Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: RSPRabs1xWxDmnxhxtaoFcJQhV1Hm568s2eeFuY+y1s=
Subject key identifier: F8:7B:13:E4:6C:9E:B1:90:37:DF:61:5D:43:5C:57:63:2E:7A:15:B7
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 0199FB7D08E02299595016093807DF2EC98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 13A3
Signing time: Sun 19 Oct 2025 08:01:39 +0000
Manifest this update: Sun 19 Oct 2025 08:01:39 +0000
Manifest next update: Mon 20 Oct 2025 08:01:39 +0000
Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: wrJ54Rie5gAIa4KFBSfMxAb2dtcX7Zfdf6skdD749fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:08:e0:22:99:59:50:16:09:38:07:df:2e:c9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Oct 19 08:01:39 2025 GMT
Not After : Oct 20 08:01:39 2025 GMT
Subject: CN=f87b13e46c9eb19037df615d435c57632e7a15b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:68:a9:cc:14:38:78:be:87:e9:eb:97:bc:
d4:06:e4:ee:64:5b:5c:7e:e7:bb:bb:67:13:ff:12:
dc:2c:bd:19:06:5b:4f:d5:f7:f6:e0:2d:aa:dc:fb:
a7:b6:77:96:d3:e1:bd:d5:21:73:36:67:d1:83:13:
c7:68:ea:4b:21:b6:41:54:c9:e7:5f:99:a6:2d:e3:
30:20:a7:58:c2:f1:9d:80:ee:64:99:96:82:df:27:
aa:31:6b:3a:0b:3e:92:15:02:cb:ad:3e:f1:e9:d8:
41:61:16:85:e5:b8:14:38:7f:53:57:e5:28:dd:d1:
99:80:8d:dc:21:dd:9a:e3:1d:eb:ef:35:d0:97:9c:
51:70:a0:1b:bf:f5:8c:ab:ab:08:a0:89:51:77:cb:
ba:5a:60:cf:67:4a:92:e9:f8:5a:c4:73:ac:a5:9d:
eb:b3:57:de:a0:0e:83:9b:bd:a1:ef:78:fc:42:22:
b8:5d:13:dd:09:d5:9f:94:93:69:ca:1c:38:df:41:
8c:3f:fd:00:c5:80:4b:3e:1c:67:e7:9b:40:18:0b:
2f:e2:97:6e:97:a1:66:31:b3:14:bf:00:4c:4e:a9:
ef:05:3e:71:57:ee:72:2d:2f:1a:e8:51:d1:2b:0c:
5a:97:58:c1:6d:ab:bb:bb:64:0f:79:51:2d:24:fd:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:13:E4:6C:9E:B1:90:37:DF:61:5D:43:5C:57:63:2E:7A:15:B7
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3c:14:48:c6:26:3b:39:d6:25:85:85:97:52:58:11:8f:06:
d5:92:3c:fc:80:b5:ae:bd:18:70:64:b4:35:f8:2b:af:0c:a2:
b0:62:72:5b:49:b6:d1:05:e1:ad:34:31:02:92:02:4c:d7:a3:
93:9d:4f:ca:e0:70:33:84:22:a2:e6:26:53:8a:d0:29:95:f5:
04:e4:9d:41:ba:ae:9b:e2:d0:ea:41:03:58:ef:07:cb:40:30:
79:18:2c:ed:87:f7:16:2a:af:9e:8f:3e:bd:fb:0e:84:f4:71:
5d:aa:8f:7b:ee:91:fa:9f:0e:3b:e8:67:9b:2d:20:b4:39:9b:
e5:14:6a:13:de:6a:5d:a3:c1:4d:7d:35:dd:e8:4d:37:6d:0f:
42:8e:f4:86:a0:5f:dd:ad:11:1d:ed:4f:be:3d:3c:ca:5c:45:
3a:af:d2:79:61:fd:fc:10:b6:6c:c4:e9:95:78:d8:7c:5d:65:
b4:4f:da:56:ef:a1:67:86:05:53:b8:98:ed:7e:e5:11:c7:10:
8b:dd:b1:0e:d8:98:ed:7f:3c:12:be:21:9b:c1:ad:45:38:f4:
b9:79:e3:d0:20:3b:0c:be:62:88:2e:4d:d2:88:8d:e6:23:23:
c5:18:58:24:10:f4:85:99:c8:14:3d:84:87:0b:1d:59:7a:1b:
56:11:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:47 2025 by rpki-client