Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: DxQ+cC4BLv9KR8CYli29DglsjCoLKrheNU4z4eV9EO4=
Subject key identifier: DF:F4:D1:D7:EA:6B:32:9A:AA:CA:94:92:2D:E8:48:CF:27:32:C1:47
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 019A54C0418DA17CFE13B5DFEBD59E3C3223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 02C3
Signing time: Wed 05 Nov 2025 16:01:16 +0000
Manifest this update: Wed 05 Nov 2025 16:01:16 +0000
Manifest next update: Thu 06 Nov 2025 16:01:16 +0000
Files and hashes: 1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: nhmd7CktK5loJgmcPDf5YT+xlVlB1NTeSYaaa3AsAjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:41:8d:a1:7c:fe:13:b5:df:eb:d5:9e:3c:32:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Nov 5 16:01:16 2025 GMT
Not After : Nov 6 16:01:16 2025 GMT
Subject: CN=dff4d1d7ea6b329aaaca94922de848cf2732c147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:da:9d:8d:b7:14:5b:94:29:fa:97:43:f7:
5a:0e:9f:bd:2c:3c:55:a4:a5:c2:51:c3:b5:86:cb:
dc:9b:72:e3:e0:b0:ad:51:26:9a:e4:e2:8f:0a:84:
b0:5f:82:6e:02:b8:fe:10:4e:98:e0:c4:41:9d:5f:
50:c9:06:b4:c0:3d:08:4d:80:19:fc:ba:7e:af:fc:
21:c1:3a:0d:0c:75:21:ea:a1:0d:5c:96:d7:1b:d4:
12:f1:4a:a2:1e:8f:76:b1:59:ba:ce:3a:62:c3:ff:
82:67:23:a3:15:4a:14:1b:32:17:4b:74:eb:c5:8d:
e7:6d:0c:8d:bf:60:aa:52:24:db:32:66:6c:15:44:
9d:e1:38:08:7c:ea:4d:30:6c:38:e7:3e:c5:7d:72:
81:21:72:8d:4a:1e:16:5e:f7:5a:cf:e3:c1:7a:10:
45:77:4f:a9:9a:aa:13:c9:27:30:2a:3b:ac:74:e6:
76:94:9e:33:92:b1:ee:e2:5c:28:0d:7b:68:83:cf:
f2:2d:aa:41:7b:9e:a9:70:d3:e7:7b:db:b2:84:b9:
ee:a5:2e:ba:f0:57:8c:0b:fb:1c:dc:db:3d:7b:c5:
1e:d9:5f:cd:bf:8c:19:1f:a4:02:96:55:57:93:b4:
be:ec:4a:a4:47:6f:81:ea:01:a0:b9:74:81:ef:65:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:D1:D7:EA:6B:32:9A:AA:CA:94:92:2D:E8:48:CF:27:32:C1:47
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:31:9c:23:77:af:96:b3:f8:ff:7f:fc:c1:74:ec:be:c4:c7:
68:54:38:bc:d3:65:22:db:97:97:76:18:c6:21:4b:34:22:f5:
da:0e:d6:ae:72:dd:4b:16:dd:0e:a8:24:41:32:d0:84:a1:79:
d5:af:f8:9e:dc:d3:eb:ae:60:88:ad:64:4a:1d:7c:23:8a:a8:
d9:b0:be:8d:0b:1d:1a:70:d5:03:c3:b1:84:62:2d:83:59:f9:
87:32:d9:7a:b1:7e:a5:67:16:16:b3:20:c5:e6:ba:3b:7d:ac:
66:a4:21:d2:1d:80:fb:73:a1:63:2c:12:f6:7d:9b:99:89:5b:
4e:01:58:7a:1d:da:82:87:99:62:8b:b9:b1:a0:c5:fe:de:97:
c2:47:a2:9b:9d:e2:46:57:7e:69:41:e8:bc:cf:06:ff:14:05:
d1:1a:55:10:4a:12:e3:4e:a9:53:20:ec:0f:ce:28:5b:91:f4:
b5:e9:a5:21:b1:eb:52:7b:5a:bb:52:5a:da:0b:2b:4e:3e:dc:
28:e2:fe:ab:39:2b:53:b6:4f:96:e1:9f:1c:fc:e1:6e:3c:d4:
ec:22:f9:57:04:4e:5c:af:18:1c:53:f1:e8:ef:aa:87:7a:bd:
a1:43:36:51:22:1e:8c:27:d3:a5:e8:7f:2c:a5:2b:fb:1c:c8:
67:3e:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:48 2025 by rpki-client