Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: SmiT5PW/VRPOBm/HLJubksP/V0U1eL/N5s5u2ju5V4A=
Subject key identifier: 99:E5:45:09:45:1B:07:21:C5:D2:AC:AA:AD:16:37:4E:16:F7:E4:EF
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 019A17617DCB00532C1DDC6D3209169A4F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 16F0
Signing time: Fri 24 Oct 2025 18:00:56 +0000
Manifest this update: Fri 24 Oct 2025 18:00:56 +0000
Manifest next update: Sat 25 Oct 2025 18:00:56 +0000
Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: GFojY1HVeqIF3am69ytn8k5WWpcrKH+hPbX21NbZw0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:61:7d:cb:00:53:2c:1d:dc:6d:32:09:16:9a:4f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Oct 24 18:00:56 2025 GMT
Not After : Oct 25 18:00:56 2025 GMT
Subject: CN=99e54509451b0721c5d2acaaad16374e16f7e4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d0:9f:81:5d:19:64:94:27:51:3e:bb:12:21:
aa:f4:04:ea:9f:eb:d7:a9:ad:28:66:6b:65:82:9d:
ae:34:bb:c1:c2:63:3e:3e:45:b8:28:fb:76:5b:82:
fb:4c:75:8f:86:b8:95:34:3e:44:04:cf:c5:90:a3:
81:8e:8a:27:b4:01:31:0c:26:eb:3b:f6:d9:a6:40:
16:03:93:a2:6f:61:7b:a4:68:c6:06:68:0e:ac:0c:
a9:b5:05:39:bb:99:0e:a5:7b:e3:6a:3c:77:c7:4c:
06:16:a2:81:69:13:b3:59:08:da:d2:79:f7:6c:fc:
73:e3:38:ee:e5:4c:4b:e5:af:1f:05:f7:5a:d3:d3:
89:e2:39:15:93:02:09:94:1c:42:94:19:0b:85:f8:
66:0c:ac:57:ac:3e:fb:54:32:54:06:99:9b:06:2e:
ec:28:c7:97:88:63:93:14:33:21:89:91:89:76:d7:
16:78:f5:df:8d:de:e6:fc:4a:d7:d2:f1:ab:dd:66:
5e:ef:e2:74:82:71:db:ac:24:ff:76:4a:d3:e0:90:
f8:e3:47:e6:0f:8e:5a:29:68:ee:e9:e2:40:ea:67:
eb:6a:ef:d7:d2:75:18:7f:e4:06:01:42:d4:75:a9:
31:62:57:d1:06:0e:c9:30:cf:06:a2:0e:e9:c6:e5:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E5:45:09:45:1B:07:21:C5:D2:AC:AA:AD:16:37:4E:16:F7:E4:EF
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:34:8b:8e:f0:5a:3f:14:3d:db:79:4e:f7:a7:10:84:a9:75:
27:42:90:b8:64:83:28:78:a8:a3:76:f3:49:a5:7d:3e:08:e8:
65:c0:1a:8c:ed:7e:ff:6a:ac:dc:58:3a:f5:63:c7:29:14:69:
30:c7:6c:93:1e:72:3e:47:14:79:64:20:9e:51:5b:59:57:5f:
b1:24:78:a6:cc:9c:38:6f:87:20:ac:b1:60:fc:fb:46:d4:5c:
34:1c:b6:8e:75:91:74:01:f8:27:01:e7:8e:39:e6:fd:f4:47:
fd:a8:a3:e6:74:e5:46:90:e6:50:c0:b1:45:16:40:2c:6f:4a:
b6:af:e1:02:5d:ac:a7:50:8b:17:35:88:28:64:a9:de:64:9d:
47:0b:ff:9a:86:60:f0:41:62:f6:b9:33:57:28:e4:45:26:3c:
dc:cf:aa:b5:ca:fa:7a:4a:bd:58:c5:67:d7:ba:3d:1e:6a:cf:
7f:da:99:76:29:b0:18:19:1e:d3:4c:2d:02:0a:b5:6b:fb:04:
ef:a4:87:e1:88:0b:32:9a:65:0d:8c:a5:85:2b:88:82:21:e0:
17:87:85:1b:fc:13:72:e5:fe:32:a6:48:c6:0d:2f:d8:94:ca:
32:71:5d:5f:92:2a:2d:3f:2a:14:30:bc:ec:df:d3:ce:15:ea:
b0:51:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:33:10 2025 by rpki-client