Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: o/UDNc1NPHVdnAXNe7SdUQsel2aEonmeoAb49u4KYmI=
Subject key identifier: 7E:33:57:F1:27:90:83:43:1F:AE:F1:BA:5B:D9:DA:FD:F6:C5:93:AE
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 019A2409BFE2CD187E84F7D02488F9E7E78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 05:00:09 +0000
Manifest this update: Mon 27 Oct 2025 05:00:09 +0000
Manifest next update: Tue 28 Oct 2025 05:00:09 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: NfTraVlidKocq9K4E9qK/RmZDmIP5UtbpcAfGsDv07Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:bf:e2:cd:18:7e:84:f7:d0:24:88:f9:e7:e7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Oct 27 05:00:09 2025 GMT
Not After : Oct 28 05:00:09 2025 GMT
Subject: CN=7e3357f1279083431faef1ba5bd9dafdf6c593ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:10:bc:72:bd:a4:2e:fe:e5:91:56:fa:b8:
ab:de:a3:87:18:2c:68:e7:40:2f:1f:e6:e7:7a:b8:
23:b6:71:5c:09:4f:e9:04:49:de:b8:5a:95:a8:2c:
7d:6c:5c:ab:03:b4:19:0b:e6:6c:0f:7a:0c:86:34:
88:b6:55:83:4e:00:73:2b:d6:76:f4:42:b6:96:71:
ec:be:36:d3:db:6f:2f:b3:08:15:6a:6a:7d:bb:48:
08:5c:b3:12:e8:56:dd:83:cd:fb:7e:12:b5:f6:35:
73:b9:61:91:50:02:7e:52:88:aa:6c:5e:8b:7a:32:
3a:90:7f:76:d4:da:65:70:eb:5d:a4:1a:67:3f:f0:
5e:b0:cf:b4:18:3a:42:a3:92:60:58:ae:1e:b0:49:
77:44:5a:e6:6d:ae:72:53:c6:e0:b3:82:b3:55:4a:
b4:43:d2:83:06:80:a1:1f:3c:6b:1f:92:7c:0b:56:
29:bc:ef:4b:db:e1:dc:d9:81:52:5e:7b:c2:a1:82:
9f:8c:9c:25:53:49:eb:87:1d:3f:d9:24:8d:d2:ac:
57:b5:00:ef:75:7e:63:37:a3:86:95:f0:42:b4:d9:
a8:82:1a:54:42:53:7a:15:d9:f1:e4:ed:db:30:56:
88:65:6d:36:76:be:7f:60:99:a6:cb:fa:ad:7f:57:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:57:F1:27:90:83:43:1F:AE:F1:BA:5B:D9:DA:FD:F6:C5:93:AE
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cb:9a:51:a8:74:2b:88:88:f4:99:a3:c4:25:6f:71:2a:12:
5a:ab:97:1e:65:da:eb:0d:b2:84:18:a2:72:0c:01:32:da:7c:
49:28:c9:43:5f:0e:92:f3:d1:27:6d:38:e6:70:6d:24:b6:c7:
80:bc:38:92:cf:60:c1:81:c2:ec:04:9b:d8:5c:76:77:01:ea:
64:84:32:6d:b7:d7:22:a6:d2:88:c4:67:d6:2a:9b:11:fc:8e:
68:a0:dd:b9:af:86:3f:46:6c:54:da:fa:74:03:1e:12:c6:bd:
d4:16:e3:de:c9:3e:54:9e:6f:c9:14:90:a9:5b:34:51:fe:dd:
25:d5:ee:c1:4b:ce:20:c2:32:75:f7:88:fe:c0:f2:35:b6:33:
58:5d:18:d6:6c:da:e5:96:46:59:8d:03:8e:38:e0:0e:9f:14:
d7:60:8a:a5:4e:70:d6:b0:83:f6:c8:f9:a1:b2:6f:11:ee:55:
9e:74:29:3c:f2:88:62:c2:dd:3f:4b:3b:d5:e8:9e:7f:fc:b1:
70:b8:ed:2b:c9:19:9e:ed:c6:3d:e5:1f:77:ff:d6:45:d2:09:
ca:31:04:bb:fe:d6:78:e1:b7:cd:44:98:62:8a:76:d8:03:91:
08:83:9a:af:dd:68:b6:bb:de:37:ff:b0:1e:6d:57:98:86:6b:
7c:80:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:22:57 2025 by rpki-client