Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: XB4V/Nf1mtDerEYeCGDJ1eCeyQazLNK/YCWVzvi/5Lw=
Subject key identifier: A3:F9:C8:DB:FF:96:C7:B7:D2:A1:18:8C:E8:CE:2A:DE:8E:A9:02:EC
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 019A247893BEC4AE566E6F0C37B85694F5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 07:01:13 +0000
Manifest this update: Mon 27 Oct 2025 07:01:13 +0000
Manifest next update: Tue 28 Oct 2025 07:01:13 +0000
Files and hashes: 1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: OuWAyB10Pd3+FIskqG11xSKg62ndpNQF5S1vaM66YUg=)
3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:93:be:c4:ae:56:6e:6f:0c:37:b8:56:94:f5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Oct 27 07:01:13 2025 GMT
Not After : Oct 28 07:01:13 2025 GMT
Subject: CN=a3f9c8dbff96c7b7d2a1188ce8ce2ade8ea902ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:62:fc:0e:30:c5:f5:76:6b:ec:63:c6:84:
9b:b5:8c:c1:60:b9:96:1a:c8:c1:8e:5e:b6:08:79:
d1:e5:55:7f:8c:b6:f1:1d:a5:56:ba:da:91:2e:00:
4f:2d:6e:86:03:cf:77:d0:85:15:76:ac:eb:32:6d:
f5:f0:92:15:a8:a1:3b:ac:2b:b2:e0:c3:a0:fa:9e:
26:a8:ac:22:90:8b:61:0b:eb:57:0d:a1:de:7a:18:
43:41:45:f6:2b:4f:1e:7d:81:8f:a1:df:95:af:8e:
cd:51:a8:64:cb:4a:5f:53:1a:14:a1:e7:c5:1c:d5:
df:8c:b0:ff:53:a1:e0:e6:80:f4:aa:04:92:bb:47:
47:83:52:39:d2:b1:4a:3b:86:7c:99:8c:b9:50:8f:
12:fd:72:66:ca:cd:bd:79:5d:b3:19:bd:af:03:7b:
df:06:25:51:6c:76:2f:15:09:9d:aa:b9:71:08:16:
83:5d:da:c8:0f:19:7c:f6:0f:18:91:44:f3:07:f7:
fc:c2:e5:b2:bb:18:43:19:d3:cf:7c:7a:4e:4e:82:
85:7d:fc:94:fc:31:8f:08:64:65:b1:f5:4d:e9:49:
92:27:1e:c1:ce:30:ed:1f:b3:bc:78:b4:5d:4d:10:
04:b8:fe:8b:8d:59:d2:3f:55:e3:b7:8f:87:e4:0a:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:C8:DB:FF:96:C7:B7:D2:A1:18:8C:E8:CE:2A:DE:8E:A9:02:EC
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:91:4f:99:11:ba:e8:0c:9c:40:cf:e4:0e:7d:77:78:3f:8c:
19:f0:3f:59:af:d8:95:f8:4c:41:c0:20:41:30:ec:07:ef:60:
11:16:88:55:87:c6:fc:ae:28:4e:63:08:a3:c8:5c:7c:11:95:
da:a0:36:59:30:3f:d8:6e:f8:81:28:81:ec:3b:28:aa:40:34:
0a:4f:8d:51:a5:92:45:e3:97:3c:f5:90:c8:9c:c5:ec:fc:39:
bd:a1:ef:30:29:86:ec:58:3a:9e:ca:23:43:62:26:1e:ae:21:
0e:6d:63:fb:b4:c4:f6:60:78:1b:25:48:8b:75:ca:53:aa:42:
f7:81:17:fc:f8:2c:b9:89:dc:ab:6e:01:19:45:5a:ab:5c:52:
13:22:cf:72:c6:42:8d:c0:4e:5a:af:6f:53:ed:c7:15:d9:fe:
9f:7d:49:7e:74:d6:1a:aa:a5:ff:0e:0d:43:a6:b6:48:a2:6e:
96:6c:e0:ec:07:2a:10:0e:a5:76:0c:03:7f:b2:05:c9:57:cd:
09:91:9a:2b:37:14:a5:89:6a:87:f2:78:c1:cb:51:22:13:49:
d5:b9:e2:0e:59:58:27:a0:19:22:85:7a:01:b5:ca:a0:04:97:
84:1f:e5:45:23:97:c8:97:5e:26:94:98:2d:1b:23:c0:fc:7e:
4d:29:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:32:06 2025 by rpki-client