Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json)
Hash identifier: yJFNn1+nQYuhm8QwsprbrW/mhNNBfaLRQ8D3Bi2/QIg=
Subject key identifier: 33:72:53:5F:EC:D6:07:2B:CB:33:BD:AC:30:65:90:E5:0A:0F:C9:FF
Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Certificate serial: 019A0C38CC8422BEB4E716CAE624E497C6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
Manifest number: 0E0F
Signing time: Wed 22 Oct 2025 14:00:40 +0000
Manifest this update: Wed 22 Oct 2025 14:00:40 +0000
Manifest next update: Thu 23 Oct 2025 14:00:40 +0000
Files and hashes: 1: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: giQbE36cSaQGlQBGQMqFZHMPzyrCEniLkE2ra0cbHn4=)
2: 4YqKA_NWl67P1UUsYLLewOce3N4.roa (hash: jzpkFPCa8z2EEBKsdTK/EMaQenQwoVIoEp37mrkYSlo=)
3: IQytQDxkG6z6-hb3Iu6XIv8OQic.roa (hash: Fz8ORoLoUXIyDmykV9akqdIIcR0t067gq2FU4oUFIwY=)
4: OPYEfeaD4UG3_woKyPv1Wj7JrZg.roa (hash: iv8H/ObGNtJDTTAshveiukMxLvPbVXVjWuW+XjG+jWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:cc:84:22:be:b4:e7:16:ca:e6:24:e4:97:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16
Validity
Not Before: Oct 22 14:00:40 2025 GMT
Not After : Oct 23 14:00:40 2025 GMT
Subject: CN=3372535fecd6072bcb33bdac306590e50a0fc9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:99:bf:49:04:7c:9d:a2:fe:47:25:57:b8:
fa:e2:b4:cc:c5:84:31:33:52:d4:8f:7d:fd:81:44:
55:3c:3b:e1:0f:94:73:a1:d9:3f:ec:35:12:ad:b0:
a1:1d:96:b6:23:c6:63:87:4e:ba:fe:87:67:f3:09:
84:ff:65:ac:6e:fa:b1:13:26:f3:63:1e:4c:c0:ba:
7a:40:9a:38:bf:76:ab:4a:8d:17:33:26:26:88:a0:
40:65:00:ec:e4:f2:5a:91:95:43:33:5a:76:5d:b2:
39:f5:2b:fe:d8:cd:17:30:ba:e6:4f:91:13:9a:99:
fa:05:71:8e:83:d4:7f:d8:3d:af:49:9a:62:44:64:
09:dc:d8:d9:74:86:5b:24:ac:af:07:1f:82:3d:70:
3b:e9:e7:47:6b:cf:7c:7f:ec:e6:50:cd:1f:df:1d:
39:6f:b4:ab:c3:f5:44:7e:2c:69:13:a3:b6:2b:ac:
0b:ba:d3:0e:1d:84:b6:41:12:d7:d7:21:d2:76:ff:
b1:51:31:12:4f:8f:71:93:aa:5a:dc:d2:98:2b:74:
3c:1d:6c:e2:f7:4c:bb:33:4c:c7:cb:6a:43:2b:38:
89:56:a7:92:11:68:59:63:69:4d:15:d5:ff:ab:a7:
c5:cb:11:7b:ef:98:99:bf:c4:61:8b:d1:35:47:5f:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:72:53:5F:EC:D6:07:2B:CB:33:BD:AC:30:65:90:E5:0A:0F:C9:FF
X509v3 Authority Key Identifier:
keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:27:4d:16:c2:c3:83:9c:70:b4:2c:df:32:bc:cb:83:28:89:
ee:cb:91:26:72:30:0c:bf:d2:0d:da:23:64:41:2e:0b:fe:21:
04:b7:fc:ef:35:9f:77:7a:09:7b:62:24:89:de:12:b3:45:01:
39:77:7c:32:86:da:f3:f2:e4:82:c0:fb:23:4b:15:10:f7:36:
71:6e:03:d4:95:52:af:a8:fc:59:79:e8:4f:43:6e:4f:17:84:
07:4d:e0:2f:c8:b8:16:23:73:cd:31:be:47:90:45:c3:af:bf:
b3:71:01:52:95:06:f3:7b:b4:d6:e1:ff:89:60:fb:b6:30:b3:
cd:67:d2:4c:c6:e1:98:b6:b5:be:cc:d9:cf:4c:7f:a5:88:87:
14:0b:e3:df:b4:d0:58:b4:7b:b8:52:88:fa:ab:7d:eb:71:e4:
03:7f:01:8d:fd:0b:8f:bb:f3:a2:64:c7:9e:d0:1f:32:cd:7d:
92:95:52:ce:7c:09:96:ca:7e:a7:77:d9:25:f5:59:92:05:94:
5d:8d:fe:fe:55:52:a2:e4:bb:48:2b:f3:0c:c7:c0:09:3c:61:
3d:92:69:7c:9c:bc:b2:0a:4f:47:94:f5:42:cf:cc:d5:83:41:
89:b1:2c:6b:d1:47:7c:a8:fc:1a:73:d0:91:1b:8c:8f:84:3e:
94:bc:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:52:39 2025 by rpki-client