Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: DafHmeYX8IBVvL/Ydq/sqQNaw/VPQdDYqbLBk5d15GY=
Subject key identifier: 27:33:42:2C:9D:FD:58:13:E0:B9:17:55:22:72:D2:EF:09:8B:63:C8
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019A1AD0DA42731808CB3E7F24209A24ED28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 01DC
Signing time: Sat 25 Oct 2025 10:01:26 +0000
Manifest this update: Sat 25 Oct 2025 10:01:26 +0000
Manifest next update: Sun 26 Oct 2025 10:01:26 +0000
Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: 5DoZQ63+5QrUtL0OE+RcVoei/isaWK+gHoDnbf9dSEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:da:42:73:18:08:cb:3e:7f:24:20:9a:24:ed:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Oct 25 10:01:26 2025 GMT
Not After : Oct 26 10:01:26 2025 GMT
Subject: CN=2733422c9dfd5813e0b917552272d2ef098b63c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:7b:23:31:c3:f3:70:33:d8:46:36:12:d7:
1d:25:9b:38:d4:b4:0d:0b:64:25:ee:57:6c:85:d1:
68:e9:84:d2:90:65:ff:3f:e2:76:28:ad:d9:4b:f8:
0f:16:69:0c:35:4d:a1:f3:7c:e8:7c:5d:27:7b:8f:
94:19:73:78:25:98:f5:2e:11:34:ef:be:2c:14:45:
73:ce:2b:ab:31:aa:55:fe:03:4a:da:4a:c5:26:90:
51:3b:ea:de:af:4e:61:cd:af:7e:a3:ff:9b:7d:c8:
75:23:fc:46:d4:b1:30:e2:cd:22:fe:cd:8c:c7:f9:
9f:ed:8e:fe:97:73:28:40:c0:42:da:c3:00:09:6f:
f4:52:f1:3f:99:3f:e7:34:98:65:80:10:6b:e9:eb:
cb:d7:59:23:ac:36:2d:ac:eb:9f:ee:ac:18:54:ed:
d5:80:3c:e6:ef:9d:4a:a8:6f:8a:ae:5e:03:e4:1d:
f3:20:ad:e1:95:8b:bc:b6:65:97:c8:9f:06:ac:2d:
24:c4:c5:57:00:2b:b5:c8:f3:2a:3e:16:c8:cd:ac:
fa:ab:f2:1c:6e:9e:5f:93:96:b7:a5:2c:6e:15:48:
fc:f2:66:57:c4:42:d7:a1:f1:84:88:ef:dd:db:bf:
41:1c:a3:1e:38:d2:c7:51:2a:bd:21:db:59:a1:7f:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:33:42:2C:9D:FD:58:13:E0:B9:17:55:22:72:D2:EF:09:8B:63:C8
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2d:df:a9:59:3f:f5:ad:e8:7d:96:4f:c4:78:07:d4:a5:4d:
73:fa:39:20:ad:df:96:06:c5:95:cf:a9:29:b9:c1:13:7b:28:
5c:b9:45:1d:52:bd:67:e4:8f:53:4e:c7:35:ed:de:f8:20:df:
ab:ed:35:19:a8:7a:2b:d3:c3:bc:98:3d:fe:12:b6:2d:ac:12:
23:fa:4a:a3:73:89:ff:54:5b:3e:42:57:ea:75:5c:eb:de:51:
f2:c3:03:fc:c9:f9:ae:be:f8:96:2f:f7:a3:77:1e:15:a2:69:
50:a5:0a:20:0a:b2:20:4e:f8:36:3a:29:f8:8b:e4:19:48:27:
20:fc:be:db:87:85:3f:24:56:9c:3c:0d:b7:21:ff:a7:03:a3:
06:c2:d4:a0:be:9b:5c:79:b7:b5:79:66:50:13:4a:f5:86:b5:
9b:00:9f:94:0e:43:f7:ff:a8:49:95:81:8c:a3:4e:2c:fc:5d:
ee:8e:fe:cc:16:e2:3a:7b:d0:3d:34:62:de:27:26:c8:51:6d:
73:5f:db:14:93:93:24:15:85:5c:a9:bf:18:56:68:04:6f:81:
5e:dd:cd:e3:81:d8:e2:a2:05:4f:ba:8e:6d:b5:e0:22:f3:d5:
63:8d:01:ea:e1:7c:d0:5f:23:2c:4a:29:db:12:e0:01:2a:19:
84:61:48:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:25 2025 by rpki-client