Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: oKJhFPsk6WIZCa6Y0ag77LJuP7T+jZUOeaqqRBEQomw=
Subject key identifier: B7:13:79:1F:2C:50:7C:E2:EA:73:54:52:A4:A0:8A:10:37:73:E0:F4
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 019A1EAD41AB6F017E6302E820DF98EB4883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 16FC
Signing time: Sun 26 Oct 2025 04:01:02 +0000
Manifest this update: Sun 26 Oct 2025 04:01:02 +0000
Manifest next update: Mon 27 Oct 2025 04:01:02 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: tkNmwp7+36voMzaR9dtXUtclUM+6+034QfS2qmIbUuc=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:41:ab:6f:01:7e:63:02:e8:20:df:98:eb:48:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Oct 26 04:01:02 2025 GMT
Not After : Oct 27 04:01:02 2025 GMT
Subject: CN=b713791f2c507ce2ea735452a4a08a103773e0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:b8:1e:10:60:9b:88:cb:1d:04:8b:c5:c2:
93:78:e6:79:67:43:d5:b9:77:98:e6:06:59:0c:92:
79:bb:f3:5f:bd:16:0b:44:99:03:e0:57:77:2c:fe:
0b:79:c9:83:a7:71:3d:87:63:45:8a:35:c9:23:24:
35:c7:e4:f5:72:12:3c:f9:12:31:fe:47:68:7b:27:
cb:82:25:cb:79:c1:1c:4e:12:79:c7:08:01:9d:c0:
9d:b4:95:bf:0e:a6:49:53:28:8e:ab:0c:f0:e5:12:
22:d6:d4:bb:8e:eb:8e:b0:18:23:fd:d1:6d:45:6f:
9d:f4:f8:6c:5c:5d:a6:c0:c3:d4:7e:4e:18:4b:b8:
a3:89:82:0f:d0:46:bf:62:95:1a:37:21:12:ec:86:
ae:79:62:4d:2b:f4:65:b4:72:0d:93:58:4e:ac:7c:
e4:f1:fa:ef:b9:33:4c:4b:f0:03:fb:fa:d6:63:c0:
5b:cc:dd:51:46:c8:4f:05:7e:84:1d:c0:a6:80:ae:
ef:2f:42:f1:f8:07:56:f6:30:8d:16:e3:4d:d5:4e:
e5:32:1f:e6:22:11:8f:98:1b:7e:1b:ed:4f:75:23:
42:48:ca:5b:65:c0:d0:9d:df:61:82:b4:7a:9e:d1:
a5:d4:60:b0:ad:c1:f8:16:6b:1e:a7:6f:67:28:3f:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:13:79:1F:2C:50:7C:E2:EA:73:54:52:A4:A0:8A:10:37:73:E0:F4
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:36:02:58:8f:b1:94:8b:69:e0:90:bc:9e:ce:9d:06:d9:
7e:1b:31:1b:68:9d:93:9e:99:17:91:6e:07:48:7e:d1:92:3c:
c0:50:fa:5e:7c:99:74:27:eb:51:67:be:00:5a:18:16:be:a8:
18:f7:a0:76:db:41:b3:2b:bb:b4:01:ce:01:66:e5:ce:6c:71:
b9:ff:7a:fc:1c:28:bd:fc:12:34:b9:ad:d3:d1:23:5d:91:73:
4b:c7:f0:9b:5a:6d:a2:f4:d5:97:79:ef:ac:a1:f5:dc:c9:55:
ba:ed:fc:2f:44:03:ad:1b:90:84:14:fd:06:86:26:ae:3d:6d:
6a:dc:54:44:5b:f4:0c:9c:58:4e:00:dd:ac:70:40:c0:a9:19:
41:61:5b:64:47:35:a5:0f:52:b8:82:cd:9f:c9:c4:5a:81:86:
ae:8c:38:10:53:83:30:1d:53:18:6c:51:61:2b:cc:5c:d9:f1:
d9:ff:84:01:f1:95:b3:be:2d:3f:74:f9:9a:06:6b:38:47:c6:
54:3a:0c:b4:d7:74:7e:a3:fa:b7:80:4f:83:4f:bd:45:e3:d7:
fa:c1:0e:60:2b:b1:07:e9:8f:48:6e:50:21:b7:48:e6:e6:13:
86:55:ff:66:c6:d5:4b:6a:3c:25:ce:48:01:94:5a:75:0c:67:
dc:9d:24:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:02:59 2025 by rpki-client