Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: uGOzDgHd/KWfHmPC2zPG/zcplHZdmGZPzReSBLU3heo=
Subject key identifier: 1C:36:1A:56:CA:88:CF:5F:62:22:2A:61:9B:36:FA:E5:64:12:AC:5E
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 019A4EF51DDAF2A6ACAC13D199E22D83D2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 140E
Signing time: Tue 04 Nov 2025 13:01:18 +0000
Manifest this update: Tue 04 Nov 2025 13:01:18 +0000
Manifest next update: Wed 05 Nov 2025 13:01:18 +0000
Files and hashes: 1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: D0XVowLYKCLEDTFbM0wsFCtgsdvpg/UqQr/gp528Olc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1d:da:f2:a6:ac:ac:13:d1:99:e2:2d:83:d2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Nov 4 13:01:18 2025 GMT
Not After : Nov 5 13:01:18 2025 GMT
Subject: CN=1c361a56ca88cf5f62222a619b36fae56412ac5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:f4:cc:34:4e:f0:e9:2e:cb:74:0e:a1:ca:
8a:c2:0a:84:e8:01:78:90:47:6e:c1:5e:49:05:ff:
0d:0e:ee:00:17:2a:b0:95:70:a7:ae:40:c1:4c:26:
f2:90:65:fc:4d:52:ae:2c:6d:a5:0c:ad:91:46:71:
bd:0a:d5:b4:5b:44:a8:9c:bc:02:bd:9d:b3:b6:ed:
75:7c:d6:04:59:ab:f4:a4:8a:73:58:50:c9:c9:fd:
59:77:5a:36:3e:4a:45:7c:50:d5:87:5f:7e:22:e7:
1f:30:26:10:fe:e2:a1:cb:34:8c:6f:37:8b:67:98:
3f:c1:f9:d5:f7:57:4f:09:48:2d:02:c4:fe:89:f0:
bc:70:a0:02:7d:dd:c0:b2:62:b0:2c:a9:13:6c:f4:
59:cf:8e:6e:26:c3:a9:2d:43:55:42:8c:31:a2:5b:
84:76:05:d7:66:5d:f9:c3:bb:46:39:bc:46:07:5d:
ef:11:fe:3c:50:53:36:39:8b:bf:48:b4:53:c2:09:
48:f6:f0:50:3c:e6:23:93:ea:93:3d:fc:b5:48:45:
62:65:86:ad:d2:9c:64:e9:a6:62:39:a6:e8:72:88:
cb:e1:2d:9a:5c:9a:fb:96:cc:ad:d6:c6:2d:db:9b:
90:dc:04:a4:c5:c9:00:ad:d7:16:b1:61:a2:90:d4:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:36:1A:56:CA:88:CF:5F:62:22:2A:61:9B:36:FA:E5:64:12:AC:5E
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:28:9a:60:8e:27:ad:13:76:26:cf:86:65:75:65:b9:c4:36:
ce:07:e9:68:1c:c3:92:94:6e:62:5c:40:1b:e4:65:1f:60:89:
21:5c:69:2a:27:3d:c8:15:10:f9:52:8a:bb:bf:4b:66:b7:09:
45:96:44:07:51:89:a5:63:e2:7c:2d:4c:0b:1c:48:97:b2:85:
37:d9:44:e3:7c:e5:4b:89:64:cc:68:f1:06:b7:db:67:25:6f:
b5:ea:96:02:3d:37:f2:bb:e1:f2:a1:28:dd:5a:e9:93:c0:6f:
e5:ce:de:a1:2f:ee:18:17:e0:24:0e:83:79:24:3e:ea:da:67:
81:72:47:43:01:b4:9e:de:22:9c:c8:a2:07:f8:89:4e:c2:14:
c4:0c:4a:a5:b5:b3:d5:d4:6c:ea:ba:37:df:25:5d:e1:89:08:
c9:55:ec:78:68:71:9b:50:8d:7b:0b:88:cc:6f:d4:43:d8:c5:
49:8a:ed:22:01:d4:92:bd:61:ad:dd:7e:79:96:28:c8:1f:07:
87:8a:5d:55:0d:cb:7e:7a:1f:9c:65:c5:4a:a8:e8:7e:db:07:
da:95:89:cb:3e:27:3f:56:a0:ef:4f:fa:8c:82:22:1f:0f:ca:
32:a4:bc:f2:44:b7:ec:5b:c8:f3:12:72:91:ff:da:57:78:b1:
05:03:28:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:36 2025 by rpki-client