Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: X8m2/Fn65KQnSaGbms8+2BMdjAodb9J/iPy2TE8L6Ao=
Subject key identifier: 26:47:91:8C:1A:66:DB:85:36:38:79:63:F8:0B:48:19:F9:4C:E5:5F
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 019A4C97F5A404E6C2F4F7F3BF4AA9D48721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 07D0
Signing time: Tue 04 Nov 2025 02:00:18 +0000
Manifest this update: Tue 04 Nov 2025 02:00:18 +0000
Manifest next update: Wed 05 Nov 2025 02:00:18 +0000
Files and hashes: 1: CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa (hash: LgF/Ta729VSsHPxynFr9+mRLhRpy51NkOyQe2/JSJU4=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: aIZ5skilQsXb8V2qeyd7mWjR8XjC2NBo5jSChgNzpfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:f5:a4:04:e6:c2:f4:f7:f3:bf:4a:a9:d4:87:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Nov 4 02:00:18 2025 GMT
Not After : Nov 5 02:00:18 2025 GMT
Subject: CN=2647918c1a66db8536387963f80b4819f94ce55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:78:19:5e:ab:e7:7f:f6:16:b8:fd:41:63:
69:56:de:64:35:1b:43:45:b7:4b:4c:a5:87:65:5e:
2e:28:90:fc:11:75:a2:c5:f0:70:38:4b:8e:44:fb:
50:6f:5e:cd:9f:60:c3:4b:70:f5:cd:63:e7:5f:71:
08:de:1a:28:2b:58:7f:dd:2f:f4:66:ee:bb:9b:76:
73:89:f4:9a:d6:be:b1:a9:22:3a:96:2f:46:7a:b3:
d9:af:af:02:02:70:0c:14:fa:74:9e:b6:ad:b9:5c:
01:a6:45:16:76:ce:5f:7c:74:81:8b:92:19:d5:26:
5c:db:9f:91:b0:ee:d8:b6:e5:11:8b:d9:a4:53:ad:
c0:cc:1b:1f:01:19:ae:6a:80:b5:34:ab:b6:e3:a9:
15:c0:70:9a:a1:47:e9:45:a6:42:b6:6e:7f:3d:70:
1b:2d:22:c1:cd:16:70:9f:59:78:f5:f0:a0:fb:2e:
ad:79:1c:b9:6a:a9:ab:f1:b1:98:87:54:60:26:90:
d4:20:25:52:c5:63:00:47:c0:30:ef:41:6b:88:95:
01:07:43:9a:b3:be:94:a2:7d:6e:42:00:b3:05:4e:
9b:a2:42:95:15:f4:4d:82:0a:c1:26:8e:44:70:3c:
5c:4b:dd:8f:31:76:45:32:2f:61:76:43:c3:fa:36:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:91:8C:1A:66:DB:85:36:38:79:63:F8:0B:48:19:F9:4C:E5:5F
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ad:4b:e5:66:33:e6:5d:15:25:bc:fb:6b:ba:25:fd:fa:25:
a6:d3:5c:d1:03:db:b9:65:72:45:1a:40:02:3b:ed:41:fb:09:
2c:f9:4b:e3:02:d6:93:7a:87:bc:04:95:a7:9f:63:07:9d:54:
49:10:85:07:6c:ee:77:44:e1:22:ee:dd:cd:16:cd:16:53:99:
42:85:6f:4e:8c:3c:8d:49:17:aa:bd:c9:07:fc:20:29:f2:3c:
70:26:52:35:af:9e:20:f6:ea:65:75:41:49:5c:14:27:f9:dd:
53:be:43:56:5c:fe:8f:f3:c1:e3:cb:89:a0:5d:c5:8c:46:a5:
8e:b3:3f:e1:f5:78:d4:cc:e0:b1:8b:cf:51:5f:0e:12:b8:0d:
4f:51:04:cb:22:13:a7:ba:04:cf:29:8c:65:b4:bd:d6:12:a1:
30:28:6c:a9:4d:0d:e9:f6:dd:15:cd:2e:4e:cf:c3:0f:ae:39:
6e:f8:4c:9f:f4:ff:a1:14:11:9f:96:3f:cf:fc:f0:78:32:0d:
64:79:03:1e:eb:a1:6d:37:1a:ef:c6:e0:85:39:31:be:8b:c8:
41:92:6b:98:1d:30:af:1a:f6:ae:c0:2b:c0:a4:82:84:39:22:
a6:43:a9:d0:68:51:dd:f9:bb:0e:aa:a7:fc:c8:1e:bc:a5:4a:
b9:e5:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:57 2025 by rpki-client