Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: VKcuXeDK91tNx4417nMzxD5uyDJIso6z0BiRy50r8c8=
Subject key identifier: 9B:BE:62:26:BC:28:C2:DE:DF:95:0B:93:8A:BD:BD:42:7B:45:3E:17
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 019A4DE21E819FF751E58CE86AC5C94DB833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 057A
Signing time: Tue 04 Nov 2025 08:00:55 +0000
Manifest this update: Tue 04 Nov 2025 08:00:55 +0000
Manifest next update: Wed 05 Nov 2025 08:00:55 +0000
Files and hashes: 1: wkYXDy6jmP0Af0Mp2rQ3k6yOAAw.roa (hash: UUIGA4ibmPpEgaOdXWNcs3JAI5RUgnFEIrwSbmNcKfs=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: /GgWdzQO0YYlJitn0cnXkfeK+UFr8FWHJEJzpUQwJYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1e:81:9f:f7:51:e5:8c:e8:6a:c5:c9:4d:b8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: Nov 4 08:00:55 2025 GMT
Not After : Nov 5 08:00:55 2025 GMT
Subject: CN=9bbe6226bc28c2dedf950b938abdbd427b453e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:5c:41:96:a5:54:63:ff:09:d4:ef:be:fc:
19:e7:32:c9:a7:b5:4f:d6:0a:6d:cf:3d:47:de:08:
3f:0b:af:88:26:08:2e:6a:8f:d7:9d:79:7d:2d:a4:
ee:7c:11:43:96:d8:8a:a4:01:0d:24:f6:5d:c6:3c:
8e:f2:47:52:dd:87:95:f8:e5:c9:7b:34:ad:60:63:
e2:53:76:dd:51:a7:79:e3:65:37:d6:8a:77:20:b1:
a3:0a:18:27:d6:c6:9b:38:2a:5b:9e:d8:f2:8e:97:
34:fa:9e:3a:e8:35:cf:a9:0b:7c:b0:d1:55:4d:c7:
4d:cf:10:7e:d9:d7:59:99:f8:9a:c5:95:ac:7f:6e:
34:5b:8d:a7:9c:90:e2:8e:a3:f3:4c:0d:c5:ba:0d:
d4:29:95:2f:57:2c:52:93:8a:da:d2:89:98:13:c3:
f5:74:ed:0d:c0:77:d5:95:a5:10:37:1d:8c:c1:90:
f2:63:8f:2c:1b:ec:0c:e6:96:cd:42:0d:5c:c1:01:
38:1e:79:99:73:6b:f2:63:6a:c0:db:70:01:37:4a:
9a:ac:83:6c:36:40:ff:a6:b0:79:ae:ab:ef:c7:3e:
a3:54:b1:46:79:62:7a:ad:f1:00:5d:48:8f:ac:4b:
15:9e:d3:b2:1b:8e:7d:9c:c5:fe:78:e8:8e:bb:1e:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BE:62:26:BC:28:C2:DE:DF:95:0B:93:8A:BD:BD:42:7B:45:3E:17
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:ab:4b:30:cd:1f:89:cf:ad:2f:4b:aa:db:aa:fd:5b:23:
0f:01:42:25:54:1a:12:f8:ae:ef:50:aa:0e:36:bf:9c:d0:f9:
1f:5b:aa:e8:1e:01:63:7f:6e:45:21:61:36:aa:15:76:9f:98:
9f:97:7e:04:3d:b0:16:c2:3b:e2:86:8c:5f:4f:1b:77:64:31:
70:e3:e0:d1:49:a9:6d:a6:13:ce:d8:9a:74:70:84:c2:ec:02:
e5:0f:d4:98:6d:72:d7:cd:71:79:1c:a4:50:08:f3:2e:f2:87:
4a:ec:69:3c:e0:e0:74:8d:db:7f:41:d1:ce:70:79:5e:63:4d:
ea:88:3a:ac:76:fc:38:84:a0:0a:93:4c:20:b5:9c:cb:35:fd:
38:00:94:b6:03:41:f6:4f:37:ec:7a:67:dd:d8:85:a9:ad:99:
ac:83:b7:c0:57:2a:99:fa:bd:b2:71:66:63:11:b9:d9:18:ee:
ef:67:13:90:3a:48:3b:e9:9c:36:6b:8f:50:63:5a:94:a4:d6:
5a:01:9a:2b:48:74:96:d9:34:20:85:a1:55:79:44:70:d0:e9:
65:5d:1a:c6:df:10:78:8a:42:d9:02:8c:02:80:84:7f:e6:d4:
1c:1a:3d:ec:5e:70:e4:64:cb:80:e7:4a:e5:01:70:ee:3d:b0:
b7:05:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:01 2025 by rpki-client