Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: HKgVo/qXo9WxiJeJNDGI5HLoImzqZP2Ttwaadf9pd/c=
Subject key identifier: AF:02:42:B2:01:30:41:08:59:98:33:AD:E9:97:29:DF:3E:1F:E3:A5
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019A2DB2107A21C3E5C63C9BF3383BAD1D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 0859
Signing time: Wed 29 Oct 2025 02:00:35 +0000
Manifest this update: Wed 29 Oct 2025 02:00:35 +0000
Manifest next update: Thu 30 Oct 2025 02:00:35 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: 4To0jaVaA7Sq1IKFwFIBUkr/oe1Er9f/AbQLiJMCZhk=)
3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b2:10:7a:21:c3:e5:c6:3c:9b:f3:38:3b:ad:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Oct 29 02:00:35 2025 GMT
Not After : Oct 30 02:00:35 2025 GMT
Subject: CN=af0242b201304108599833ade99729df3e1fe3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:03:08:fe:5b:fa:1b:56:2f:4a:bd:74:5b:
72:b5:89:6c:ea:01:74:ef:17:f8:7c:f3:e5:ea:c8:
4f:f5:d7:55:44:e5:9a:c4:ea:82:13:f9:f8:88:96:
23:5c:32:38:96:a5:f0:40:35:1e:c4:86:94:9d:e4:
3b:41:68:1a:33:e4:9a:c2:5d:2d:dc:26:52:4a:95:
23:7e:a0:44:5b:a1:98:1f:28:53:80:65:ed:08:85:
3e:e4:8a:f7:45:06:19:31:01:33:76:14:2a:d2:6a:
a7:1b:63:30:bf:a3:81:8c:71:56:d8:c6:fe:c3:c7:
d5:32:54:8f:89:cb:3d:b0:be:be:17:f0:31:84:f9:
b7:84:68:a9:2b:c3:ef:65:0b:f1:f5:cb:8a:f0:e5:
08:ac:0f:70:9f:99:bf:2c:57:02:d6:bf:3f:5e:36:
c4:28:d5:ad:4a:6a:2b:47:e8:11:23:4c:8e:50:98:
9c:be:74:5d:32:87:7b:1f:23:a0:12:c2:9a:43:0c:
98:ff:02:00:59:42:27:7b:28:b3:0f:0e:a6:46:44:
47:15:f0:75:68:9a:3a:c6:1d:c9:e8:7c:b8:90:a7:
a1:67:c9:5f:90:7e:6c:d5:5d:7c:f7:0f:b0:a8:8f:
1e:76:a4:29:d5:45:21:69:5c:2c:03:62:d8:ac:a0:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:42:B2:01:30:41:08:59:98:33:AD:E9:97:29:DF:3E:1F:E3:A5
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:e7:8c:8d:ed:5b:e0:4a:ce:b4:14:91:4a:c3:b1:38:42:
04:bb:98:34:19:59:32:e6:ce:9b:8b:70:01:77:9a:58:f1:25:
8b:f7:a8:d1:01:82:f4:12:f8:f3:c6:f3:6e:0b:94:c7:ee:72:
56:ef:c8:2b:7f:3b:9c:a5:69:a2:3a:cc:e8:10:0e:cd:22:95:
27:f3:1d:4f:dc:b4:98:9d:5d:7d:59:28:e0:fa:de:b5:17:8f:
1e:5b:8b:91:f9:c2:23:81:82:68:cd:7a:dc:f9:7b:3a:24:e1:
d5:70:43:29:76:65:2b:3d:b4:da:c9:cf:b6:f7:29:e1:d5:40:
08:3e:4f:ea:f8:8a:0d:ee:55:66:40:3f:a0:77:be:8b:cd:32:
cd:a9:45:98:05:70:dc:1e:2c:d0:02:98:3a:cd:88:3b:5c:fb:
20:67:68:37:f5:3e:02:fd:9a:5f:a4:5f:44:20:5a:89:4e:6e:
9a:fb:94:f6:5b:0e:d6:3c:32:da:a2:0d:5c:5e:2b:07:9a:2f:
f7:b4:9b:92:a1:29:a8:84:56:3e:59:81:4e:bf:01:5e:06:4e:
6a:d2:d6:1e:61:9d:e0:79:ab:5d:c2:a0:0c:48:8d:14:fa:94:
74:80:92:aa:10:8d:09:52:40:dd:d2:13:43:96:24:9e:65:d4:
77:2d:12:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 10:41:38 2025 by rpki-client