Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: mCkeHLgepomDY2rePhUf/Y6q5dDqaFrXfNxGUSxskCE=
Subject key identifier: 10:3B:7D:C5:6E:70:49:EA:0D:36:69:57:BF:50:E6:96:ED:AC:F6:BA
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019A515041A2423F598E45C4F54F0A5A9BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 06A4
Signing time: Wed 05 Nov 2025 00:00:05 +0000
Manifest this update: Wed 05 Nov 2025 00:00:05 +0000
Manifest next update: Thu 06 Nov 2025 00:00:05 +0000
Files and hashes: 1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: ZQD6cv0wB3dBjFHPKQs8B79h6DEgfP4PU8Ir2I7tOaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:41:a2:42:3f:59:8e:45:c4:f5:4f:0a:5a:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Nov 5 00:00:05 2025 GMT
Not After : Nov 6 00:00:05 2025 GMT
Subject: CN=103b7dc56e7049ea0d366957bf50e696edacf6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:22:8e:cb:f3:df:8e:d0:cb:08:d4:da:f7:
9d:0b:d9:45:6a:fc:72:67:69:58:e1:e2:ac:05:eb:
17:0a:84:19:aa:b6:84:41:c6:66:73:d8:00:4e:bd:
da:20:0e:15:53:05:24:fc:7b:27:db:f1:73:84:d5:
16:62:b3:b8:85:5b:e4:5a:e7:94:c0:a4:01:9b:18:
48:34:d7:8d:2a:e2:6e:41:36:4b:d2:d9:64:f6:b5:
08:81:5a:76:2e:df:e5:92:29:bc:9d:e1:05:47:e2:
08:b0:65:b3:a2:62:eb:72:27:fe:be:13:90:51:4f:
ec:8c:44:2d:1c:a7:db:f9:a8:7c:94:76:36:5a:d5:
26:43:90:a0:57:50:ff:42:4b:62:75:b0:96:6b:f7:
63:7d:44:4d:77:11:f4:7e:36:98:c2:f8:da:41:31:
37:c3:9c:b5:76:2a:d3:14:9e:92:50:b5:51:79:d5:
b6:fe:a2:f7:99:94:4c:31:05:c7:7b:e9:2f:d6:0c:
3d:49:6c:db:91:e3:3a:20:d1:b7:6b:2e:06:9c:08:
e9:a6:d2:a6:9a:9d:29:95:b1:c4:3b:3c:b7:bc:e3:
db:6f:ec:8e:8f:75:88:76:9f:48:66:af:d0:83:17:
3f:53:e3:7d:19:f6:b1:b5:d3:01:31:28:51:93:26:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:7D:C5:6E:70:49:EA:0D:36:69:57:BF:50:E6:96:ED:AC:F6:BA
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:38:9f:5a:67:98:74:e7:a1:cb:73:fb:28:1b:ef:e5:a1:82:
76:ae:de:0d:e2:f3:c6:c4:36:38:a9:eb:80:ab:f6:36:76:89:
9d:00:57:c3:81:cc:99:e3:60:13:5f:c4:07:b3:77:80:28:5a:
a1:a4:64:d8:c2:64:fb:3a:35:2c:84:3a:0a:d5:3b:99:e0:20:
6d:3f:e6:20:26:d7:6a:0c:60:fb:b1:bc:6a:35:35:e4:54:d7:
a3:ed:f4:0e:74:b4:55:35:5d:30:33:36:0b:a0:b7:d7:bd:56:
4c:3d:e3:24:3a:bd:41:85:c9:2d:57:21:b4:a0:2d:21:58:35:
18:67:7d:06:e2:f2:9f:ba:a2:dd:85:9d:f8:ef:b4:c5:35:26:
6d:e2:e9:dd:a8:49:c5:fd:10:cf:2a:a8:51:9d:e0:9f:0a:c1:
02:44:0e:a8:37:0d:55:3e:78:f9:53:01:39:e9:f4:a6:9f:10:
0b:a1:15:3d:0a:2d:94:35:98:51:1c:2e:51:20:d2:b6:f9:e6:
d9:c1:d8:a6:e7:6f:ea:b1:11:d9:f7:29:3d:97:0e:ca:37:c2:
66:69:2e:0b:67:3b:2f:85:24:21:5c:2f:e0:61:3d:d9:66:e8:
42:f6:63:33:e6:26:f3:84:76:47:9e:00:e2:3a:32:93:54:a9:
10:16:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:29 2025 by rpki-client