Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: Tm0eWvzVI9cUUlyMuvfirqtW57xySklSxlqDH1pdXj8=
Subject key identifier: 0E:9E:22:68:92:51:B3:1C:C4:E1:3C:52:0E:87:2A:DD:8D:73:CD:A3
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 019A4C615DF2AA4F802AB97C61B4D31A213A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 075A
Signing time: Tue 04 Nov 2025 01:00:40 +0000
Manifest this update: Tue 04 Nov 2025 01:00:40 +0000
Manifest next update: Wed 05 Nov 2025 01:00:40 +0000
Files and hashes: 1: GP-mcsPVfkxFR6BakAdLWMHzvnk.roa (hash: 46Gy5AnSQQR4RzlnLScg9/HmedHrQU8V47NDaOoaI7E=)
2: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: PEBZVXZGoNUIVwZMwQ45WL8h5hhErWSyb5sRKjAPX8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:5d:f2:aa:4f:80:2a:b9:7c:61:b4:d3:1a:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Nov 4 01:00:40 2025 GMT
Not After : Nov 5 01:00:40 2025 GMT
Subject: CN=0e9e22689251b31cc4e13c520e872add8d73cda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:e2:02:f5:34:52:18:75:32:8d:7a:18:71:
70:43:a0:5d:4e:13:5d:fd:5b:81:76:00:d7:38:f0:
35:75:55:1c:e6:7b:e5:b5:00:80:9f:cd:4c:28:80:
e8:00:04:b9:be:47:0e:39:1e:f5:7c:cd:a5:d5:46:
71:7f:ed:f1:1d:53:fb:19:dc:5d:9c:2a:5f:2d:2e:
bc:f0:4f:21:b6:74:60:84:83:7e:a2:75:5b:63:cd:
49:fe:15:08:70:34:da:18:86:53:7a:1f:43:68:19:
dc:64:53:17:65:5d:57:13:40:6a:2b:b7:4c:1a:1f:
11:7d:af:cc:78:bc:36:7e:c6:ce:29:66:fc:29:15:
c3:18:8a:86:96:78:55:60:18:f1:bd:22:ee:cd:f8:
31:48:11:3b:38:e0:5f:66:a7:79:2c:63:27:27:d5:
9f:81:f5:16:d4:09:80:95:14:88:5d:76:08:32:0d:
b9:14:04:af:fa:c4:67:1e:46:2e:84:4d:3e:a7:21:
91:96:79:39:3b:4a:8c:b7:03:67:e7:c2:a2:3a:f7:
5c:d1:6f:00:42:35:ca:fa:4d:ec:9c:35:74:f2:1b:
9c:e9:14:33:db:8e:ef:b1:4a:a7:bc:e6:a4:e2:a0:
08:a7:76:33:b2:de:0a:1a:96:c1:26:de:63:2c:c1:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9E:22:68:92:51:B3:1C:C4:E1:3C:52:0E:87:2A:DD:8D:73:CD:A3
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:60:2e:48:3b:65:5f:6e:b7:5a:77:f3:65:13:a4:f1:c5:1d:
6a:bc:5c:b1:8b:57:41:a3:44:f0:7f:ee:05:f8:4a:e2:ba:4c:
a0:10:55:15:78:4a:92:e7:ee:4e:bc:9d:b9:a2:d1:fb:3c:c5:
0a:e6:5d:72:4f:2d:13:90:3c:a4:1e:fb:a4:30:ef:ee:a9:df:
cd:6d:86:e6:f0:b5:e8:8b:ad:14:aa:0f:37:9f:8e:97:62:c3:
88:45:f9:db:f4:7c:21:3e:42:4a:9a:fa:74:f4:6f:08:f9:15:
01:69:af:41:b1:da:74:89:c3:86:62:5b:79:49:19:89:eb:96:
ac:1d:b2:be:3c:ed:19:fe:0b:7b:16:d4:1e:37:2a:11:dd:5c:
99:04:99:c1:95:cf:21:9a:93:4e:3f:39:c9:29:e6:bd:ff:13:
eb:9c:68:17:8a:78:b5:35:81:ee:c9:f3:49:31:76:6e:30:eb:
5f:e3:4f:17:76:a2:98:00:16:6c:3c:ec:14:b0:4e:c5:c9:e1:
28:22:f8:c0:75:fa:c8:e5:4b:9d:1f:5f:be:fb:cf:c1:f4:c0:
8d:94:b2:f7:12:7e:70:67:61:40:11:61:10:bf:17:7c:a7:e7:
34:3e:e3:df:a7:94:33:f3:3c:72:0a:b7:a6:9e:0b:10:13:70:
0c:cf:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:34 2025 by rpki-client