Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: cGJ2w4/XyMQJPnUFJFoyEm2e2bb/dkLKg2LrwMAVL2U=
Subject key identifier: FC:35:DC:CA:60:2A:81:67:90:05:FF:14:6A:8A:B6:8F:F7:58:9E:4C
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 019A2176BE27AA3A640058CCF148F1E14A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 16FC
Signing time: Sun 26 Oct 2025 17:00:21 +0000
Manifest this update: Sun 26 Oct 2025 17:00:21 +0000
Manifest next update: Mon 27 Oct 2025 17:00:21 +0000
Files and hashes: 1: G67im2f6_ZhJBmi9qes0fIWNsWo.roa (hash: rcGVW1BtLRG5wqd17uLZEGASDvopWpXiN4N5Gl4c/9Y=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: y4CHScVhAZz5RUqhNkbRlINfvyM/frXwVaWGbfg6kLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:be:27:aa:3a:64:00:58:cc:f1:48:f1:e1:4a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Oct 26 17:00:21 2025 GMT
Not After : Oct 27 17:00:21 2025 GMT
Subject: CN=fc35dcca602a81679005ff146a8ab68ff7589e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:01:46:24:20:95:d3:3b:a5:e0:c6:74:d1:
67:a0:fb:64:f7:83:c4:5c:19:ad:c7:b8:46:bd:69:
1f:1d:f7:06:b9:5b:8d:04:fc:f3:62:a8:82:c3:5a:
e8:b9:be:17:60:ec:07:bc:08:ae:fb:d2:56:79:4c:
9e:d9:c3:00:d0:68:39:8a:8d:a9:37:33:61:b4:ea:
f6:00:e9:84:2c:1c:08:a1:d0:02:43:fa:86:d8:8c:
2e:35:7f:e0:72:d2:e7:0c:2c:a6:02:7d:ef:bb:c5:
d6:3b:50:3c:07:6e:50:14:b9:f1:7d:10:74:af:5c:
07:73:54:ae:0e:bf:b5:db:d6:ff:c4:2d:a2:99:2a:
fb:79:64:58:08:f4:bc:0c:95:7f:48:ac:f5:56:21:
e3:12:d1:a1:d0:f1:75:4d:21:c7:bc:45:ac:66:b7:
69:d5:37:2c:9a:f8:e4:9c:09:01:45:e1:d6:59:85:
41:59:c2:7e:48:47:ec:f1:7b:f6:b9:6b:ec:39:60:
f2:9e:2b:15:16:74:85:f9:82:02:cb:f5:3a:bc:de:
ea:fb:28:61:ce:05:85:90:02:4b:4e:ce:4f:34:97:
5f:fc:38:23:05:4a:a6:83:08:59:63:85:eb:ef:67:
2d:29:35:83:a0:4c:20:9e:d1:b7:8d:22:55:2b:46:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:DC:CA:60:2A:81:67:90:05:FF:14:6A:8A:B6:8F:F7:58:9E:4C
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4e:6a:db:1b:27:ef:18:7b:87:db:b7:c5:d5:3c:99:02:d0:
00:bb:e9:aa:e2:ee:96:28:df:49:52:a5:f4:0a:2a:be:23:3d:
57:48:47:5c:d3:5d:cc:8a:40:f2:4d:b7:af:48:ce:16:51:4d:
5c:05:ee:e1:43:a4:f7:be:14:b5:26:3b:ec:9e:cd:43:e4:f8:
c4:04:17:78:33:a1:19:dd:03:fe:e6:23:6a:25:b3:f2:8f:6c:
ee:b1:6c:7d:20:24:b5:fe:93:3e:7c:67:86:2e:22:e8:29:a6:
b3:e0:f9:e1:d6:55:09:1a:c7:2d:a5:32:6c:5a:e4:a2:f2:49:
d1:1a:66:64:c9:bc:9a:50:8b:35:c2:21:e3:bc:8e:2c:b1:00:
56:fd:07:fd:fc:97:d7:0a:8e:8b:d6:20:5e:46:91:dc:b9:41:
3a:a9:5c:2d:2c:22:d9:6d:d8:1e:1b:46:4e:af:6b:20:86:4d:
a9:15:c6:18:f6:77:a7:c1:3d:f1:f3:a5:a3:27:12:b3:40:1f:
21:ba:48:a5:c5:44:c9:e9:f7:15:f9:2a:b4:7e:37:9f:43:35:
4c:a1:30:e4:7e:d3:04:55:ae:41:fe:ac:e0:52:25:f5:57:35:
de:f7:ad:06:f9:e6:5a:fa:c1:1b:c8:5a:1d:88:83:62:27:02:
8c:7a:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:25:04 2025 by rpki-client