Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: SAcAKztp0ion2bf3uJBoUH7HE2//57eqhQqZVNvia1M=
Subject key identifier: 6B:82:AC:F3:18:63:E5:76:F2:F7:43:8F:36:62:27:62:5E:33:81:34
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019A1EAD9DD21441A93B07CF6E1EDF8C198D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 16F1
Signing time: Sun 26 Oct 2025 04:01:25 +0000
Manifest this update: Sun 26 Oct 2025 04:01:25 +0000
Manifest next update: Mon 27 Oct 2025 04:01:25 +0000
Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=)
2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: tO3kRHUAmGSeHvL3MKG2CP7bOL0iqWE8YVGjc4Rhxg4=)
3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:9d:d2:14:41:a9:3b:07:cf:6e:1e:df:8c:19:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Oct 26 04:01:25 2025 GMT
Not After : Oct 27 04:01:25 2025 GMT
Subject: CN=6b82acf31863e576f2f7438f366227625e338134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:de:09:ca:e7:d4:d4:40:80:16:5d:9e:a9:
37:c1:11:da:e6:05:36:1c:fd:ad:4a:44:48:8c:3d:
48:8b:44:70:2f:83:c2:5c:3c:1c:33:f9:4e:2d:a3:
dc:8b:7c:51:c5:52:7d:29:11:c6:0c:90:32:bc:83:
b4:4c:d7:c8:88:69:ed:ea:39:12:84:66:7e:dc:2c:
35:20:91:bf:5b:09:b1:71:30:3c:81:15:19:83:47:
63:d5:52:b8:e9:2d:ac:d7:f2:ff:9e:6d:0a:fe:1c:
73:60:99:7c:41:5a:d5:fa:55:9e:e8:52:84:2c:10:
7c:9b:78:9c:32:80:d5:e8:dd:59:04:ba:c6:b7:d0:
0d:16:b6:3c:2a:fa:b1:61:32:ee:94:2b:00:88:96:
3a:98:c3:3e:be:c5:02:dd:f2:06:3c:5b:c1:0a:c2:
c0:e5:eb:d0:a5:06:af:d8:a7:fa:7e:9c:a6:a3:04:
30:b3:1d:d0:95:d3:05:9d:d4:31:59:2a:7a:a8:71:
81:62:82:36:a2:ea:2d:f2:e6:a6:d1:c4:3b:9b:cd:
55:f8:63:aa:95:a4:73:cd:82:ce:f1:ca:5b:52:af:
71:df:ef:85:60:fd:8e:d5:85:a0:0d:99:bc:1a:93:
ab:e6:82:8a:83:a7:58:d6:94:90:e5:59:72:3e:c6:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:82:AC:F3:18:63:E5:76:F2:F7:43:8F:36:62:27:62:5E:33:81:34
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:59:37:e8:4a:68:e9:41:ce:48:d4:38:5a:45:6c:5b:cb:96:
67:63:ed:96:9e:51:cd:89:94:5a:3a:02:84:46:91:b5:34:43:
31:74:32:e4:21:63:28:2b:38:19:03:8e:be:ef:e4:f1:9f:06:
fe:83:be:9c:1b:5e:15:85:b1:fa:da:3c:3c:d3:4f:c5:70:d6:
3d:bf:42:9b:f8:2a:e0:89:ac:fc:f8:14:8c:07:f1:61:d9:9d:
c6:30:58:fb:8f:89:01:84:bc:d5:d3:f7:32:7f:06:6d:9c:4d:
48:e9:65:51:e9:4f:b5:06:ed:16:08:b5:6a:d0:74:cd:0c:70:
df:dc:a1:f4:4e:37:80:de:fb:c7:13:ac:09:82:dc:2c:33:0f:
99:aa:e9:68:64:36:49:ff:fd:b1:e1:8e:96:56:0a:0e:7e:c0:
1c:1a:34:fe:67:d6:f3:09:12:ec:1e:ef:69:11:c2:10:0e:14:
5b:4f:47:c1:62:f5:88:ed:1c:9f:0d:e3:21:6a:49:d2:fe:eb:
9c:70:9c:b4:74:17:37:36:ec:d4:f3:af:05:4a:bf:b1:06:da:
b9:f2:5e:a8:d8:d0:d3:b6:c2:51:13:eb:ce:b7:61:12:15:51:
87:a7:d1:65:ef:a6:6a:f5:a2:38:40:d3:b3:e8:17:4f:71:8f:
2f:37:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:17:33 2025 by rpki-client