Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: B98lY9EiMNa2iElTXoZiYbBODD2LKiT3PBSsGC5GxPU=
Subject key identifier: 2C:E0:0F:0E:40:FA:3D:96:62:71:C7:62:26:3D:B7:95:01:B8:05:0B
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019A1AD17C60BEE784E09C779F7AE335C1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 16FA
Signing time: Sat 25 Oct 2025 10:02:07 +0000
Manifest this update: Sat 25 Oct 2025 10:02:07 +0000
Manifest next update: Sun 26 Oct 2025 10:02:07 +0000
Files and hashes: 1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: o8lDZAvPP5ZRvImwfcE98bemmaAk2CcpwyUXqBuU70w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:7c:60:be:e7:84:e0:9c:77:9f:7a:e3:35:c1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Oct 25 10:02:07 2025 GMT
Not After : Oct 26 10:02:07 2025 GMT
Subject: CN=2ce00f0e40fa3d966271c762263db79501b8050b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:ec:63:95:75:6e:fc:6d:03:fa:26:ce:14:
87:07:e8:7b:91:e8:e4:92:af:ef:e0:bf:51:9b:15:
8d:13:ac:8f:a3:4f:0d:62:77:19:ff:36:af:a0:bf:
01:38:ee:33:58:7e:e1:ce:4e:15:01:48:fb:ef:73:
e4:8d:e6:bf:5e:2f:2a:a9:b0:e4:04:41:c7:8c:01:
33:4d:97:ba:09:e6:f9:78:0b:c9:44:19:12:9f:27:
0a:cf:1f:2f:76:25:dd:0c:b7:3c:89:e0:ba:e9:c8:
75:c8:0d:bc:21:35:b9:01:63:e6:5e:d0:3d:97:ff:
47:1f:66:bf:7d:a2:1e:2c:78:f0:dd:1c:96:8f:d6:
46:06:59:b5:8c:0c:62:1a:9f:d6:ce:3f:09:aa:d1:
35:9f:eb:24:10:28:71:1a:f8:f3:4d:55:f3:f6:5f:
69:b4:29:ea:58:e9:9e:c0:5b:fa:ed:98:a9:72:b9:
66:7c:eb:45:9e:d9:c4:ba:1b:57:58:99:b2:e8:84:
d5:81:9a:a5:6f:7e:f5:aa:8f:45:57:10:52:91:d0:
09:3b:31:d0:ce:e9:00:e0:97:b8:f5:03:64:73:4b:
b0:5c:5d:16:7e:97:15:db:d4:94:7e:f5:42:1d:6d:
fb:94:74:8b:60:e3:3f:3e:c9:74:b3:92:06:4f:2b:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E0:0F:0E:40:FA:3D:96:62:71:C7:62:26:3D:B7:95:01:B8:05:0B
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8e:06:02:bb:0e:48:74:ba:71:d0:f3:db:c0:e0:e9:7c:c8:
fc:10:44:a3:7d:b3:1e:56:dc:c0:b0:81:3c:7d:85:f4:38:74:
b2:26:1f:a3:25:0e:56:37:10:3f:1a:74:39:52:20:3d:e6:f8:
3a:12:f2:2a:2e:5d:55:67:6c:92:12:bd:94:16:94:78:f5:54:
41:4f:03:46:28:0a:10:4e:3c:ca:6d:21:92:cf:05:b8:6b:0f:
22:4c:59:36:89:c3:98:4e:fc:5d:b3:33:d2:4f:c6:86:d7:98:
78:05:cf:d6:db:5e:53:d3:85:79:d5:a2:ee:4e:d8:44:be:56:
a6:c7:f6:20:2a:2b:0f:b2:84:53:e7:7a:02:0d:0b:9c:5d:a3:
0f:da:1e:c6:8a:35:b3:2f:45:74:21:b0:23:3c:d5:82:ab:57:
56:8a:06:5b:dc:69:c8:ee:e2:88:7d:99:ac:33:f0:05:2b:42:
4b:a6:12:24:c9:6a:3f:16:a1:ac:f0:0c:78:75:9b:b8:08:f7:
90:86:33:b3:45:1d:c3:91:7f:c1:0e:76:e2:37:40:c7:4b:81:
41:f6:4a:8f:3c:db:73:44:bf:9e:5d:20:18:ad:2c:48:0b:53:
f7:e1:49:e5:6d:2e:e1:a2:c9:71:aa:26:3e:dc:64:5c:07:68:
69:83:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:24:19 2025 by rpki-client