Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: kasBO0HkDQ4VSxbzoA+QGtTQ5eg3OQMN70RQx4FTjUU=
Subject key identifier: EA:7C:ED:4E:21:A4:E0:97:22:47:39:5D:D8:2B:F3:6C:BC:29:DD:31
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019A22896AE8FFCE735A782FC28A615DF055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 22:00:22 +0000
Manifest this update: Sun 26 Oct 2025 22:00:22 +0000
Manifest next update: Mon 27 Oct 2025 22:00:22 +0000
Files and hashes: 1: OiIBQ74SHEVkT-8PoCX8Cy-Yivo.roa (hash: W/4g1y46KUHpbD2tJe93lGZ8b+4RqJt+o9NgZvpLShw=)
2: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (hash: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: XvS2J8mnyzAcIEG1Y1XMCYOyy8u8A3OOrRs8TjiUK7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:6a:e8:ff:ce:73:5a:78:2f:c2:8a:61:5d:f0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Oct 26 22:00:22 2025 GMT
Not After : Oct 27 22:00:22 2025 GMT
Subject: CN=ea7ced4e21a4e0972247395dd82bf36cbc29dd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:87:e1:54:37:2a:8d:87:62:1e:d0:33:7b:
bf:5c:ce:b6:b2:4f:3b:97:c4:19:d5:65:4c:0a:2a:
88:27:51:cd:f8:13:75:4d:0d:a0:d8:fd:f8:4c:ec:
51:dd:98:90:2b:2b:ce:77:cf:01:a0:fe:19:54:f4:
d4:35:23:96:71:db:e1:c9:d5:19:19:df:c4:c1:4e:
f6:1a:1b:ed:dd:5c:2a:06:f8:e3:b2:4e:54:7c:4c:
54:fd:c9:75:81:75:26:0b:8e:c4:34:b2:2e:f6:bb:
ba:ca:84:0f:aa:69:a3:57:d2:0a:d7:64:a4:33:68:
1e:af:50:7b:48:9d:bc:60:0e:81:ef:ed:3c:95:57:
4d:47:a2:ff:b4:35:ec:da:f0:bd:f0:5e:8d:33:4b:
e3:a7:ff:3c:75:24:cb:21:85:4f:26:aa:76:1f:5d:
97:2b:45:7c:96:f9:54:a5:4f:51:66:62:13:b4:25:
82:80:5c:7a:1c:12:2f:97:f0:d9:17:85:97:29:89:
39:8d:eb:ae:5e:23:d0:48:10:96:82:b3:54:bc:28:
ac:ed:74:2c:b5:c2:57:19:2b:ea:90:03:8e:ed:78:
a2:0a:b1:1d:bc:78:8a:c1:03:2e:93:3f:b3:a7:75:
b8:b6:e7:4a:c4:73:49:83:08:ee:56:93:6e:c1:17:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:ED:4E:21:A4:E0:97:22:47:39:5D:D8:2B:F3:6C:BC:29:DD:31
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1c:c2:74:b4:63:0c:bc:68:75:f7:0d:96:a8:b0:f3:d0:99:
14:09:7a:2e:7e:63:7b:d8:10:c8:6d:df:b9:bc:38:43:3b:9a:
d5:43:c1:dc:84:9f:5e:05:76:bc:6b:75:01:5a:d5:56:0d:b9:
88:71:8f:b2:ae:8a:4a:c2:74:c7:fa:39:8e:b6:48:7a:ce:ec:
05:5c:28:65:d1:c7:f8:f3:f9:67:bc:41:f2:8f:3d:00:5d:02:
4c:b4:5f:4a:78:a0:fb:e3:c9:d0:7b:b4:9d:25:17:a9:e9:e9:
b8:e9:d4:13:a6:39:5f:4c:83:e1:a4:7f:b7:93:bf:b6:b5:ee:
78:cb:80:99:04:37:41:5e:39:19:2d:d0:15:b8:ef:7d:18:c4:
64:08:c0:30:50:0c:87:78:66:3b:34:5e:62:0f:e2:77:16:58:
44:85:d1:32:e0:c0:80:72:7d:39:43:1a:1d:bd:b5:87:21:52:
03:a8:a5:b7:a9:95:ad:3a:61:03:4b:79:91:2f:12:4a:c8:ea:
7f:f7:c7:29:26:ab:81:14:2d:09:80:01:a1:67:cc:8c:18:c8:
a2:74:2d:bb:0b:aa:63:36:ee:51:a7:91:d4:d2:f0:53:34:3d:
54:38:20:83:b5:ad:78:ab:90:e0:43:49:94:e0:26:a7:e9:56:
b1:24:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:22 2025 by rpki-client