Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: WaTcoIO1gT/BJum75IMWwipHrNUeuPkoE9CW11Dzf8M=
Subject key identifier: EF:0F:FB:4E:01:A6:96:1D:8C:FF:40:77:EB:88:CD:C7:CC:AF:60:E1
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019A21AE06810CA3BA7787B83D07FE63C328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0DDC
Signing time: Sun 26 Oct 2025 18:00:44 +0000
Manifest this update: Sun 26 Oct 2025 18:00:44 +0000
Manifest next update: Mon 27 Oct 2025 18:00:44 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: PhMbZZ/RX9GksxKpP3sSbM4WDImbIR3Mh2vqNF74YHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ae:06:81:0c:a3:ba:77:87:b8:3d:07:fe:63:c3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Oct 26 18:00:44 2025 GMT
Not After : Oct 27 18:00:44 2025 GMT
Subject: CN=ef0ffb4e01a6961d8cff4077eb88cdc7ccaf60e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:39:46:4d:6b:0b:2d:c2:ad:b7:82:95:79:68:
98:ce:1e:29:d0:39:ba:89:31:e4:6a:c8:cc:12:24:
3a:29:c8:33:32:a2:9a:dc:c0:d2:51:88:02:b6:64:
5f:69:75:52:af:d7:fb:f5:6e:8b:c3:35:46:34:ec:
08:8a:27:89:87:e2:83:79:89:3b:dc:a2:50:a6:27:
c4:bf:b3:34:73:6f:0c:8c:bb:39:a7:ff:eb:a4:7e:
87:7e:8a:47:6c:9f:23:ad:aa:99:40:6a:c5:8c:0a:
b5:ba:e3:14:2d:49:6e:c2:e1:1c:54:b7:72:d0:4e:
48:a9:51:8e:50:8f:2c:6a:2a:1b:68:cf:2f:eb:3d:
c4:2c:87:38:a3:46:af:e6:19:f9:98:8d:f2:4a:db:
13:bd:8d:3b:2a:ae:f7:b1:26:2f:9e:29:31:c8:21:
a2:3c:bb:5b:c1:45:8b:eb:43:34:30:e6:51:96:46:
d6:7f:3d:bf:a0:34:41:34:4e:62:ec:46:a2:ef:c4:
c3:83:b2:b2:6c:d8:9f:e4:e5:06:6d:94:e3:11:dd:
65:86:56:8a:50:7d:6a:9f:12:92:03:c7:18:00:26:
8c:5b:64:f7:ce:7c:cb:37:85:fc:ac:76:78:bc:a2:
15:c3:42:2b:fe:0b:a0:de:a4:95:04:be:0c:e3:44:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0F:FB:4E:01:A6:96:1D:8C:FF:40:77:EB:88:CD:C7:CC:AF:60:E1
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5c:02:c7:31:4c:77:b5:69:28:d4:d5:14:84:9d:87:12:f0:
93:88:ee:d7:56:7b:19:f2:da:17:87:a4:4d:44:e0:2a:e0:0d:
4c:67:d5:05:13:df:12:ad:c7:06:e8:84:39:57:d7:16:60:3e:
0f:3e:66:5d:0a:cd:5c:82:f2:ad:f6:f8:bc:9f:11:76:14:e6:
d1:50:5d:0b:5a:b7:bd:1f:4d:50:54:0d:49:3a:48:04:9c:d8:
0e:53:1a:21:93:86:7a:00:9d:3e:5c:9e:48:d7:7c:a7:a3:9d:
28:91:50:94:77:2a:59:5f:d1:2b:3f:d9:7d:ce:8b:12:ce:bf:
56:e0:d8:ed:85:68:f7:7c:0b:31:21:50:5c:c7:f2:f5:e6:dd:
41:5a:f7:2f:64:5f:27:53:cd:4f:83:71:b5:7f:9a:ff:93:18:
1e:a7:db:17:38:15:13:41:5b:c5:23:5d:5c:1b:47:a7:53:13:
fb:fc:c3:1b:8a:7d:b0:41:54:93:f6:af:24:ae:80:8a:79:4a:
ad:53:4e:8f:99:08:ce:2b:83:f5:6a:15:e5:23:cf:fb:e0:f1:
a3:fa:80:d1:1f:9e:94:cc:9a:f8:cd:d3:5e:94:d5:af:8c:53:
b9:8b:c7:26:19:c9:4d:ed:5e:39:b1:85:ad:b9:4f:08:da:af:
b8:50:a2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:42 2025 by rpki-client