Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: P8lkDNGA1W3/HErqPwhbXAG7KXdmGMsLATbFP2gMtZc=
Subject key identifier: 24:A9:D8:2C:0C:FB:C2:2B:F7:3E:4B:6F:42:B9:F3:81:51:25:8C:08
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 0199C569A5DE2E331DBE9D44D3E9EDC9464E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 16CC
Signing time: Wed 08 Oct 2025 20:00:59 +0000
Manifest this update: Wed 08 Oct 2025 20:00:59 +0000
Manifest next update: Thu 09 Oct 2025 20:00:59 +0000
Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
2: jECFVXifI2PML21GlnCLdBYUig0.roa (hash: 88xVe4+njhjbTw9qYTdy0ykyXz6/PEaM+aox252NmaU=)
3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: a5yPZcYVq4Zpy+BOe2aZNaxILpEA/GTdEVYQmx0jIv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:a5:de:2e:33:1d:be:9d:44:d3:e9:ed:c9:46:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Oct 8 20:00:59 2025 GMT
Not After : Oct 9 20:00:59 2025 GMT
Subject: CN=24a9d82c0cfbc22bf73e4b6f42b9f38151258c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:f1:51:12:8c:0e:c2:09:69:f5:92:af:40:
c2:6d:93:55:ce:9b:0f:bc:f8:44:d5:a1:80:3e:9b:
8f:f1:35:ad:2e:f8:cd:b4:75:95:a8:c8:9e:c0:0d:
89:30:ea:8f:d9:f0:e2:df:30:00:e0:fd:64:d8:4f:
d9:70:3b:a8:ff:b0:20:f9:ef:d2:9c:62:10:55:5a:
59:ed:e3:e7:db:5b:bd:8d:96:9e:e4:b4:a6:40:32:
fb:1c:56:d9:22:6d:b6:fb:9f:7f:10:26:64:1f:43:
73:ed:f1:68:54:45:12:2e:8e:32:31:4b:2d:65:12:
d0:3d:eb:0a:45:ba:85:3f:88:05:75:c1:5b:ed:fb:
94:e7:d6:bc:9d:0d:74:d5:b0:68:78:69:b7:66:20:
d2:cf:21:72:8e:4a:b2:26:e8:3d:10:9e:dd:58:b9:
c3:5f:fa:25:e7:ee:60:a4:db:47:34:a0:dd:26:ca:
e9:45:1e:b5:b5:48:be:15:e3:4e:f2:e6:b9:31:3d:
0c:c5:6b:28:ab:bb:75:e4:fb:e0:e7:fa:61:4f:2f:
32:ad:6e:8b:bc:f0:96:c4:7d:31:de:b6:da:4f:e8:
3c:58:7c:56:4a:e3:56:b0:64:62:d0:21:82:c5:53:
fb:13:2c:51:7c:ae:fb:76:59:52:83:f8:85:94:da:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:D8:2C:0C:FB:C2:2B:F7:3E:4B:6F:42:B9:F3:81:51:25:8C:08
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f4:58:47:bd:71:16:d0:af:fd:67:c5:5c:22:c1:34:f9:2e:
95:3c:de:37:b5:6f:d3:f6:40:ec:0d:76:61:42:48:6c:25:92:
c6:42:57:77:d1:17:0a:4b:66:b1:07:36:27:ac:8d:08:58:85:
b8:7b:aa:d2:43:3c:21:3b:fe:81:8a:17:a4:18:a5:f3:dc:dd:
13:1d:68:09:1c:f1:de:a7:dd:ff:cb:b3:eb:b0:f0:2d:08:aa:
10:05:ef:fc:b5:67:ab:c7:9a:b0:9d:d6:36:c8:d1:16:58:4c:
b0:b8:ca:e9:d7:91:ea:82:0d:23:5e:67:97:06:88:93:23:a3:
ed:07:e1:81:12:14:84:c8:8a:e0:4d:6e:87:31:da:c7:7f:48:
1b:01:e4:a9:6c:da:60:eb:4d:4b:e7:3f:77:2e:17:a0:e9:e3:
5e:c9:2f:40:7b:c0:b8:dc:47:e5:04:cf:2f:d5:e5:2e:39:19:
88:42:d9:ac:07:87:61:bb:d6:aa:94:13:b7:ea:e6:dc:55:99:
b5:12:4f:e1:ec:6a:4a:14:a3:a3:0b:63:03:3b:b5:97:af:de:
e5:dd:f1:2b:61:86:12:83:c1:94:e4:b9:6f:4d:33:b5:b1:47:
91:f4:ef:d5:4e:15:35:2a:38:74:e0:53:33:10:6c:17:d6:ef:
48:58:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:22:18 2025 by rpki-client