
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
File: YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json)
Hash identifier: R04/BvcfG/WsfPtSA+WXFzBw+nhcYnLpE22qbsn5dKY=
Subject key identifier: 39:32:A7:34:69:13:C3:41:26:1A:AD:78:4F:42:41:84:33:95:FD:35
Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
Certificate issuer: /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Certificate serial: 0199FD33E39526F2AA142ACFE46B7D326D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:00 +0000
Manifest this update: Sun 19 Oct 2025 16:01:00 +0000
Manifest next update: Mon 20 Oct 2025 16:01:00 +0000
Files and hashes: 1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: 5f2RS9bC2H/ReqIhxmZsFot6XyJOCmqH5ND/dce/HXs=)
2: i1y7TAu4eZuINLnbMHWhraWkV7Q.roa (hash: 5W2nC+zCGbvk80Gay8OtFwwtbb47Ru26+BBu/lW2iZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e3:95:26:f2:aa:14:2a:cf:e4:6b:7d:32:6d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe
Validity
Not Before: Oct 19 16:01:00 2025 GMT
Not After : Oct 20 16:01:00 2025 GMT
Subject: CN=3932a7346913c341261aad784f4241843395fd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a0:ab:35:5a:8c:5a:b1:cc:b5:1b:b1:1a:32:
64:d7:d1:14:33:d5:8e:69:74:c3:70:56:92:15:61:
c3:00:98:2a:16:7d:68:1a:15:86:c8:8b:e0:de:2b:
09:89:1e:e9:be:de:2b:ba:be:ed:ea:47:1f:0d:79:
d1:85:47:6e:a5:3e:b4:1a:ea:3d:37:d6:39:9a:4c:
f2:75:5d:f4:bf:08:1e:ef:d4:05:2e:b5:c6:6d:0b:
12:17:f4:a3:ff:52:8f:39:ab:da:ba:e9:c0:93:a8:
e2:0b:12:d6:02:76:c2:21:22:0b:44:65:94:28:5d:
af:9e:ce:fc:16:cb:fd:02:69:86:73:f2:c6:4c:22:
94:ff:d0:08:5a:4c:12:47:09:c3:63:4d:a2:e0:b0:
95:1f:23:2a:9a:a6:b2:2c:bb:8f:ba:15:fb:f9:ad:
06:f9:c6:6e:d6:07:4d:c4:cc:7f:77:dc:a5:05:3f:
7b:48:4b:60:21:e6:66:bc:0c:e5:95:8c:98:30:ed:
d4:30:fc:fd:db:5a:ef:48:d9:97:bb:5b:ce:a5:e1:
4f:36:56:c8:a2:c9:b0:8e:11:2a:01:c0:6a:b5:84:
8f:83:56:81:4b:23:bb:3a:59:4c:35:97:2b:9e:75:
a1:01:33:44:9a:09:12:57:1e:2e:3f:06:45:56:7b:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:A7:34:69:13:C3:41:26:1A:AD:78:4F:42:41:84:33:95:FD:35
X509v3 Authority Key Identifier:
keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5f:af:21:1b:8d:f3:17:1b:15:24:81:2d:d8:83:81:e8:13:
aa:63:03:23:a6:24:70:97:0e:6f:e8:85:30:0c:ae:a7:88:f2:
a7:26:cf:b0:fc:5a:09:4e:89:33:6f:44:ad:4e:eb:f2:c9:14:
04:33:df:97:c1:7c:70:88:ce:43:3b:f9:5b:32:60:a0:ca:b0:
03:61:b9:05:37:f6:31:14:de:73:77:b0:24:94:50:53:ce:f2:
1e:ee:74:a1:35:9f:70:d3:b3:ce:67:6f:ca:76:a7:8c:00:69:
3b:d0:3e:52:1d:63:0c:12:47:80:4f:b6:49:5a:19:51:1f:f5:
3f:e7:1c:c5:cc:b2:69:2e:f4:65:b0:b7:cc:7c:1f:a3:84:1e:
1c:c6:33:f7:28:f9:00:19:1a:fe:b7:da:64:7f:24:a9:27:93:
28:bc:f9:94:32:d1:74:2c:31:ce:58:73:05:a3:9a:97:55:38:
c4:f1:40:9b:09:42:1d:d7:ee:7b:be:db:1a:a8:6b:d7:79:12:
4c:f0:de:bf:17:3f:d0:c9:14:43:ca:2e:63:44:a8:a4:20:64:
1d:99:74:35:79:c2:ca:a5:12:1a:b6:26:36:9a:3d:38:61:56:
60:dd:f5:42:5d:d1:fc:41:7a:26:8b:65:a4:35:dc:96:e5:75:
35:a9:66:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:42 2025 by rpki-client