Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
File: y5-GErfxR1ABa4SMQvYN82rYMtk.mft (raw, json)
Hash identifier: MPmcG5PxGra/ris13WHxrNb/yeuZx/q9poVfxo/rzt4=
Subject key identifier: 18:AD:0E:49:3B:79:26:5E:13:D3:3E:B3:0B:B1:62:51:C7:14:95:4E
Authority key identifier: CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
Certificate issuer: /CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Certificate serial: 019A1317E3002E719F101341771690F5DD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
Manifest number: 16EE
Signing time: Thu 23 Oct 2025 22:02:03 +0000
Manifest this update: Thu 23 Oct 2025 22:02:03 +0000
Manifest next update: Fri 24 Oct 2025 22:02:03 +0000
Files and hashes: 1: 35Hkh6WGB56LhQUZWJy4fWu8adc.roa (hash: N+zjw78vBIKP/bKJa3b5qGQ6N/RlG9tWFNOT+GZrtRA=)
2: y5-GErfxR1ABa4SMQvYN82rYMtk.crl (hash: sl9y1cXyHLb6KesS1/DhJ4o9G/zLvf6ZUMFc9t+mCHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:17:e3:00:2e:71:9f:10:13:41:77:16:90:f5:dd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Validity
Not Before: Oct 23 22:02:03 2025 GMT
Not After : Oct 24 22:02:03 2025 GMT
Subject: CN=18ad0e493b79265e13d33eb30bb16251c714954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:73:f0:d9:d2:49:e6:5b:5a:96:9d:2c:12:
a5:cd:e0:06:a1:11:7a:77:5b:97:54:d7:f2:8e:9e:
80:2d:23:15:69:f0:2d:48:f9:83:81:72:52:9c:64:
07:86:0f:3f:55:e7:11:6c:d4:e6:83:ec:ab:ae:1c:
e1:f3:ab:cd:06:39:57:a3:75:67:a5:b3:c8:cd:24:
f7:18:0e:24:c5:68:e0:d8:80:46:7f:43:35:87:d5:
bf:bc:2c:63:ce:b3:58:1e:9c:68:61:2a:79:27:9e:
ca:45:c1:72:89:ba:36:73:0e:fb:ea:13:86:0b:5d:
b7:36:9f:b0:3a:06:c2:f1:42:48:29:6e:2b:fb:b4:
a8:0a:10:66:24:a7:58:48:21:1a:90:9c:e7:a3:7e:
c4:e0:03:8a:ad:ca:72:65:fb:9a:c5:37:ca:96:b6:
c4:09:49:46:2f:a3:4a:12:f6:c5:6b:fc:b8:39:89:
21:28:99:9e:36:9d:c5:c7:17:7a:90:27:ab:b4:42:
50:1f:fb:a9:ba:f6:6d:8c:b1:57:ac:3d:ab:bb:00:
78:07:65:47:3d:32:94:5f:50:73:68:b0:be:25:23:
65:48:64:47:e4:8e:0a:c1:68:39:e7:eb:9a:70:47:
1f:cf:da:8e:ac:30:90:36:c7:63:24:df:a3:80:a1:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:0E:49:3B:79:26:5E:13:D3:3E:B3:0B:B1:62:51:C7:14:95:4E
X509v3 Authority Key Identifier:
keyid:CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d4:5f:bd:94:3b:5f:d1:f0:03:79:e8:ef:d5:dc:fe:c9:17:
70:3e:85:d2:85:c2:62:82:d1:2d:d9:8a:09:0b:35:b2:6b:33:
bc:46:6e:81:07:6c:35:4e:f5:25:41:a0:de:04:30:fb:e5:78:
54:d7:fe:19:13:3a:82:3e:aa:3d:bb:fe:77:8a:6e:4b:58:0e:
f0:0d:4d:49:5d:55:65:6f:5e:97:c6:21:41:b9:a5:9c:9d:c6:
95:27:56:ee:3d:d1:fb:52:49:a1:45:db:e8:0b:18:d2:26:b6:
27:d9:38:fd:4e:53:36:33:82:e3:ae:8f:d3:29:b7:b3:cf:6d:
d9:26:72:1a:78:d7:e6:0d:9f:2d:cd:49:ff:6c:71:5e:9e:ac:
91:13:65:1d:1b:44:c1:2c:ff:b6:ac:fd:5a:03:0f:e1:4a:f5:
fa:57:0a:9c:cf:f7:48:ee:95:ed:36:59:54:8f:e1:db:3d:36:
60:48:18:62:f4:73:7c:47:d6:e9:7e:32:7d:2f:0e:5e:a2:fa:
d5:7b:9b:75:c5:df:24:bf:ec:ca:04:b7:cd:82:7e:a5:84:5f:
9d:a9:1c:1b:f1:13:e8:aa:68:fc:f7:2c:ee:d5:50:db:d9:35:
3e:a1:7f:36:f4:0c:8c:fd:0b:d4:b2:76:9a:7f:76:17:6a:67:
e3:27:bf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 02:37:18 2025 by rpki-client