Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: rpIGPAunLXkRa+cyCTCIOG+/ThtL7D5TIrg1YiQIsYo=
Subject key identifier: 37:AA:73:02:9E:FA:BD:44:97:A9:16:2A:57:66:06:B6:59:09:8B:68
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019A258A41A4851762FCF86C9EBAB6F75760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0CF8
Signing time: Mon 27 Oct 2025 12:00:08 +0000
Manifest this update: Mon 27 Oct 2025 12:00:08 +0000
Manifest next update: Tue 28 Oct 2025 12:00:08 +0000
Files and hashes: 1: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: aX5H2mHAlKu94MeCT3xqZzoxRCj4WVs04t9pUFIhw6M=)
2: _B7qhSnCxfn7CerNmWLFyrIUzIo.roa (hash: SylKEkKlUGkISQweMYeNKNB3Kfx1l1zxuoZbI4A8/rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:41:a4:85:17:62:fc:f8:6c:9e:ba:b6:f7:57:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Oct 27 12:00:08 2025 GMT
Not After : Oct 28 12:00:08 2025 GMT
Subject: CN=37aa73029efabd4497a9162a576606b659098b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:e2:c4:9b:26:c4:ab:a8:6d:37:de:1d:7c:
75:95:0a:41:ab:57:8b:ce:43:33:5a:d4:44:18:5a:
12:8e:c9:0a:6e:07:77:f5:b5:e3:98:54:25:32:91:
21:b9:45:0d:ae:aa:28:e0:7e:82:15:cb:f2:65:5c:
78:ed:47:d8:e9:5d:ae:98:ac:63:53:51:11:8d:7f:
a8:cd:c3:d8:78:fa:7b:44:a8:91:4c:67:39:0e:1a:
66:70:4b:15:a9:c0:cd:72:52:2a:d9:33:f2:b4:64:
58:92:bd:c8:f9:a6:da:62:cb:cb:83:7e:6b:34:6d:
ea:e2:2d:09:c2:bf:69:36:30:db:ff:1c:95:8d:cb:
04:a3:f6:8d:50:b5:4b:a0:98:24:5e:43:d8:67:8a:
19:ad:d1:64:af:31:4e:92:4a:cb:e1:a0:63:e9:7b:
f1:1d:13:d7:fc:92:76:cc:68:02:49:40:6d:95:48:
b7:5d:3d:f5:57:71:23:04:98:48:8d:2c:18:c6:dd:
9d:6e:76:eb:28:72:3c:a8:3e:3c:62:ae:9e:19:f4:
24:50:94:23:8c:e4:1b:d8:d7:d1:26:72:65:d2:8a:
da:82:be:96:90:17:06:ce:9a:b1:27:dc:18:cf:69:
aa:4b:c3:95:d4:a1:87:b2:b3:bc:cb:74:02:b8:74:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AA:73:02:9E:FA:BD:44:97:A9:16:2A:57:66:06:B6:59:09:8B:68
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f8:8c:e7:c4:7a:ff:12:c5:85:16:a5:a4:a2:a6:32:53:16:
73:1f:13:45:94:da:2a:2f:89:80:45:da:55:19:65:de:c1:b7:
07:cd:2f:25:89:04:a2:d5:eb:73:ad:8b:31:63:ed:f2:61:11:
82:58:ab:b9:97:b5:ec:86:12:99:90:f6:f7:4f:12:c8:b3:50:
b9:43:57:fb:32:81:b8:cd:17:29:84:d9:9d:c6:94:8f:24:df:
ba:fd:ff:ac:23:80:0b:b2:bb:2d:22:69:39:34:31:35:ee:d9:
f8:a8:83:35:2f:1c:a2:89:27:99:c4:63:b6:09:3f:01:f4:9d:
ff:6c:e3:e9:1d:f3:41:a4:91:df:9e:1f:75:f8:aa:ed:ec:69:
6a:d7:72:01:80:92:36:9e:cf:5d:1f:45:b1:f6:f1:8e:13:54:
4e:5a:89:8d:70:54:e1:2f:bc:ba:79:50:03:b2:cb:f0:5a:d7:
56:9e:9d:5b:69:8c:91:d2:dd:29:91:a2:d3:89:0a:9c:37:01:
3a:13:44:26:bf:b8:5d:d1:e9:f4:ce:e7:8c:88:dd:a1:88:a0:
a0:3e:2c:16:08:b5:81:7d:74:40:4c:8e:af:b2:dd:41:a8:01:
35:08:57:db:bb:c3:83:eb:e8:9b:ef:05:0a:b6:6d:4e:89:b9:
93:50:52:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:59:17 2025 by rpki-client