Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: Nfdy9ublKCXrM70pJAQeMQoV2JRoFSLp1ACYn9ir0qQ=
Subject key identifier: F3:F3:95:3E:E3:0F:B0:6F:FF:74:B1:6D:B6:36:2E:E5:21:F9:D5:7B
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019A5150D04B07E080E0EE16DAFB4F6CE919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 1092
Signing time: Wed 05 Nov 2025 00:00:41 +0000
Manifest this update: Wed 05 Nov 2025 00:00:41 +0000
Manifest next update: Thu 06 Nov 2025 00:00:41 +0000
Files and hashes: 1: GiEc-ANqrb63QcspGJXLFg9KsNI.roa (hash: Sdx7QGn6KBOh9cOI8uzLQw1JR4w8NsvJTOnn28cZmjk=)
2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: X9iwmBf4gRzxbbenVGa66Ea73uaXm4Un+3AEe6Nv464=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:d0:4b:07:e0:80:e0:ee:16:da:fb:4f:6c:e9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Nov 5 00:00:41 2025 GMT
Not After : Nov 6 00:00:41 2025 GMT
Subject: CN=f3f3953ee30fb06fff74b16db6362ee521f9d57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:f2:26:f4:e2:62:0c:5a:3c:ba:15:f5:fa:
2f:64:87:43:05:0a:fd:8a:ae:15:21:09:06:2f:f6:
44:b3:2d:3b:a3:41:cd:32:cd:3e:e6:2b:13:60:06:
b9:75:a4:2d:ed:e9:54:d9:f8:b5:f9:25:8f:df:77:
67:69:3d:e2:a0:a5:e4:5e:5b:5a:26:1c:d0:eb:8f:
b2:f9:ae:5c:f3:68:98:05:c0:c7:80:2b:6f:3f:e4:
98:f0:32:81:42:ca:be:4e:81:cb:6b:0a:f2:b5:65:
b0:13:02:58:56:40:d1:f5:4b:86:97:12:95:43:ab:
a6:db:3d:fe:79:3e:1c:44:e8:b3:34:ce:3b:42:ff:
61:64:9a:ab:d4:25:0c:13:eb:4a:8c:04:87:e8:fa:
ed:65:7d:dd:93:ac:a9:b5:17:dc:0a:e3:02:ab:c9:
3c:9e:d0:28:7d:49:95:50:f7:64:d0:7d:07:c8:c8:
37:4c:d6:7a:ee:91:dc:7e:0f:fb:0e:27:f1:3c:42:
48:50:d3:db:87:6b:66:4a:0e:f5:a5:3f:12:54:bc:
b7:24:21:1c:dd:fd:2c:c9:cb:41:54:8c:62:e8:f9:
ad:63:56:9b:a2:06:17:05:7f:82:86:9b:cd:75:af:
95:d8:72:2e:94:58:a2:83:c0:67:fe:94:fa:0c:68:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F3:95:3E:E3:0F:B0:6F:FF:74:B1:6D:B6:36:2E:E5:21:F9:D5:7B
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c4:36:85:ca:d9:39:da:93:07:a8:bd:47:69:e6:3a:68:d6:
00:c3:e3:c4:1d:88:a5:c4:da:85:f0:4b:68:1d:69:51:35:05:
48:bf:0b:7e:a0:05:cb:8f:a7:17:a6:38:cf:e4:fa:61:99:16:
d7:ed:19:d3:cd:58:40:41:ee:0e:4f:2b:d2:4e:02:c9:c5:e9:
4f:6c:b1:70:a6:36:aa:7c:25:c6:be:6e:cc:46:b2:c4:c3:6a:
fb:a6:70:73:6e:37:38:eb:2f:f5:56:be:5b:86:c6:c9:75:8d:
46:fc:b2:b3:76:ab:5f:75:fc:1a:d5:6c:55:c5:ea:06:cb:a5:
11:90:87:e7:d0:23:f2:5e:32:67:ef:64:93:f6:62:be:8d:29:
fe:41:f3:18:52:fc:a5:1d:c0:e3:c1:4a:9f:25:39:e6:9b:32:
7e:25:bb:2e:d9:d8:e4:a2:72:81:20:26:12:2d:3a:76:e1:c8:
a9:06:57:85:94:a2:f0:d9:68:0b:7f:a6:3d:2a:25:42:9f:45:
6d:15:b7:21:e4:e8:0c:ef:d0:d9:81:be:17:16:c8:db:56:94:
8a:6c:b2:3c:52:37:37:8c:63:e2:b6:22:57:bf:a8:bb:77:53:
69:70:cd:31:70:cd:3f:e0:10:8e:88:91:c5:7e:83:5d:eb:df:
7e:bb:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:39 2025 by rpki-client