Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: U59dHP5iXKzaTlafNTeYCAy1FV0SfM8WFvnq/dD1e/8=
Subject key identifier: 3C:1A:37:BE:80:70:14:26:99:E3:60:E7:06:AF:5C:77:1A:2C:F2:A1
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019A4D3CF2967A8EDB63653B3842CAA9BD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 0FF9
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=)
2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=)
3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: mpzS1qJZN774EcPVSLmkd/Xq2/aso1CU5JqoWOXXd3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f2:96:7a:8e:db:63:65:3b:38:42:ca:a9:bd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=3c1a37be8070142699e360e706af5c771a2cf2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:f6:99:9e:1c:6f:2b:dd:c2:c1:76:ea:2a:
78:66:4a:ea:a5:46:5c:a2:d6:b3:58:65:1e:f1:44:
72:66:86:71:c6:99:80:65:21:51:f0:f8:20:fb:9b:
33:d6:a4:7b:09:eb:c6:c9:30:a4:28:0e:73:14:14:
da:77:fb:8a:71:f3:f3:51:8a:44:68:ea:b1:eb:ec:
5c:b7:04:7f:32:5c:54:18:d0:46:f5:ff:ea:99:9d:
f0:38:65:b2:a8:d2:a8:d3:00:65:52:8e:a3:69:14:
f2:04:59:90:21:ca:e8:68:3e:a2:8f:78:06:c9:9e:
c8:db:4f:6c:11:39:9e:ca:1e:cc:8f:bf:11:e3:ca:
20:e8:4e:82:aa:08:e1:88:1e:c6:b3:f0:19:40:13:
32:93:40:8f:26:58:7c:55:f6:ac:a7:e4:86:c0:35:
f2:75:3f:7b:de:40:c4:e3:f9:4e:be:5d:27:d8:48:
c6:b6:c1:8b:b5:25:c1:d3:0a:f6:ab:36:60:05:ae:
0d:82:27:4a:8e:2e:45:e1:d4:03:26:c0:26:1c:dd:
85:ea:58:6a:43:b8:d3:c1:a8:5d:0f:76:f4:35:eb:
ac:81:33:f7:c7:cb:34:3e:f3:b6:da:61:fd:3b:be:
82:51:d8:34:d4:08:56:c8:fa:22:a4:6b:df:01:eb:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:37:BE:80:70:14:26:99:E3:60:E7:06:AF:5C:77:1A:2C:F2:A1
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:71:4a:fb:39:5a:8c:a4:7e:dd:e2:d0:2f:f6:2a:60:2b:75:
d6:ca:99:8f:9e:de:19:df:68:e3:1f:cf:54:64:6d:31:cc:70:
58:01:a0:39:84:90:b9:10:8b:8f:ed:02:e7:5e:39:51:79:90:
29:1d:ae:94:ce:ff:db:dc:97:58:c6:ce:e6:ae:56:2e:57:ee:
c7:1c:29:8f:5f:b1:8e:fb:18:e0:de:92:a6:d8:0b:02:cb:9e:
4c:42:60:44:f2:d9:5e:39:5e:82:b4:b3:e0:bc:87:3c:d3:60:
29:b9:20:b5:c7:4f:67:fd:fd:8f:93:66:a2:f4:c3:ef:87:34:
ed:8c:e2:e4:43:29:07:5e:b5:fa:d4:be:d5:79:96:e2:f9:cf:
30:ca:e4:ba:72:df:87:6f:e1:c8:45:7f:f7:8c:e2:91:b8:07:
fa:99:41:59:d6:71:03:d7:27:b7:20:1d:f6:34:3b:da:4c:79:
1f:ac:4b:26:57:b0:bd:5a:a1:5b:cd:4a:d2:93:12:1d:fe:bf:
6e:b0:54:a1:9d:84:18:00:33:72:41:b0:b4:89:65:4d:6e:9e:
f6:52:89:d5:a1:af:46:10:9a:93:07:02:66:55:6a:ad:77:06:
0e:56:b9:7c:7d:fd:13:71:d6:c6:71:50:36:91:ed:90:de:df:
81:57:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:59 2025 by rpki-client