Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier: 9sVhfb/2dWn6x1kECh+R0FmWzTR/xSqkTCp3kgWYnZM=
Subject key identifier: 9A:EE:C1:DB:56:F1:D2:E3:A3:76:79:4D:F0:E8:55:6C:04:D9:05:6B
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 019A4DAAB2CB8F3E0EAD69160E1E994D9C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number: 046C
Signing time: Tue 04 Nov 2025 07:00:23 +0000
Manifest this update: Tue 04 Nov 2025 07:00:23 +0000
Manifest next update: Wed 05 Nov 2025 07:00:23 +0000
Files and hashes: 1: q46mhqb037SisDm5N4bZ1WyfVUE.roa (hash: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=)
2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: ZV+S6CUsMZyqhARh5nYok8NVj2hhzEbyDiG3OJI0n8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b2:cb:8f:3e:0e:ad:69:16:0e:1e:99:4d:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Nov 4 07:00:23 2025 GMT
Not After : Nov 5 07:00:23 2025 GMT
Subject: CN=9aeec1db56f1d2e3a376794df0e8556c04d9056b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:31:a2:66:e8:4e:bd:01:c5:89:9a:60:3e:
11:46:25:7c:c3:cd:f6:ff:35:7c:fb:7c:f7:90:25:
c7:20:81:88:7c:5b:50:52:aa:49:42:14:9a:27:66:
54:7a:1b:ea:60:b1:67:43:e4:b0:e9:d5:3d:96:1d:
87:e6:f1:c4:fd:e1:22:82:82:1f:c4:cc:30:05:85:
43:a3:e4:a6:3f:35:86:be:d2:e4:cd:9a:ab:48:b9:
60:ac:db:b1:c9:84:f5:e8:25:ae:b0:65:6d:f7:41:
f1:45:7d:73:27:82:f3:1c:43:da:4c:dc:d1:7f:6a:
15:eb:9b:62:b6:1b:2a:fb:f8:0a:d3:d3:49:d8:76:
b6:ad:42:ad:2a:2d:a6:d8:b8:8f:9a:0f:4f:59:88:
b9:f7:3f:d8:75:05:1b:e9:6e:1a:5a:ef:19:ca:89:
7d:0d:36:3c:86:1c:f8:fe:70:ea:97:07:61:89:57:
f5:8f:0d:72:5d:bf:76:5b:b7:84:ff:9a:47:ee:d3:
28:f2:8d:00:43:43:40:a0:db:44:46:f2:f7:b4:60:
bb:5a:19:42:9e:8b:04:be:9d:34:ca:ed:95:af:b3:
b0:43:03:f2:fb:5b:58:ac:3c:e5:bc:be:1f:6d:f6:
25:af:76:14:4e:ee:06:46:b8:a8:6f:99:79:99:1b:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EE:C1:DB:56:F1:D2:E3:A3:76:79:4D:F0:E8:55:6C:04:D9:05:6B
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f7:47:38:4a:d6:e3:69:3b:71:97:93:3e:76:0b:f5:d1:a6:
44:e5:fc:0e:21:92:09:ff:b5:48:da:bb:1d:38:cc:19:4f:f7:
44:c5:1e:22:ac:f2:78:5b:c1:53:ea:b0:30:64:4e:b7:40:76:
1d:4e:24:d5:f8:b7:4d:51:a1:43:c6:84:56:39:cf:56:f2:8b:
de:81:b1:58:0b:86:6b:1e:32:bc:a4:8e:b6:8f:4e:3a:31:13:
05:1d:46:30:b1:4d:c8:9d:26:86:4d:30:17:6b:4e:55:58:a6:
a5:8e:49:6e:e2:d6:b3:b5:c7:8a:24:06:cb:a3:96:f4:3f:a1:
c1:c8:df:9d:7e:9d:b0:7d:18:c3:93:79:4e:94:d6:b8:b4:59:
52:09:5f:57:a4:25:a4:8b:a7:bd:76:cd:61:f3:cc:e2:b2:64:
b2:06:d1:58:e7:73:e2:ac:5f:8a:6f:87:5e:09:39:3d:74:99:
69:fa:d1:28:a1:38:78:9d:19:48:24:5c:72:3d:f4:79:b6:3b:
0f:1d:b0:64:9e:30:1c:c1:59:44:7b:46:ee:fd:e6:b5:e4:2f:
fc:ff:de:dd:63:c2:e0:b0:f1:94:ec:70:c9:d6:22:14:92:49:
39:e1:d5:d7:83:8e:69:63:d6:2d:17:e9:f9:cf:3c:44:f3:5b:
57:24:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:40 2025 by rpki-client