Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
File: y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json)
Hash identifier: XvruKu8FoVEB+TWhwVy0l8LTq4YT/59D/tkJ94vRWY8=
Subject key identifier: 12:E8:38:B4:34:53:A2:5F:26:A1:82:35:B1:6F:14:EC:8B:8B:F9:ED
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial: 019A4DE1D384B252CC4C6262A842EB50287D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
Manifest number: 10D9
Signing time: Tue 04 Nov 2025 08:00:36 +0000
Manifest this update: Tue 04 Nov 2025 08:00:36 +0000
Manifest next update: Wed 05 Nov 2025 08:00:36 +0000
Files and hashes: 1: xXYCNUnm-3UsiS0Y2j4IJt8GJmU.roa (hash: kfa/1BPOG2GKMxXo/zgSWZ2DSaf3+pCaWIgYdprI0TU=)
2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: cbdgFI0rub8U6zT+wkmBy2XSJQp7BTvsVn2K0VvX8cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d3:84:b2:52:cc:4c:62:62:a8:42:eb:50:28:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Validity
Not Before: Nov 4 08:00:36 2025 GMT
Not After : Nov 5 08:00:36 2025 GMT
Subject: CN=12e838b43453a25f26a18235b16f14ec8b8bf9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:3d:bb:37:98:0b:2a:a5:ba:68:cd:e0:57:
18:bb:f4:36:8a:77:5c:0c:31:b1:98:df:cd:a8:60:
b3:d3:b0:cf:a4:50:39:91:c1:d0:10:67:ab:c4:8c:
ac:86:e3:cc:d3:59:d8:82:0e:4d:2b:20:9a:d3:64:
71:e2:13:c1:cf:dd:f2:b2:62:08:56:af:b8:f4:a7:
ac:84:18:f8:0f:46:98:1d:58:34:2b:a5:1a:f1:37:
47:18:fa:b0:dc:6d:6c:cf:f5:93:38:68:9b:ff:53:
9b:22:1e:ad:b4:b1:b6:11:24:f8:03:e1:06:7f:d8:
1c:b7:9e:d8:f3:ec:20:f8:70:ff:30:82:a4:31:7b:
83:59:cb:27:da:22:d9:a9:24:14:05:0b:9e:4e:da:
a4:83:99:43:f6:b5:74:10:1f:79:0f:d5:4d:05:1b:
03:0b:48:3b:2d:4e:7d:5a:51:89:c5:2c:e7:75:f8:
b6:a3:d3:cb:4c:af:65:20:fe:af:12:b0:52:63:df:
b2:50:21:54:c6:71:e6:9f:87:c9:e6:84:f4:2d:1d:
d6:c3:0d:70:e0:ee:75:31:1b:68:05:bb:ec:ba:fa:
f9:a0:08:9a:bf:1b:a2:7a:9c:2d:d3:47:3a:6e:bb:
24:ef:58:1e:68:dd:49:44:84:61:d9:a6:4c:14:14:
8e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:38:B4:34:53:A2:5F:26:A1:82:35:B1:6F:14:EC:8B:8B:F9:ED
X509v3 Authority Key Identifier:
keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:97:dd:6c:21:d4:95:09:9a:48:fa:4e:40:99:8c:d6:d3:92:
b1:67:e5:22:8f:c7:d1:7d:1f:71:dc:bc:f2:b4:8b:7b:82:00:
e1:f4:7f:a4:5a:d0:7c:b3:e2:21:eb:46:20:0f:8c:2d:d8:07:
ac:2a:83:d4:b4:cb:33:72:1b:d6:8b:14:0c:e7:e1:fa:14:06:
20:4d:d5:6a:9a:6d:d8:20:d4:ee:0b:22:b4:95:d5:70:e9:d4:
59:ee:fb:c0:f0:b1:f2:46:13:4a:00:6e:c9:f6:08:ec:29:5d:
7d:a1:fa:9e:33:91:0f:77:79:7d:8e:fd:8d:40:ff:ac:51:2e:
e5:cb:cf:7b:61:1c:60:bf:8b:bd:b3:c0:1d:24:c9:33:a5:b3:
24:03:bd:40:4f:5b:b6:f9:eb:11:5f:bf:e1:1c:c6:5c:f7:74:
a2:42:f4:bd:28:95:51:94:94:58:d3:c5:c8:97:fd:e1:83:b0:
4e:71:99:5a:70:1c:a4:7b:fb:62:8c:b1:d5:59:2f:66:b4:69:
4b:25:f9:35:e3:4b:51:37:99:68:df:65:d9:77:6c:23:e3:b6:
dc:cb:b8:a4:40:24:19:1d:ff:42:d3:9a:aa:f9:f5:04:21:7a:
14:f4:bf:7d:9b:45:e2:b7:d7:7b:29:de:ab:11:16:fd:ff:7e:
51:2f:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:52 2025 by rpki-client