
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier: Rembm8oWddGEgX+yru6Rn/RdmW8aXwuT50zjPExEce8=
Subject key identifier: 7B:83:17:FB:1E:43:6B:19:2F:11:07:12:B0:D6:9E:B8:44:56:6D:2A
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial: 0199C6459B6A7D0C652DA01AF47B455B4D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number: B4
Signing time: Thu 09 Oct 2025 00:01:14 +0000
Manifest this update: Thu 09 Oct 2025 00:01:14 +0000
Manifest next update: Fri 10 Oct 2025 00:01:14 +0000
Files and hashes: 1: EXTeJ0xnJWTRkgHDu_AxpeIu9iA.roa (hash: qrWsqJSnf72iIeO/vT24niegliGNcW4B28Wyc7Pg4x4=)
2: WmXOt_58syUmTkr0foDjL7xiI4Q.roa (hash: +erBuoZ6Ct32kt0eWK4wbg4Fa+dtktRUNZ/SHpJZIGk=)
3: X9W0b9P6Ek_A8a9BpsvnX133VZw.roa (hash: 8NxMp0DgdQySkZvwKlqGylrfX1726nGJj79qXZbDO7M=)
4: xs2uXZDt7cVA7jwMLyODUbD1r5A.roa (hash: CK+GsD3c++kM/6BpDz2kJy3N5LQsGAx/QUYH0SzjPAM=)
5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: 8/S3urcYBJf0nKfzaWz7vobfxKYqtucH2qvDccbjO7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:45:9b:6a:7d:0c:65:2d:a0:1a:f4:7b:45:5b:4d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Validity
Not Before: Oct 9 00:01:14 2025 GMT
Not After : Oct 10 00:01:14 2025 GMT
Subject: CN=7b8317fb1e436b192f110712b0d69eb844566d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:f5:16:29:82:c2:1d:10:02:38:b7:76:83:
7f:25:64:9a:ce:95:f9:0e:f7:b5:bd:ae:b2:ae:59:
0d:05:fa:53:50:7d:5c:b0:99:0f:d7:a1:2b:24:c1:
bf:cf:47:35:1f:8a:4f:ed:3c:3a:c0:06:5e:17:ec:
02:5c:a6:37:02:03:8f:10:d2:bb:a1:a6:1a:f1:3d:
45:18:25:9e:09:7b:69:36:97:20:44:f6:65:36:bf:
5e:35:46:6c:8e:02:e0:66:5e:1c:17:6d:6a:b7:a9:
78:55:7b:0e:ca:ac:f5:89:8a:1e:44:01:14:8c:3a:
a5:fa:a1:38:1a:75:7a:19:a5:6b:13:ce:aa:4f:d5:
31:a0:ed:8e:fb:1e:ff:a6:7f:1c:f5:b6:ea:21:f7:
fc:35:0e:1d:20:68:a6:1e:7b:62:db:a5:39:b7:f3:
ed:7e:2c:45:2d:a6:4b:fd:b8:ff:0d:5a:04:7e:10:
75:aa:85:bd:b2:a2:3c:6c:5b:c0:0f:ed:cf:09:7c:
84:3f:82:49:c8:54:7b:31:df:d0:fc:77:9a:41:cb:
6d:17:63:8a:93:08:05:ed:68:00:9a:37:b7:b5:c1:
fc:27:2a:7f:53:fc:79:40:5a:ce:30:10:1f:91:84:
94:b8:70:32:f6:52:2a:97:01:a7:86:1e:ac:33:c4:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:83:17:FB:1E:43:6B:19:2F:11:07:12:B0:D6:9E:B8:44:56:6D:2A
X509v3 Authority Key Identifier:
keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f0:bb:f3:7d:64:3e:6d:f1:f1:22:b0:3c:85:e1:55:27:8a:
78:ad:be:2a:b9:ef:4d:da:75:71:7a:74:51:7d:f3:6a:21:a4:
30:67:da:4c:fa:6d:5c:0f:bb:a6:bc:67:d5:cd:06:96:0a:5d:
32:6d:a2:73:9d:4c:fb:65:91:d9:45:e8:49:6c:ac:b3:9e:b0:
f7:71:1d:36:8a:08:1f:a3:84:61:58:da:e4:98:8b:91:1b:bb:
e8:5d:a2:67:8e:ad:bf:01:b2:22:4a:f9:70:82:e4:e7:2c:3b:
fd:1d:db:89:b4:2c:ff:1a:1e:cf:e9:b8:63:2d:e7:f1:d4:8c:
30:32:84:ce:81:a1:10:39:a7:b0:d7:8b:ac:74:91:21:00:d9:
c2:48:61:b7:ae:f4:6b:4c:25:64:d9:6b:5b:ec:6c:c6:e2:73:
b6:e1:c1:c0:bb:9c:d4:63:4c:b8:e8:63:70:03:e2:ab:cc:2d:
e5:22:74:f9:c6:70:b2:a5:f6:5a:8a:c4:fd:d2:b9:00:59:61:
f8:26:e6:14:95:53:64:c8:70:9a:3c:06:cd:0e:3b:a9:b6:ea:
16:20:7c:16:4c:e1:a1:39:0c:73:2f:44:bf:7c:a2:1a:14:8f:
d0:34:99:9e:1e:6c:5d:49:2e:29:2a:14:61:61:52:12:d1:42:
a1:78:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:43:26 2025 by rpki-client