Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
File: y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft (raw, json)
Hash identifier: urQcj0dD2se387ajweZQNegGXdQORz6gojk/2mW8IL8=
Subject key identifier: F9:70:94:2B:3C:1E:1E:D8:88:EA:F6:EC:D0:12:5A:69:EC:7B:8D:6F
Authority key identifier: CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
Certificate issuer: /CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Certificate serial: 019A4F9933BD56BCC557A105BD4581BA7043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
Manifest number: 12AC
Signing time: Tue 04 Nov 2025 16:00:31 +0000
Manifest this update: Tue 04 Nov 2025 16:00:31 +0000
Manifest next update: Wed 05 Nov 2025 16:00:31 +0000
Files and hashes: 1: nPtNOVhjTVbNoPzqUJGa-Eqnb0Y.roa (hash: Yuz9f1rxV7S4atM+GycUQVhSQinvjc3oT1lXV1zOVuE=)
2: y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl (hash: YLDpjQC4ShtMe/boO2Dd5XEkyzqQQ5hJQYwqFc4BY9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:33:bd:56:bc:c5:57:a1:05:bd:45:81:ba:70:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Validity
Not Before: Nov 4 16:00:31 2025 GMT
Not After : Nov 5 16:00:31 2025 GMT
Subject: CN=f970942b3c1e1ed888eaf6ecd0125a69ec7b8d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:ef:b0:a1:c2:a2:7a:99:6c:ed:ea:e4:e3:
be:79:d5:e7:b8:ac:25:6d:83:e0:b8:51:62:63:92:
f1:f7:6f:a4:ad:5c:f5:2d:7c:0e:99:26:83:c3:df:
09:07:ac:b1:62:1c:80:0f:62:28:f8:cb:f0:b6:1c:
7d:2a:19:25:dd:ee:9f:cc:c2:58:73:0a:01:aa:b3:
e2:7f:72:11:69:f8:15:f1:0a:b7:67:6a:4e:a5:a2:
ed:03:8f:73:b7:cb:2b:6e:19:1b:bb:9f:d0:09:58:
15:f2:90:6f:ea:f7:a7:87:a5:82:fa:3b:f1:99:51:
2f:3b:5e:9b:3a:06:ab:00:d1:d2:3e:e2:d9:8a:88:
49:0d:69:90:c4:07:db:db:d9:d3:8b:a4:15:cf:57:
f7:1c:00:ab:1d:4a:fe:63:e7:32:34:d0:b7:12:6c:
03:df:33:9f:9f:2f:23:31:e5:2a:5a:60:71:da:e0:
a5:c4:58:01:9c:09:45:7d:3a:a2:c2:6d:dd:42:9a:
68:45:ae:50:67:4a:0f:8d:dd:6b:b6:d8:1f:63:af:
03:2e:6f:3d:27:65:f8:84:17:e3:0c:87:83:39:ea:
53:da:ce:be:f8:8c:fd:f2:cd:57:7e:5b:4a:ff:66:
89:aa:45:8b:43:92:aa:e2:9e:29:b3:32:64:8f:a5:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:70:94:2B:3C:1E:1E:D8:88:EA:F6:EC:D0:12:5A:69:EC:7B:8D:6F
X509v3 Authority Key Identifier:
keyid:CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:85:7e:29:b0:4e:c2:1e:87:c2:50:e6:6f:d6:fe:b6:62:c8:
7d:6c:9b:87:4b:d1:a7:a0:fe:49:35:fd:08:06:c9:2b:4d:ed:
75:57:cd:a1:ca:9d:db:a1:8d:49:e6:49:3f:4f:d6:62:48:3f:
6f:b9:6a:6f:1b:6f:1c:53:c9:91:27:f9:fb:98:07:26:0a:67:
f7:ea:83:7d:8b:fe:cf:71:e1:50:c6:19:75:e2:11:d6:0a:db:
10:12:fa:84:a3:57:9f:4a:46:60:a8:f9:29:e6:93:3a:32:c3:
34:17:87:94:d0:ba:c5:e6:c5:c4:3a:38:60:ec:fc:35:9a:c3:
30:13:16:4a:38:08:44:26:24:15:e0:39:78:86:2a:ba:72:b0:
ba:83:d2:15:73:5d:2b:d1:3f:a5:64:3b:a1:56:ab:a2:18:67:
a3:c7:3a:21:29:bc:3b:86:9a:e3:02:34:44:85:cb:91:02:42:
fb:24:61:22:39:de:3e:a6:06:50:97:76:f1:fe:14:68:85:b4:
29:de:67:70:78:f2:ed:e7:93:c9:fe:6c:f7:4b:cb:24:e4:c6:
eb:8d:84:f6:98:3d:07:c1:92:a6:02:6c:08:48:ba:0e:fc:9e:
09:b7:ca:af:6f:f2:e7:e8:3a:71:05:3a:0e:29:ac:36:46:0e:
6c:e9:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:22 2025 by rpki-client