Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: 7xEHO8WfRY6SvRP4LCUSh5oUmNvEWARHDMicq2e2szo=
Subject key identifier: A4:5F:87:6C:F6:07:D3:75:F3:8D:4E:8C:D6:45:D5:30:92:2E:6D:89
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019A1E07BCC13EEF98BCA73FA2C80B5EFFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 01:00:14 +0000
Manifest this update: Sun 26 Oct 2025 01:00:14 +0000
Manifest next update: Mon 27 Oct 2025 01:00:14 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: SIXB/nqYT4vlc9e7EVnVqfFrPUJd2qPoRPWbC7N0sd8=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:bc:c1:3e:ef:98:bc:a7:3f:a2:c8:0b:5e:ff:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Oct 26 01:00:14 2025 GMT
Not After : Oct 27 01:00:14 2025 GMT
Subject: CN=a45f876cf607d375f38d4e8cd645d530922e6d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:77:7f:38:64:a5:24:ba:3f:7e:1e:ed:09:
b0:f2:dd:23:01:87:b5:74:92:ac:be:1b:9b:46:3b:
9c:6f:71:82:b0:e5:1a:7b:21:f2:8d:fc:39:25:54:
ba:84:b0:d2:66:b7:42:0a:b9:09:b3:24:f9:15:73:
4d:a8:77:58:88:33:2b:7b:c7:20:9f:df:fe:7f:ab:
00:2d:56:49:34:4c:eb:22:73:90:f4:7e:ab:43:79:
5e:64:4a:97:c4:37:b5:ac:6f:80:6a:09:40:8f:cf:
1d:64:0f:b5:8f:ae:e2:58:19:7c:15:67:24:5f:cf:
aa:76:5d:ff:b8:ec:01:ab:ad:3a:4f:cb:dd:63:87:
0c:25:0f:6f:ee:8f:f7:09:db:73:b4:91:91:a1:2a:
04:2d:a9:a3:ae:f8:b5:53:8b:73:85:a3:82:ab:a7:
cd:9b:57:c0:d5:06:2c:08:91:7d:5d:db:d4:1d:aa:
c9:8a:b7:ce:60:af:24:eb:9e:fd:15:5e:91:20:25:
0d:73:2e:63:75:b4:9f:5c:b0:ad:07:5a:7d:28:cb:
71:78:cf:e6:ac:51:7e:ef:4b:dd:1e:de:41:b7:e9:
3a:b7:56:d3:4e:6a:d2:c6:ef:2a:a0:3f:0b:35:59:
42:4a:9f:11:d9:65:39:60:5d:9d:24:0e:14:e3:89:
42:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:87:6C:F6:07:D3:75:F3:8D:4E:8C:D6:45:D5:30:92:2E:6D:89
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:94:1d:d7:1e:6e:d8:fe:27:7b:10:4d:5b:8f:07:78:3b:d8:
07:cf:b2:9a:aa:f5:46:fa:39:73:02:d7:01:87:57:2d:4c:26:
54:51:2a:0f:65:0f:97:0a:85:be:ea:fa:5a:06:91:65:28:9e:
7a:d5:81:ef:56:82:df:8c:d9:28:2c:6c:2a:13:8c:b7:eb:84:
7a:b3:a7:70:40:ee:60:53:c6:69:87:0b:58:19:e7:0d:5b:a6:
09:42:cc:22:c1:4e:07:56:c9:63:e1:b2:5f:d4:cf:f3:8a:fc:
4b:05:7a:25:95:77:e2:fc:b4:1a:96:99:ff:f7:ac:14:26:cc:
cd:50:97:e9:8e:e3:8a:85:4c:f1:5c:29:a5:33:ea:9b:9f:5f:
fe:08:1e:3d:d9:96:2f:c7:e9:ce:17:3e:c0:d6:7b:b2:a5:f3:
8e:35:04:ef:06:e3:e0:01:d2:f7:55:5b:61:94:b8:5f:c9:02:
1a:97:43:de:c7:a5:f1:d1:31:8d:54:97:0c:5b:00:01:fb:29:
cc:3b:b5:f3:31:57:af:e4:e7:5c:8b:2b:de:49:ff:09:12:69:
b1:63:d8:1b:f7:83:be:48:1b:c3:7d:6c:04:90:25:21:87:37:
d8:32:c4:f8:6e:e5:3a:b5:ff:61:31:ec:17:3e:9e:9b:1a:d9:
f3:b0:94:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:15:10 2025 by rpki-client