d:61:ef:67:e2:d1:e2:d9:08:
2e:ef:b1:8e:f8:68:87:32:75:93:8b:a1:b8:93:43:71:89:cc:
37:e5:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:49 2025 by rpki-client