Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: oPyWEY+NjyC6Lbl9IKqGuGQ16mBCt7ThjJZeS67Ch/g=
Subject key identifier: 68:E8:CD:D4:EA:B7:A0:39:1C:F5:61:EE:1E:E5:4E:F7:0F:06:A2:41
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 0199FAA12F858A648C35F468C4E940361220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 120D
Signing time: Sun 19 Oct 2025 04:01:31 +0000
Manifest this update: Sun 19 Oct 2025 04:01:31 +0000
Manifest next update: Mon 20 Oct 2025 04:01:31 +0000
Files and hashes: 1: ghqg6ujuEOV4Vw3b6x6YkQU8aSs.roa (hash: IATpDK+kaz0czhsEzmLbtPDJ492YJfivjvGQ/3AgHO8=)
2: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (hash: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=)
3: x5FwTTVorsGfIV2MDa8IC9dozSI.roa (hash: cVCSNkZBBh3ZJGnim77LdgANipO1Ai7iWjVLFMe9HIY=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: br6+Q6Q/g/KQtSetHrf5yYdLDu8WXJCxBpycWUMAYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:2f:85:8a:64:8c:35:f4:68:c4:e9:40:36:12:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Oct 19 04:01:31 2025 GMT
Not After : Oct 20 04:01:31 2025 GMT
Subject: CN=68e8cdd4eab7a0391cf561ee1ee54ef70f06a241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:67:21:da:7d:87:ef:1f:b0:b6:4b:13:4f:
35:49:69:fa:2d:25:e5:5d:f7:fb:eb:ec:1e:5d:19:
d3:2d:88:dd:5d:77:59:26:37:9b:73:7e:d8:0a:2a:
ec:33:61:43:df:7d:2f:5a:26:88:e4:0a:89:fd:2e:
2f:2e:77:2e:34:00:50:b6:1d:77:1e:3d:c9:32:21:
bf:a8:80:e3:f3:50:f8:4f:61:16:87:d9:2c:dd:0b:
f6:7e:28:c9:06:a9:4b:95:76:02:c5:0c:a1:4b:b9:
25:80:04:35:62:48:4d:7f:07:e3:e2:88:eb:16:92:
69:af:01:2b:14:2a:20:17:0c:03:41:0e:2f:89:0a:
30:13:0d:16:5e:2b:41:ee:38:eb:36:2e:14:f3:c5:
e6:4d:18:bc:70:57:c8:66:69:cc:f7:99:c9:f4:db:
61:97:7f:96:94:2f:8c:ce:e5:75:48:c7:7a:10:9d:
b5:8f:64:bd:b9:aa:dc:aa:93:a9:d3:fc:6f:26:5d:
3f:33:98:48:30:5b:37:4c:66:c7:52:11:2b:9e:f0:
0c:60:e6:f4:1c:0e:c3:4e:a7:05:a4:38:a7:6f:cf:
7a:2c:19:20:ea:79:4e:f5:eb:48:7c:89:47:ca:1b:
a8:a6:b4:80:01:ec:21:f4:6d:05:c4:fe:b4:e8:1a:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E8:CD:D4:EA:B7:A0:39:1C:F5:61:EE:1E:E5:4E:F7:0F:06:A2:41
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:31:87:69:fd:b2:53:b2:39:aa:c4:26:26:19:e3:63:25:6f:
61:3f:d8:f9:58:83:08:33:0a:94:c8:49:2c:c7:11:fc:db:70:
dd:e6:62:eb:a3:32:d5:c4:33:b8:86:13:25:2f:8a:1e:ee:bc:
b4:ea:fe:f5:8e:4b:98:97:4f:f4:46:3f:56:bf:42:42:d2:ff:
49:6a:7d:8b:a3:79:33:ed:f9:cb:65:0c:32:b1:8c:dd:bc:4c:
bd:26:f8:57:bb:d7:34:55:cf:73:b4:43:1a:4a:9f:c0:09:36:
d8:90:0f:8d:8a:50:9e:38:03:f2:01:5b:79:5e:bd:a7:ff:84:
8b:9a:4e:29:89:75:fa:01:2b:dc:44:d4:2f:81:4a:fb:98:0f:
9e:aa:84:3d:1b:f4:6e:d4:76:19:1c:df:30:7a:17:1b:68:9a:
77:04:96:ec:9b:61:15:f6:1b:85:51:86:5f:82:9e:fc:31:2a:
ec:75:06:2d:7d:fc:d8:37:68:f6:90:d6:0c:ad:b7:02:a6:94:
d6:65:94:5f:6b:43:65:4a:7f:80:cf:19:34:65:d3:fb:f7:db:
43:12:d2:ca:b5:9b:10:70:dc:84:c7:fa:00:9c:84:d1:bc:4f:
5f:2d:04:58:8a:d6:af:89:6c:8b:02:f6:6d:20:de:1f:17:3f:
be:b3:9b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:53 2025 by rpki-client