Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: AOLIJT6HsboR+4FVPgWy6CPKbZhMGmjtNM/We/+Y4N8=
Subject key identifier: 18:86:FE:51:89:D8:47:0C:BE:AD:41:ED:12:93:39:E8:54:D8:22:22
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 019A2FD6F1107032AA8202B9C1654460AF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 16FD
Signing time: Wed 29 Oct 2025 12:00:06 +0000
Manifest this update: Wed 29 Oct 2025 12:00:06 +0000
Manifest next update: Thu 30 Oct 2025 12:00:06 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: b/s76MEKozJTrvX+6Hj795qV21/JSlpZgW5C5+GOqzc=)
2: Tl33p-h-oYWG4k1AAbZ0b7tAMuc.roa (hash: HuarYU0/JApAedHcUrTI8IFeZjSh+Z57prgHfyI1KYc=)
3: e59o4nflKfkRbUwhU4WwMTxJI_Y.roa (hash: qghzj0Mw1zkJvf6+G2QT/sr1eaEcjZizZylknw1LbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 12:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:d6:f1:10:70:32:aa:82:02:b9:c1:65:44:60:af:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Oct 29 12:00:06 2025 GMT
Not After : Oct 30 12:00:06 2025 GMT
Subject: CN=1886fe5189d8470cbead41ed129339e854d82222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:db:4b:80:5f:10:fe:76:d6:e1:9c:19:29:
66:38:05:32:33:27:7f:ba:c4:cf:12:76:a3:cb:89:
1f:1d:31:50:3c:f2:10:52:c3:1e:d2:c1:07:16:2d:
aa:b8:b0:11:73:ec:ef:cd:ab:10:2c:9a:ce:a0:cf:
89:6f:ca:bb:39:60:09:a8:92:f0:91:14:5e:70:98:
a5:4b:10:0e:56:0e:ea:a3:82:02:bd:c2:56:e0:3d:
09:57:f5:1e:22:48:70:4d:d4:e2:5b:7f:a6:e4:33:
90:cd:aa:49:66:9d:3c:d6:75:2d:06:00:93:60:25:
62:2a:53:f7:65:f1:84:0e:bb:9a:b4:6d:1a:ac:47:
67:e8:12:ef:6d:e9:de:41:5a:e0:f8:54:9f:e4:83:
41:29:2a:33:f2:d4:07:31:43:f0:73:20:66:f1:20:
3a:b5:d3:9d:47:82:ad:4f:e3:c8:e7:cc:18:4a:df:
4e:ad:96:02:3b:df:c8:21:e8:22:5b:b2:b2:2e:65:
3b:fe:96:4f:8b:2a:51:33:45:5d:ad:79:67:06:93:
a6:82:0a:29:b7:be:9c:6b:67:5e:b6:e3:4d:ea:13:
f8:a8:20:57:e8:ab:f6:a8:43:33:8e:b7:c5:53:6c:
a0:30:a7:09:a4:95:15:f3:74:c9:fd:9e:52:c0:64:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:FE:51:89:D8:47:0C:BE:AD:41:ED:12:93:39:E8:54:D8:22:22
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fc:81:dc:2e:c1:5e:21:bd:16:12:27:f8:6d:67:cf:f7:a7:
ff:ca:36:57:85:ac:00:30:bc:91:e6:77:4e:77:a3:89:a7:2a:
29:be:27:eb:a1:17:3b:9a:d4:90:59:1c:43:aa:b7:86:d0:ec:
c4:2c:54:ee:73:2c:67:ef:54:a5:c9:a4:10:8e:57:3d:f8:7b:
b2:3f:37:87:7a:19:20:35:b4:a5:4a:c1:85:19:78:ac:2c:65:
00:a3:b3:57:f0:9d:b1:d2:97:e0:d7:61:25:e0:fe:9d:5e:f3:
e8:b7:a1:05:fa:32:9f:4c:64:1b:d7:d9:3d:46:52:31:a0:30:
f1:95:b6:99:be:34:81:2c:85:c6:a8:2d:8a:f2:d8:66:0b:76:
cb:73:a3:65:3d:ee:27:ed:1e:60:ed:87:2a:e3:84:2a:f2:4f:
8c:84:7a:a2:a3:0c:08:0a:99:16:f4:d9:c2:af:30:37:30:67:
c9:7e:3c:8f:e1:4c:18:a9:b9:ee:5b:39:c5:e8:57:92:ef:9e:
20:f3:fa:f4:fa:1b:56:9a:88:9f:6d:83:ea:c3:c6:eb:a4:c7:
01:92:1f:ff:f7:63:6f:39:b9:e1:4b:36:82:c4:f0:83:44:7d:
aa:d3:79:58:4b:a0:c2:90:1a:06:f0:25:f7:8b:58:11:b5:1f:
2b:20:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:41:58 2025 by rpki-client