Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: veiHjv4DA+zK8bPiqrsqHmxAkrawgcK8m5ZqShUSbR0=
Subject key identifier: CE:A9:3F:56:E6:E7:7A:00:D7:FB:3E:35:48:4E:11:5D:41:D1:0A:44
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019A24AEF9D6F8DB0C1F4CE974B796E6C8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 05D0
Signing time: Mon 27 Oct 2025 08:00:38 +0000
Manifest this update: Mon 27 Oct 2025 08:00:38 +0000
Manifest next update: Tue 28 Oct 2025 08:00:38 +0000
Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=)
2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: 7S6SPfEuIYGO/LLuW8sovWEZ9SMy/M2M0XC35UwAoVA=)
3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:f9:d6:f8:db:0c:1f:4c:e9:74:b7:96:e6:c8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Oct 27 08:00:38 2025 GMT
Not After : Oct 28 08:00:38 2025 GMT
Subject: CN=cea93f56e6e77a00d7fb3e35484e115d41d10a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:17:b8:ac:91:a8:53:9e:a5:13:7f:1d:76:06:
0b:3e:e8:10:7b:4e:d7:b7:6e:15:b9:8b:8b:67:e1:
5f:56:74:d8:c2:06:22:bc:37:43:58:8e:19:81:36:
45:63:91:ca:e4:f8:55:e8:f6:cb:1f:bf:6d:3c:8d:
9b:ae:32:05:59:6f:95:e8:06:f1:87:39:4e:e7:64:
21:77:3f:ca:1a:4e:04:0d:9a:48:0d:f5:cb:13:61:
cc:0c:f5:59:2d:d7:c3:cb:df:5b:40:ad:be:24:32:
d9:62:8b:72:3c:b0:b2:ac:06:f8:91:0b:2b:a9:e3:
72:a4:62:33:1e:05:09:0a:14:cc:41:6f:2f:f1:e5:
f5:3f:58:98:2a:b1:aa:d4:f2:7c:bc:7c:70:c4:e4:
c6:90:bd:bd:5c:ab:9e:3f:10:d0:fd:16:99:2e:e5:
0b:de:51:8c:e6:55:c0:80:6f:90:a4:5c:7f:3d:96:
ae:fa:4b:b1:55:64:5a:67:53:56:13:da:7e:fd:9e:
29:c8:e2:da:93:d4:0a:8a:b9:e1:44:4e:51:3f:60:
42:cc:41:27:39:60:91:7e:9b:fc:98:20:e4:d6:47:
2d:6f:9f:5a:c5:23:88:50:29:29:62:11:7e:72:14:
2b:e5:3d:e5:02:77:4e:8b:ef:f2:e9:26:08:a9:5d:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A9:3F:56:E6:E7:7A:00:D7:FB:3E:35:48:4E:11:5D:41:D1:0A:44
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:56:c4:3d:7a:2e:b0:63:32:67:6b:6d:29:31:a0:d9:3a:0c:
f8:82:63:c2:b7:8d:ae:80:c2:01:a4:07:35:5f:0a:b2:96:bb:
82:0c:27:7a:3d:8c:cc:91:d2:66:d3:b6:08:85:08:15:88:66:
29:dd:2a:eb:34:c3:60:72:4f:be:38:2d:9c:90:55:4b:b1:51:
52:c4:92:d5:02:df:53:b7:ec:9e:e7:67:76:13:ed:9f:74:3c:
97:fb:51:72:ed:39:a0:e5:f3:61:47:c6:62:bb:06:1c:c3:13:
71:87:23:e8:ee:ac:33:d9:b9:fe:6e:a4:3a:f9:a7:ef:14:74:
af:3f:7b:05:35:40:e5:cd:56:80:50:49:8f:f8:15:14:8f:4c:
3c:4b:58:e7:61:90:b3:d3:a8:a5:fc:fe:ee:f6:58:5f:cb:95:
1a:4b:ed:ae:65:00:28:fe:88:b1:ae:ac:c8:f1:4b:29:ca:46:
ab:94:cd:f6:38:95:a9:15:f2:53:f4:a0:26:0b:1e:13:27:8f:
ba:b6:59:42:70:f6:1b:00:2c:69:fd:52:04:ea:63:aa:b6:4e:
88:9f:85:a1:c6:dd:fc:8e:88:97:85:c8:88:8d:b2:a3:92:40:
78:7a:c1:49:2f:8f:75:1d:8f:97:bd:07:bd:2c:85:9e:ef:d1:
13:3e:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:43:39 2025 by rpki-client