Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: 3hAIy+Ha1MPsudE+rst5fBnTjsz+sWE/rhCO0vbV9mw=
Subject key identifier: 31:1E:0A:19:ED:04:ED:B5:2C:D8:36:59:A9:9D:6D:35:C6:1D:1A:C1
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019A25F88D3A8DFABDDA79A603C39ED86B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 115D
Signing time: Mon 27 Oct 2025 14:00:37 +0000
Manifest this update: Mon 27 Oct 2025 14:00:37 +0000
Manifest next update: Tue 28 Oct 2025 14:00:37 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: BAhCx7VBWh3q7Vmf/SbQEyzNw3yE1WW0W0oY3P/gyYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:8d:3a:8d:fa:bd:da:79:a6:03:c3:9e:d8:6b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Oct 27 14:00:37 2025 GMT
Not After : Oct 28 14:00:37 2025 GMT
Subject: CN=311e0a19ed04edb52cd83659a99d6d35c61d1ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:bc:41:97:a0:2e:e0:0f:8e:8e:4b:97:12:
e0:f8:9f:fc:81:73:34:ea:c8:e2:eb:5f:18:e1:6b:
c0:5e:46:e6:59:94:fc:bf:8d:04:93:59:cf:17:bc:
ca:fe:91:41:93:d9:5f:41:7a:c3:e1:7b:ad:b2:93:
30:bf:37:b6:7c:13:af:77:de:2b:a8:c4:80:20:12:
5f:f8:3e:9b:e1:22:7b:58:2f:89:2b:d1:f5:85:3b:
9c:56:76:1a:3a:c8:64:5a:29:e2:e6:8f:02:dc:0c:
f9:c3:48:6b:0f:be:ff:c9:71:3e:1a:f7:36:57:91:
31:a3:54:22:79:1b:72:2b:35:41:b6:b4:2d:f6:e7:
89:10:ed:2f:c7:62:21:65:89:18:1e:60:1b:5e:c5:
0a:81:0d:0f:3e:ba:f8:e9:eb:5c:94:eb:c4:86:16:
12:8f:a5:12:55:de:54:3c:bc:7e:71:c2:7c:ac:d0:
2f:05:de:c7:b5:9d:74:32:d5:d5:05:af:b9:85:8e:
12:bd:bf:7d:c6:84:de:74:c0:f1:27:07:b9:17:b7:
45:86:5f:17:f7:57:e8:6e:0e:50:53:a9:f2:de:f3:
5f:8a:a4:ff:66:0e:1e:1a:9e:f3:a9:46:6d:6e:83:
e2:13:c7:29:00:ce:c2:78:b2:71:bc:62:3d:6c:08:
e3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1E:0A:19:ED:04:ED:B5:2C:D8:36:59:A9:9D:6D:35:C6:1D:1A:C1
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0d:db:75:09:5d:eb:b5:f4:4e:db:97:af:42:93:bb:8f:c0:
1e:88:b8:b5:48:b9:fb:52:19:f7:6c:2e:30:8a:7a:8f:fd:86:
6e:f1:8d:67:f6:db:38:dd:2f:57:82:cd:a4:3f:80:c7:52:64:
64:72:b7:15:f8:a3:ce:0f:33:d8:0a:87:71:05:3d:6b:c1:c3:
c4:c1:c7:9c:9e:8b:dc:d1:97:53:a9:f2:90:6c:3f:ec:c2:60:
a5:45:09:46:df:92:ce:7f:d5:bf:f5:bc:28:1d:f0:8c:f6:8a:
d6:45:d0:8e:2f:5a:3b:81:b2:66:f1:9a:2b:c9:76:f3:14:eb:
5d:6c:e3:b1:e1:df:03:8b:ff:15:32:53:d8:60:0c:81:1f:e0:
dc:8d:67:59:66:e3:03:3c:f0:91:8d:36:1d:aa:2e:cd:2f:f1:
41:fc:01:e8:9f:c6:14:35:c7:d3:80:46:8b:52:4e:0f:59:1f:
7b:93:5a:02:dd:be:6a:4a:76:a4:30:a4:03:77:f4:1d:90:ac:
1b:92:8b:37:17:0e:78:2d:11:88:cc:71:f4:99:c2:23:41:bc:
1d:58:4b:c2:23:50:ff:aa:7b:20:5d:07:53:dd:1b:59:44:6a:
13:a3:a8:5a:e6:e0:af:9e:e7:63:a8:99:93:2e:2b:19:46:3d:
a3:22:50:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:33:40 2025 by rpki-client