Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
File: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json)
Hash identifier: Ak0AARW3w/8q4QOBAxJU/MPEaszMsJkD/rwnY4xui/4=
Subject key identifier: CE:F9:EF:92:31:31:62:8E:9B:97:8B:CD:5C:64:02:0F:2B:68:9F:60
Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
Certificate issuer: /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Certificate serial: 019A4F62B359CB9693CB0C2CAE98F7D6AAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
Manifest number: 086B
Signing time: Tue 04 Nov 2025 15:00:59 +0000
Manifest this update: Tue 04 Nov 2025 15:00:59 +0000
Manifest next update: Wed 05 Nov 2025 15:00:59 +0000
Files and hashes: 1: Xh4ptPl3loyr5HsYAeq5bigmrnc.roa (hash: y+GdTxJAoh6FrrDJ6BHqIZq0hI9csiMuoRcI0N0qK/0=)
2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: JHKEjFeMzC/Yhk4/GqMs/NNDYCRWJwOQo0cFE2YXAQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b3:59:cb:96:93:cb:0c:2c:ae:98:f7:d6:aa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Validity
Not Before: Nov 4 15:00:59 2025 GMT
Not After : Nov 5 15:00:59 2025 GMT
Subject: CN=cef9ef923131628e9b978bcd5c64020f2b689f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:1b:88:6b:ac:d8:b4:ae:3f:1f:a9:2c:81:
c3:36:23:42:21:2f:24:3a:75:32:13:00:4e:84:11:
c2:90:91:68:c7:8b:22:ec:70:c0:90:12:c1:2e:c5:
c5:cf:73:5c:f6:c2:70:e7:bc:57:ac:63:9e:a3:13:
f3:9a:96:a4:9d:66:f2:83:a8:b7:d1:8f:82:a3:60:
4a:10:f9:a0:e5:47:1c:b1:50:de:fc:a9:71:3d:2e:
54:c2:bc:93:92:75:86:ac:15:62:84:1a:89:9e:41:
db:b8:4f:a0:26:2d:36:3c:f6:f5:5e:5c:75:a1:7f:
27:e0:b5:10:78:12:41:60:0b:6a:2d:42:0d:6a:1c:
a2:f3:db:23:9f:70:03:90:70:00:6a:bc:e1:04:9f:
84:08:31:73:a0:46:95:ba:98:5f:ea:e2:ca:0e:19:
c7:f4:e2:5e:25:57:86:ad:38:6d:ea:d7:a0:50:62:
42:db:2b:a2:8b:ad:a4:ec:bf:16:0a:4a:2c:1a:9c:
69:be:03:2c:95:90:a0:8d:ae:e7:52:0c:f4:c3:e3:
90:ea:2b:6c:d1:07:a2:df:fc:67:2f:06:c0:97:b9:
65:a4:07:67:3c:0d:a9:53:1f:36:f8:32:00:14:e0:
8a:8b:fb:df:4e:f7:c3:4f:fa:77:18:c2:e0:7d:62:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F9:EF:92:31:31:62:8E:9B:97:8B:CD:5C:64:02:0F:2B:68:9F:60
X509v3 Authority Key Identifier:
keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:79:e4:ec:7f:03:49:65:e8:65:0d:5c:92:63:10:88:79:40:
13:07:91:c7:59:13:6a:48:34:cf:84:0b:f9:07:e4:2f:e6:ee:
0f:e1:5b:75:e4:e3:3d:26:c8:41:db:44:a0:ea:7b:75:79:b4:
bc:e9:99:a1:e9:d9:38:6b:ab:b8:78:1c:ff:de:68:d6:02:aa:
c9:6f:bc:ae:67:11:86:df:db:b6:a0:0a:a3:90:fb:b1:e6:d1:
d2:ab:42:ef:05:31:54:f5:63:a7:32:42:79:08:82:6c:a8:27:
d8:52:35:1e:07:92:64:f9:a2:ef:63:b6:0d:4a:c3:80:66:9d:
2b:b8:51:b2:cf:e6:a6:ad:4b:ab:d6:1b:10:4f:37:7f:bd:4d:
f2:c0:90:74:9a:b5:9d:a9:2b:3c:0b:92:65:6f:11:26:19:ac:
4f:ef:44:d9:00:f9:ba:3e:6c:55:8f:85:90:fd:c2:f6:35:1a:
d9:4a:81:fe:e7:72:61:fb:8a:1b:85:3a:dc:e8:05:86:59:3c:
77:9d:a3:83:9f:d2:56:f4:65:93:aa:1e:03:22:0d:b9:e7:2a:
1d:f6:96:25:50:b4:6d:d6:73:dd:ff:8f:b3:59:ea:ef:6f:fd:
25:b5:5e:af:99:68:62:ae:24:ee:a8:b7:b5:17:11:0d:26:13:
13:1b:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:40 2025 by rpki-client