Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
File: y28gQNlMmVsEYdxRFKTAhzUemfI.mft (raw, json)
Hash identifier: w6hSaNJQhKtX3uTGa62/5ODPMUjVGukKnqfYxyVlpWw=
Subject key identifier: 9C:EA:5F:2D:CE:BF:DE:35:14:8B:D1:E7:06:05:4B:F1:A3:6F:69:3B
Authority key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Certificate issuer: /CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Certificate serial: 019A4C9864100B68AF23204995D51D46D619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 02:00:46 +0000
Manifest this update: Tue 04 Nov 2025 02:00:46 +0000
Manifest next update: Wed 05 Nov 2025 02:00:46 +0000
Files and hashes: 1: GZvlrhLuu4HVXkSTwCKlou9bVWU.roa (hash: 0h9dmtj/ChXszmXCtnSUjPduSyp6Ohgp/17C67cDST8=)
2: _YoOTD4iLAO7_l4DScmyMvRtaX4.roa (hash: DGENdYz2lNUjIanoXnChMfFs5sC04hN+r7u4ABAXLkU=)
3: y28gQNlMmVsEYdxRFKTAhzUemfI.crl (hash: iP7dOwm3+5FvcLzffJy/C8d7J6JBkFsBQSAy0g3zJlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:64:10:0b:68:af:23:20:49:95:d5:1d:46:d6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Validity
Not Before: Nov 4 02:00:46 2025 GMT
Not After : Nov 5 02:00:46 2025 GMT
Subject: CN=9cea5f2dcebfde35148bd1e706054bf1a36f693b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:bd:1a:49:93:ea:d4:ad:6f:b1:d2:0c:0e:
56:40:f4:27:2c:6d:d6:48:9c:dc:3f:76:08:34:b8:
26:62:1c:e1:30:92:12:63:75:5d:5c:92:0d:52:1d:
4c:62:6f:d7:7d:5a:12:61:9c:19:0d:44:9c:ef:36:
ee:26:ce:40:73:c4:40:71:31:58:37:57:b2:73:b6:
dc:b0:d0:11:89:5e:78:b3:70:da:16:04:72:75:8e:
af:36:b4:aa:a4:ba:70:03:cb:7b:4b:e3:4b:1f:ee:
59:35:e4:8c:0c:0b:01:92:1b:b0:29:97:d8:fe:38:
ed:6f:33:7b:40:70:f3:6f:f1:69:a2:e2:0f:a7:84:
11:3b:2b:86:64:66:cd:9f:86:25:1b:94:23:4c:62:
23:bb:66:4a:17:61:2e:e5:65:33:71:19:fb:65:f3:
8c:2c:e3:39:a7:f5:bc:82:05:e2:50:4c:03:6c:aa:
aa:dc:45:9e:07:e1:3c:89:a7:51:41:11:17:4a:b6:
48:71:87:ed:8e:fd:5a:cd:8c:d8:48:8c:68:70:73:
92:af:b5:d1:ab:79:7b:32:9a:b2:37:fa:4a:df:bb:
4a:97:74:59:0a:ee:a1:35:a8:08:9e:53:ba:3e:54:
3d:f9:24:9f:02:92:58:d6:56:f1:db:a1:9e:19:58:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:5F:2D:CE:BF:DE:35:14:8B:D1:E7:06:05:4B:F1:A3:6F:69:3B
X509v3 Authority Key Identifier:
keyid:CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2f:0a:03:85:55:32:ed:b6:f4:35:40:7f:27:d5:56:3d:4f:
cd:1f:99:73:d4:35:3b:62:00:dd:06:b1:8f:ff:6e:fb:70:b0:
f5:0f:30:08:30:e1:ae:a6:4e:ac:ce:82:82:cf:f4:60:7d:94:
6d:da:9d:65:97:4a:96:f2:65:1c:aa:92:50:d6:88:3a:4d:b7:
48:25:24:73:2e:f2:d4:be:9b:e6:fb:ff:93:81:37:75:ac:b9:
9b:44:9c:d4:c7:c5:61:be:9d:b8:e2:2d:2f:e6:ee:cc:cd:ec:
9b:46:88:e4:ec:de:ca:a9:6f:12:4d:af:04:5e:64:1e:5d:c4:
e0:5a:02:85:94:db:34:0d:c3:53:b6:00:e1:71:b6:6d:56:e6:
c4:62:a2:dc:fa:67:b2:f1:a7:d6:ee:a9:8a:2f:fe:ed:de:39:
ae:d3:67:d2:4e:b1:e1:52:bf:0f:04:4b:65:43:fe:c2:31:5d:
29:79:9f:ce:6c:9e:98:84:77:b5:bd:2e:7d:22:20:58:96:67:
cd:b9:5f:23:52:91:88:17:7c:0c:ec:73:75:82:ea:ce:cc:03:
5d:b9:9a:87:57:ac:53:2d:50:0e:d2:89:9f:96:16:e9:bc:90:
f3:6a:79:54:ca:80:4d:2b:f6:f1:dc:f0:55:a0:92:64:de:1e:
fa:55:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:31 2025 by rpki-client