Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: +f6V5iTSN7/Hax1Eq+gMv3dPUwb3OQH0usiZT9ZzaYQ=
Subject key identifier: 73:A4:EA:EC:08:CC:A0:B5:D1:7E:C6:B7:85:43:C4:7F:FF:A9:12:B8
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 019A2553A9C80C7199275ABBA9615096A8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 1709
Signing time: Mon 27 Oct 2025 11:00:31 +0000
Manifest this update: Mon 27 Oct 2025 11:00:31 +0000
Manifest next update: Tue 28 Oct 2025 11:00:31 +0000
Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: dl9z8rCyfdy+QkiuzKzXE8nx8zHL+Wp9Kfnm7VtVOL8=)
3: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (hash: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:a9:c8:0c:71:99:27:5a:bb:a9:61:50:96:a8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Oct 27 11:00:31 2025 GMT
Not After : Oct 28 11:00:31 2025 GMT
Subject: CN=73a4eaec08cca0b5d17ec6b78543c47fffa912b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:8f:fb:29:9f:e8:fd:6d:a4:ca:34:c8:09:
58:fe:36:a1:39:a0:42:7f:a1:d4:cd:92:79:0e:7e:
74:59:91:a9:0a:89:a3:9c:9d:46:10:b2:4d:3d:dc:
28:f5:4b:51:ac:6d:92:2d:29:9a:fd:9a:96:ea:0f:
4c:51:77:27:16:c0:28:2f:9a:aa:9a:82:af:6e:db:
d3:bd:3c:d4:71:cb:2b:87:46:a8:14:46:ef:2a:a6:
59:a4:f9:d1:f9:f1:ed:95:1d:15:3e:cf:b9:2f:48:
6d:49:5f:08:bf:b9:1c:9c:a7:e1:09:33:cf:d0:84:
14:91:42:59:8e:75:77:9b:51:d7:0e:03:05:7a:ac:
f7:90:5a:3e:ac:e4:9d:42:62:bb:0e:3d:fb:3e:fa:
0d:89:c5:bc:65:ff:9b:26:46:72:ee:29:ac:3c:e5:
2e:e1:7d:dd:18:a7:1a:8b:79:76:ee:31:16:a6:c1:
af:bb:22:84:d7:af:8b:9f:c4:48:5e:3e:cb:ae:f3:
21:26:12:df:77:9f:1e:73:47:4a:eb:61:99:fd:bf:
ee:a7:71:fe:73:36:92:4a:44:28:ff:6d:ec:90:9f:
4b:59:48:23:bb:56:75:db:cf:d8:c7:bc:82:73:27:
bd:49:7e:57:fd:47:1c:e8:8c:8b:73:7d:0b:d8:c4:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:EA:EC:08:CC:A0:B5:D1:7E:C6:B7:85:43:C4:7F:FF:A9:12:B8
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a6:8c:0d:f9:4c:1c:76:62:ae:2e:a9:5f:fc:dd:22:73:1f:
26:37:20:05:d4:37:dd:6b:3c:bf:f9:8f:81:4f:22:60:43:4b:
d9:be:b3:64:fe:84:1f:11:d4:80:60:a5:f0:5f:34:82:eb:17:
43:4b:8d:2d:2f:82:cb:7f:15:29:9e:26:fc:95:38:24:eb:c6:
b5:23:ae:25:f4:24:7c:77:6a:e4:db:8f:d9:eb:23:10:21:38:
96:eb:06:ac:2a:5b:7c:6d:b9:79:c2:23:03:b8:eb:35:19:5d:
90:1e:8a:5b:e0:11:fe:74:e4:db:e1:4c:7a:c5:a1:b8:31:c7:
24:e9:cd:d5:a1:52:3d:dc:64:da:18:8a:4a:3a:d0:5c:0a:52:
33:fd:98:e2:c6:46:c6:d4:ad:08:4c:3c:2c:38:bc:36:b0:45:
b7:bc:a5:05:b1:36:c5:98:c0:86:17:16:cc:a0:f4:22:11:56:
63:28:4d:16:b7:23:af:80:1b:52:04:b8:36:e0:21:f0:69:10:
96:8b:dc:af:65:b7:19:bb:88:fa:16:4c:92:3a:68:78:f6:4e:
64:a9:df:5c:fe:36:ef:ec:1a:01:23:78:5d:bd:69:11:c2:5f:
e6:bd:6d:fc:47:bf:b3:1c:43:2e:d4:23:3d:53:f4:0d:48:1b:
7d:81:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:48:14 2025 by rpki-client