Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier: K3SFO98mlIU6KCiA5V4nXyaamSmdhjmvLuYFls4ptAs=
Subject key identifier: E8:B5:71:95:9C:38:24:BE:B2:82:0C:A7:67:85:6B:E5:F4:57:B4:C7
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 0199511C09F5AA564F266337421A601197D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number: 16AF
Signing time: Tue 16 Sep 2025 06:00:16 +0000
Manifest this update: Tue 16 Sep 2025 06:00:16 +0000
Manifest next update: Wed 17 Sep 2025 06:00:16 +0000
Files and hashes: 1: 1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa (hash: 4fwNFjC/KzIgxsaWUD66CE+7p9ui38GyV7XXtJ3qf8o=)
2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: 1iyrFkiCUX+LxKWbEQMxwLo3yOklwLM7/XnkAg7FBc4=)
3: Sza6sQo4SxIMxey9qB4eBTtIEPg.roa (hash: C/1FfNF+TmksPsjo5TVeKV1X6wR0pQ31deypiIvzO+k=)
4: V4pfu9jLQ6oLBdUsOWrdFcq1Yrc.roa (hash: yDY9y35s4pP3mOfRyxPkvU+qk+1wOvcB+DMBcM6XFjA=)
5: W7PWFrX-v5SaBlQz93CvawsAR8Y.roa (hash: YvmisDA3cqiQerchJ4ThrZ/s4MEmdOZ55Z/X5SC6qlM=)
6: hVN1Qld91f5dBJ9SSDlF23fJ2wE.roa (hash: fB256LdP6wo0MmK8V0JJWIWF+X7CQ/bXWoxB33HPuzk=)
7: jXuJH5XlRjh9NbnahdD8Y6zEokQ.roa (hash: uTge3zTxck7gBX+9co6u8laUzjU+YV+PjrgGrj8fBnM=)
8: sNlz3ltNKwFJp9lFAJRiixdiytE.roa (hash: fcd5iGxutFpHfnpxl9mUlT8Mi1NSPiKw7EA6qelRziw=)
9: xWzjOiU4GIbFmqwyeVmah8vO8F0.roa (hash: S4iCzl3PC4M/IRKSKX7IIQOXaSNab8mVow5IXg2rGLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:1c:09:f5:aa:56:4f:26:63:37:42:1a:60:11:97:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Sep 16 06:00:16 2025 GMT
Not After : Sep 17 06:00:16 2025 GMT
Subject: CN=e8b571959c3824beb2820ca767856be5f457b4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:9f:6b:81:e8:95:50:08:4b:1e:df:28:a2:
e7:ad:88:b8:fa:7c:f7:7a:a0:b2:d8:04:4a:c7:04:
25:1a:e6:67:2b:60:eb:2c:72:68:a0:b5:e6:20:aa:
98:96:20:28:4a:90:06:3d:6b:32:f0:58:5d:8a:4d:
50:7c:4f:21:ef:26:ec:fe:b4:0e:b3:2c:31:3c:d3:
aa:9d:2f:7e:f8:63:7a:dd:8f:54:b4:c4:02:ce:5b:
7b:77:b9:fb:47:cb:6d:44:79:ba:bf:bd:3d:eb:34:
0b:89:f8:1e:d7:41:ad:56:b8:5b:60:0c:d9:ce:1f:
08:23:ff:32:1b:60:12:2a:2c:2e:ca:5a:8d:89:40:
7f:41:46:56:ee:e0:5a:9c:97:92:37:1e:6a:12:f5:
b2:64:e8:ad:a7:e2:46:b0:39:2e:75:bc:1e:40:b4:
c0:d9:f4:de:80:fa:06:0f:c1:57:81:92:36:bb:3f:
43:21:2c:28:65:75:a4:a5:c1:3a:a4:a2:d1:dd:9b:
b1:7e:07:2c:ac:15:fc:c6:ef:3b:8f:b4:d0:75:f9:
4b:61:80:20:26:24:bf:db:ae:67:0e:56:1b:f7:e6:
1d:47:dd:0a:6b:5b:af:e6:4d:1c:04:e8:0e:e3:17:
a3:ff:95:4a:43:85:46:b6:82:a1:b3:01:d7:1e:0c:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B5:71:95:9C:38:24:BE:B2:82:0C:A7:67:85:6B:E5:F4:57:B4:C7
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:48:d3:43:ba:8f:13:43:76:6c:a5:03:26:86:ec:b8:8d:56:
1f:0e:56:ba:67:a7:d5:1c:63:24:47:81:14:6b:70:95:32:7d:
e0:ce:d6:07:83:92:d3:ce:11:be:d1:dd:bc:3b:bd:2c:60:0a:
7a:75:8d:83:37:1a:54:42:26:fe:3c:48:27:a5:78:3e:9d:35:
e5:4a:6e:17:12:7f:a8:f5:73:a6:9b:01:7a:12:e8:50:f3:06:
a9:94:a4:a1:ef:fe:04:ec:19:71:a1:17:73:88:85:89:a6:12:
f1:a2:a3:9a:b1:53:a9:92:43:91:96:48:5d:b9:68:73:16:e9:
11:57:c8:c4:ab:a2:cb:a7:e2:67:36:a0:ee:69:f7:5d:17:7f:
70:51:2b:fa:0f:10:64:66:2d:21:0d:10:24:60:8e:36:be:88:
d3:ba:40:53:77:70:be:7c:77:6e:f9:82:50:c2:c6:37:96:75:
e4:61:47:54:c7:37:fa:b2:63:57:65:f7:e1:1e:5d:58:94:2c:
90:5a:63:3e:54:c6:a5:fe:7f:f9:9d:98:45:99:ec:20:4c:9e:
ff:08:0b:7d:48:1c:ce:0b:bc:1b:68:35:ad:23:b2:d7:77:11:
6c:7c:94:16:5b:ee:6b:5c:f3:d6:a4:58:be:67:a7:64:ac:e4:
fd:33:1d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 10:24:43 2025 by rpki-client