Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: ufYx6+VRXHce+TXcumWsAN6gdo7Jv5HhkiMNG4nMC2Y=
Subject key identifier: BB:F5:57:56:5E:C6:1B:EB:5A:BA:79:AA:E0:7B:31:90:04:7D:CA:37
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 0199FB7C70F7A85462E33963497704AD0D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 0FC5
Signing time: Sun 19 Oct 2025 08:01:00 +0000
Manifest this update: Sun 19 Oct 2025 08:01:00 +0000
Manifest next update: Mon 20 Oct 2025 08:01:00 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: va6GRgODsaEBFgBdmP5u5EQXLnlXN7g7O6AVCAWa5Y4=)
2: CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa (hash: KpU4uZLnHzH71nuh4tR8vuJUqVXwmRrydoVr8tnF92Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:70:f7:a8:54:62:e3:39:63:49:77:04:ad:0d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Oct 19 08:01:00 2025 GMT
Not After : Oct 20 08:01:00 2025 GMT
Subject: CN=bbf557565ec61beb5aba79aae07b3190047dca37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:5f:02:5d:75:7d:95:05:c9:16:02:52:44:
47:3f:10:e1:66:cf:d4:0c:75:92:b1:89:58:8f:c6:
d5:76:09:bb:36:bf:f7:14:2c:a5:84:4b:44:7b:5c:
83:40:8f:1b:4a:bd:c6:a5:6f:e7:73:8e:f9:31:7d:
1a:d4:ba:19:01:a3:89:82:f9:2b:b8:45:e3:61:8a:
84:aa:5e:58:b7:5c:a4:2c:f6:e9:1d:f3:7c:fe:db:
eb:75:35:61:50:99:24:e7:c5:0c:00:6a:81:42:d4:
08:ca:1b:58:b0:2b:23:5d:69:cd:e6:02:5d:80:ab:
2c:04:21:d5:b1:39:2c:b5:a5:16:e9:65:76:33:54:
f9:ae:c4:fd:ee:cb:50:16:3a:c6:2b:59:df:10:a0:
f8:07:af:41:d8:5f:3f:34:e0:20:27:86:0d:a2:e2:
db:4a:25:21:cf:c6:71:56:e3:39:1a:a5:08:2f:9f:
1f:1e:04:ee:e5:fd:4a:a8:61:24:93:bf:27:86:d2:
48:6d:ee:d2:6d:64:67:53:90:22:fd:51:90:6c:57:
b3:3a:5f:a0:6c:f5:ca:75:fd:f1:29:19:10:fb:46:
7d:59:e4:ab:1d:c8:70:af:42:64:57:6b:52:65:e1:
71:44:18:49:00:19:65:0c:6f:46:d1:7e:75:53:6a:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:57:56:5E:C6:1B:EB:5A:BA:79:AA:E0:7B:31:90:04:7D:CA:37
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:49:a0:1f:42:f1:ae:a0:ad:89:3b:a7:5d:c6:46:ea:70:6a:
9b:12:65:8c:72:03:f8:d2:3f:0f:e8:cf:f7:59:f8:a8:ac:1f:
aa:de:5a:8a:fd:09:57:3d:62:ea:18:62:80:42:0d:9d:72:4e:
f8:74:d7:0f:98:bf:5f:0e:e8:fd:9f:23:ae:f0:19:7a:7c:bf:
b6:ef:f2:41:6a:72:44:65:99:5d:33:4f:d0:a0:c7:b7:d8:93:
d1:07:0a:8e:8c:f5:28:c6:bc:18:cf:0c:68:fc:cc:e0:40:b0:
9b:9f:ed:e3:4b:d4:7b:30:d9:d8:58:96:16:5a:15:9b:92:b8:
d7:61:64:15:51:8e:17:f8:8a:04:13:58:2b:d2:20:74:d3:20:
4d:47:09:91:e4:7a:8e:5c:8a:56:53:90:0c:c9:d5:9b:5f:34:
81:8a:d6:a2:b5:8d:d3:00:fe:b1:24:db:56:b3:c5:0e:50:f1:
aa:30:fb:3e:9f:eb:c9:f5:f4:4e:fe:8d:fe:4d:3d:c3:b6:87:
07:30:c4:58:2f:41:23:ff:aa:ad:6e:8e:0d:48:eb:29:49:a0:
df:50:53:37:78:e0:40:cc:f7:c9:cc:3d:94:53:0b:04:94:36:
62:5b:3c:a5:77:49:38:9f:6a:0d:1f:ac:f9:b4:45:c5:3a:b3:
b7:0b:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:36 2025 by rpki-client