Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier: S12/4/V4Jsa1xWilAd8osPebir0nW58/l7n7UNajgvk=
Subject key identifier: 77:AD:C8:46:9F:49:E6:9B:CC:46:9E:89:0B:5F:19:48:AC:43:F3:B9
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial: 019A4D0705C300BFB9911BD9E7D2AA982F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number: 139E
Signing time: Tue 04 Nov 2025 04:01:36 +0000
Manifest this update: Tue 04 Nov 2025 04:01:36 +0000
Manifest next update: Wed 05 Nov 2025 04:01:36 +0000
Files and hashes: 1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=)
2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: t7dnhtBmGR3N3OaUMtyxZIJebHSGJVFtiVMFfUS4l4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:05:c3:00:bf:b9:91:1b:d9:e7:d2:aa:98:2f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Validity
Not Before: Nov 4 04:01:36 2025 GMT
Not After : Nov 5 04:01:36 2025 GMT
Subject: CN=77adc8469f49e69bcc469e890b5f1948ac43f3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:39:d6:3b:37:46:fe:71:20:cc:d0:eb:90:
7b:9a:44:e1:8f:8b:b1:25:d3:40:a6:5b:ff:36:4a:
c3:fd:0d:aa:e4:3f:a5:2b:c0:8a:3f:99:a4:3b:f0:
ab:b3:17:f3:b5:09:27:54:4b:a8:4d:c3:18:f2:45:
b6:9f:18:12:b1:c5:86:65:df:1c:cd:c5:12:7f:13:
a6:00:4e:6e:85:2e:73:53:cf:98:4c:a6:31:15:5d:
8e:ab:60:9b:63:0d:0c:15:27:33:79:af:af:ea:ed:
a4:73:7c:1b:4d:2e:f1:a5:f5:33:29:c0:d6:4d:b7:
ad:ed:2c:83:64:8e:f2:28:08:94:9a:3f:17:c3:0c:
c6:4c:d7:7c:5f:42:69:6d:95:98:25:56:7f:52:f0:
74:a5:e6:61:9a:47:fb:c7:d0:55:e8:98:a3:f6:15:
19:1f:bf:ff:25:ab:81:8b:00:de:ec:7e:94:e6:d4:
52:37:4e:fe:98:1e:8b:6f:0a:75:27:b2:85:1a:d5:
d3:98:4e:72:f6:a9:85:d6:90:58:7f:cb:9a:eb:3e:
b5:6b:ca:0c:99:72:5c:fa:01:b6:c7:0f:b1:f5:6f:
1c:d4:a8:ff:ef:1b:53:0a:50:6b:13:a5:e5:20:c2:
c3:0b:39:13:0c:2e:b3:00:1e:43:3f:68:b6:2a:0b:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:C8:46:9F:49:E6:9B:CC:46:9E:89:0B:5F:19:48:AC:43:F3:B9
X509v3 Authority Key Identifier:
keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:36:be:04:70:18:bd:6e:e0:57:5f:99:7f:06:d5:6c:e8:2a:
7d:87:47:eb:bd:97:8b:d3:b6:ee:ab:df:bd:c4:d6:9d:b2:6b:
ec:5c:98:24:5d:af:58:c4:6c:3b:14:ed:9d:a4:59:72:ea:a4:
76:12:c2:da:a3:51:ee:f5:6c:15:2b:46:71:f3:83:bc:ed:91:
18:7e:14:ce:bf:be:4a:f2:39:4f:96:65:66:f4:3e:46:22:e4:
c5:14:81:2c:f9:d2:1c:48:3e:14:69:32:c4:0e:c5:01:e3:77:
4d:a7:8f:ef:08:de:77:53:56:14:75:ed:9c:67:6d:9d:fc:96:
f9:0d:ba:01:08:76:36:b0:cf:5e:f6:f7:2c:42:92:69:22:fb:
d0:bf:dc:77:e0:82:9b:da:b1:b5:e0:66:59:13:d3:0e:93:5d:
b6:5b:86:93:46:59:07:76:da:7f:c4:3b:f9:83:f6:94:ee:99:
46:24:3c:1c:14:89:27:dd:39:86:6f:fc:26:16:15:bc:37:a1:
1e:2d:ef:4e:ea:79:00:37:99:99:8a:59:84:ee:86:49:4c:04:
ea:fb:0e:64:ac:90:c3:7d:ca:86:16:84:11:8e:f3:26:e2:c2:
0d:1c:62:49:f3:78:d1:91:00:80:75:b4:3a:4e:34:91:21:a2:
04:fe:92:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:19 2025 by rpki-client