Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: sQdWoIQ50FknYZw0I5RReMKARDt6OWv9i7O/vG8kOgw=
Subject key identifier: 18:7B:6D:5D:6B:EE:2B:CC:FF:9A:6D:D7:55:32:7E:C5:9B:D3:0A:19
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019A4D06D340B57CB075058F7DA2CB212405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 083A
Signing time: Tue 04 Nov 2025 04:01:23 +0000
Manifest this update: Tue 04 Nov 2025 04:01:23 +0000
Manifest next update: Wed 05 Nov 2025 04:01:23 +0000
Files and hashes: 1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: S7QMFEjVECQUtWsiafWenXJJss4oN5rGO0hVt4aIpP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:d3:40:b5:7c:b0:75:05:8f:7d:a2:cb:21:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Nov 4 04:01:23 2025 GMT
Not After : Nov 5 04:01:23 2025 GMT
Subject: CN=187b6d5d6bee2bccff9a6dd755327ec59bd30a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:07:03:a4:ab:1a:aa:ee:6d:1e:01:a5:7a:
da:aa:25:fc:e4:fe:31:fd:33:dd:e0:ae:9c:60:ae:
13:5f:63:a8:9f:e1:21:f9:e5:96:3e:37:e1:b1:a2:
80:5d:5d:7c:64:79:c9:7e:74:0f:e5:bb:6e:a5:36:
58:6b:b0:13:38:69:7a:bc:5b:38:4f:24:3f:9a:57:
5a:88:19:bd:10:c8:02:87:ef:87:67:c8:63:b2:fe:
70:d3:83:17:36:1c:01:1b:f9:d5:cd:1c:fc:80:48:
f1:4b:71:af:65:ed:d2:36:3f:76:e3:d4:a1:de:6e:
80:02:59:3f:e1:0c:de:b4:1b:7a:59:78:ff:1f:21:
a7:0f:40:6c:60:7f:f8:de:bb:2f:6c:e1:00:29:91:
fe:8b:8a:dc:9e:45:1a:86:53:ac:01:34:02:e6:7e:
90:74:ff:96:e8:72:7b:02:0f:cb:0e:2d:d2:8c:32:
85:62:3c:b5:9a:3e:ac:a1:73:4e:82:5f:2c:ec:05:
42:0d:a8:b6:d4:10:72:ac:89:e4:17:59:c8:ab:11:
dd:c1:8b:da:6b:65:f6:ab:77:5b:c3:82:3c:b4:e4:
a5:24:28:9b:c9:09:1b:16:26:51:20:ca:26:f2:16:
1f:57:b8:78:46:ff:92:47:84:e6:55:a8:89:d1:51:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:6D:5D:6B:EE:2B:CC:FF:9A:6D:D7:55:32:7E:C5:9B:D3:0A:19
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:be:e0:d6:72:ae:1d:49:e2:d0:eb:38:36:06:cb:87:8f:08:
7f:95:cf:a3:1e:88:54:99:78:b4:e9:ef:ce:54:7f:cd:8e:b2:
5b:ac:9b:71:39:0d:9e:c8:d9:ee:26:55:d9:11:14:74:34:63:
4e:4c:0e:a6:db:d2:98:25:48:83:e2:34:32:42:17:bc:ae:3a:
38:cf:24:0b:50:2f:e2:29:9a:c0:bd:ef:b1:80:b8:f3:17:91:
9f:7e:80:e5:e2:20:9e:ab:63:3c:86:5a:be:74:a7:80:5f:f8:
d9:8d:46:6b:9b:fa:36:db:4d:d6:ef:f6:c5:41:69:d8:e7:05:
71:5e:42:c5:c2:0d:dd:5f:ea:51:0a:5d:cc:4f:05:dc:ef:a4:
7d:34:c0:c3:ed:8c:f3:0e:37:e0:17:1e:15:37:c4:e2:8e:cb:
c3:cb:af:bd:cb:9a:86:e7:76:cd:78:4b:89:64:93:bc:31:61:
d9:c0:32:9c:85:10:8c:5f:20:f2:fd:05:46:a9:01:d6:4a:ef:
9f:47:a4:e6:8d:e9:c5:c6:4a:f2:3f:74:f7:0e:1a:50:c6:79:
73:d4:75:c5:38:8f:1d:e1:18:9a:02:b7:2b:cf:38:d2:49:b6:
2a:86:d8:6b:02:a5:8e:53:e9:46:4d:b9:84:fa:61:4c:cb:eb:
27:fe:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:01:58 2025 by rpki-client