Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: HragmqBoHttmVFQGh2PlY+f5DCQe5/q2rWUHiXrZVcQ=
Subject key identifier: 41:C1:D4:86:36:1F:AC:8B:CC:38:03:E2:1A:35:42:55:EA:9C:87:D4
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019A4E4F87467962C16B9A682D256C588F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 10:00:26 +0000
Manifest this update: Tue 04 Nov 2025 10:00:26 +0000
Manifest next update: Wed 05 Nov 2025 10:00:26 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: GKa2GCnUEbVsMEKqVbbUIQQ4epXVElkWGpMTg2mkAEI=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:87:46:79:62:c1:6b:9a:68:2d:25:6c:58:8f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Nov 4 10:00:26 2025 GMT
Not After : Nov 5 10:00:26 2025 GMT
Subject: CN=41c1d486361fac8bcc3803e21a354255ea9c87d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:2c:5b:ed:cf:04:a1:54:a9:14:19:e9:56:
02:d8:4c:31:cb:8a:54:09:b8:71:41:f0:08:a4:0f:
8a:72:38:dc:d7:a4:f6:9b:29:63:50:35:10:f9:8b:
ee:25:30:8f:b3:08:fa:1b:a5:76:ca:07:91:b2:28:
06:4e:b4:70:d6:b3:4a:c3:dc:67:5a:9e:91:69:1e:
42:58:97:a0:f8:06:4c:0d:13:b7:50:24:a8:3a:0f:
af:72:b7:37:7c:df:c7:f0:df:0f:68:be:f9:15:6b:
f7:ef:30:36:b5:d9:28:b3:a3:96:0a:87:24:50:37:
74:e1:4f:d3:86:f3:a4:6a:db:0a:1f:94:f5:6f:2f:
c3:97:32:c9:2d:2e:47:88:90:ab:8b:12:97:20:74:
b7:99:ea:a3:24:6b:24:bc:e8:6b:45:ac:d1:18:d0:
77:ee:62:bb:22:3a:fd:a5:37:41:be:01:ee:45:8f:
59:10:40:bb:71:0d:db:07:90:d2:58:25:ef:00:31:
03:29:65:66:5f:0a:26:16:26:91:02:aa:7a:bb:41:
6c:46:ad:22:8c:6c:98:d7:8b:59:ae:64:b4:c0:13:
c4:ef:6c:06:a6:93:7a:42:1b:2c:d3:9f:57:d1:a9:
ba:13:51:72:de:5e:9a:8d:f4:f3:74:b7:9f:44:9a:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C1:D4:86:36:1F:AC:8B:CC:38:03:E2:1A:35:42:55:EA:9C:87:D4
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:22:15:1f:4f:18:bd:00:34:a5:25:10:dd:89:bd:df:81:79:
99:30:28:76:34:88:a2:9d:61:3e:6b:10:49:58:36:46:a5:fd:
50:aa:85:31:08:4b:b3:98:04:9f:f8:31:c4:0e:52:c6:dd:d1:
45:da:30:9f:93:9b:b3:9f:aa:f4:f3:b4:bd:96:0b:4e:5d:36:
46:63:bd:d1:e9:d1:8b:8a:51:ae:59:57:03:84:db:85:e0:12:
a9:07:7f:2e:75:d7:84:76:54:37:3b:77:bb:a9:39:e7:8b:c7:
b2:e6:59:de:f2:fe:8c:74:74:0e:4d:b2:d6:ea:72:3d:f2:81:
64:5d:a6:be:6e:99:78:69:2f:e3:96:93:09:77:29:e5:f2:04:
42:de:22:8b:63:8e:87:18:06:48:91:3a:83:72:ef:76:16:b2:
62:9d:38:53:83:c9:e2:62:d8:f2:bc:a1:06:99:b6:e3:bc:38:
2b:2a:42:4c:3c:a3:ec:c4:9e:e8:96:13:55:cb:af:50:7b:5a:
2f:b0:37:ba:69:25:28:f1:e3:98:5e:66:f0:9f:47:d5:97:c0:
78:86:3e:1e:4c:4d:fe:62:b4:e7:df:ac:a0:35:ae:26:85:8c:
56:08:50:e0:eb:5c:55:46:c2:74:83:b3:63:c2:b7:60:7b:b4:
f9:38:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:09 2025 by rpki-client