Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: 7+oviXY4r24Blqw5x7oOnUUHKFN3bH9CCGsgLUnq1gE=
Subject key identifier: D5:51:83:88:AE:51:AA:4E:E9:4B:EF:8F:6C:11:9B:C7:B6:7D:F5:06
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019A0C38C5A3FDBA58DBC477B56CF2BC8E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 16E9
Signing time: Wed 22 Oct 2025 14:00:38 +0000
Manifest this update: Wed 22 Oct 2025 14:00:38 +0000
Manifest next update: Thu 23 Oct 2025 14:00:38 +0000
Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: GKZyJTiENI6oDTXmP1/60Tlc8i+YRqUKxI6tAKET1YM=)
2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:c5:a3:fd:ba:58:db:c4:77:b5:6c:f2:bc:8e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Oct 22 14:00:38 2025 GMT
Not After : Oct 23 14:00:38 2025 GMT
Subject: CN=d5518388ae51aa4ee94bef8f6c119bc7b67df506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:bd:5a:3a:68:85:d6:26:bc:a1:23:d7:f3:
85:f2:f5:07:c9:6b:c6:76:a0:e1:96:2b:fc:aa:4a:
81:91:80:93:f9:7c:44:b2:22:e5:14:a7:6d:f7:36:
29:5f:96:be:0a:94:8d:34:3d:c1:e0:66:85:11:6e:
1f:bd:e2:79:c9:4a:f9:1b:e5:b4:60:7c:e3:70:cd:
de:15:a8:98:40:6b:6e:7b:10:cc:ae:e1:00:38:80:
c3:02:59:15:3d:e4:b1:5b:3a:61:9d:9c:d0:b2:9c:
dc:5a:44:72:71:95:41:f7:af:0f:5d:e1:d1:06:1a:
6e:70:80:81:5b:d1:42:10:9d:d9:71:05:87:42:23:
08:0c:e1:f2:9c:e7:15:5b:f3:13:08:da:8a:91:3b:
fa:ca:61:29:18:32:08:eb:d3:bd:b4:14:3b:64:54:
69:c8:31:e3:5c:05:b7:cf:e1:3d:e9:fa:2a:bf:39:
43:19:13:a9:d4:6c:80:22:46:da:61:a2:8f:2f:75:
ec:79:2a:64:0c:3b:fe:87:3b:2f:3e:06:77:ec:a4:
bb:3a:c2:ca:4f:04:1e:a9:43:51:bc:36:76:28:5b:
ed:db:fb:b5:cb:1c:f9:27:a3:7a:62:0d:61:e6:07:
ce:5e:fa:c1:35:62:7a:8e:45:af:66:11:0c:bf:e0:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:51:83:88:AE:51:AA:4E:E9:4B:EF:8F:6C:11:9B:C7:B6:7D:F5:06
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:dc:2e:b5:65:b5:db:7e:b8:f7:72:f1:3d:f9:d0:82:48:58:
32:20:4d:d6:76:63:8b:39:b8:c2:87:6a:2e:f2:40:46:aa:72:
03:d4:d5:96:b6:dd:24:98:4f:36:d3:b7:e6:13:a5:4b:82:83:
44:85:5e:1a:dc:81:f4:8e:53:87:2c:e8:61:dd:af:05:e9:56:
55:44:26:4d:8f:42:05:ea:ff:7f:a6:2d:2b:e7:04:ac:2e:39:
87:30:42:47:3d:7c:48:bf:d8:ea:aa:74:d6:f5:b7:7b:70:09:
96:d5:20:fd:67:ef:28:78:59:b7:14:9b:f3:91:ad:d1:f7:ac:
c1:16:73:63:74:b8:09:ec:b5:05:58:56:03:2f:22:04:97:86:
06:e2:c9:9a:04:5f:dd:ab:bd:a9:a4:a8:7c:a0:17:0b:72:e2:
a6:9f:41:fa:41:6b:37:d6:00:c1:c8:24:7c:6f:ba:4e:2b:7c:
62:9f:1b:ee:52:c9:b4:8b:8b:58:43:c2:c9:02:b3:a9:45:52:
50:08:d0:90:8c:6b:43:b4:1c:e2:34:fc:f0:94:9e:22:4e:37:
ac:37:d4:39:63:e2:c5:4e:3a:fa:7a:81:47:d5:e2:22:26:3c:
1e:67:82:cc:59:77:35:9a:65:41:a3:d9:4d:d1:ec:92:02:97:
2a:e3:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:48:28 2025 by rpki-client