Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
File: c_yJAj6sdKsphWP5ndtx9vFflTg.mft (raw, json)
Hash identifier: WdxzvhJTKHP3pndUKagJvaXJ13qUl47ULWIUW0a7llA=
Subject key identifier: A0:D0:77:85:55:EA:BF:CA:5C:29:74:9C:8A:AC:35:86:02:B5:8C:C3
Authority key identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
Certificate issuer: /CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Certificate serial: 019A51F5D991F0224F52713B7FC78B9CBE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
Manifest number: 0B22
Signing time: Wed 05 Nov 2025 03:00:57 +0000
Manifest this update: Wed 05 Nov 2025 03:00:57 +0000
Manifest next update: Thu 06 Nov 2025 03:00:57 +0000
Files and hashes: 1: cS_oROlW9-wwbVo9EJJ4pl2eigE.roa (hash: JJRh33aNovJ8ixT1Vh+De6OT6uSujo/Saa2Iamwl/iI=)
2: c_yJAj6sdKsphWP5ndtx9vFflTg.crl (hash: be1TPDn4Ia1Nj3xhjhCzEkMf7Zn6jiwL0+LBaBCoNX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:d9:91:f0:22:4f:52:71:3b:7f:c7:8b:9c:be:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Validity
Not Before: Nov 5 03:00:57 2025 GMT
Not After : Nov 6 03:00:57 2025 GMT
Subject: CN=a0d0778555eabfca5c29749c8aac358602b58cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:2a:0f:47:a0:78:f3:e5:a1:bb:60:dc:1a:
df:6e:cc:5e:97:52:e5:61:28:ea:36:60:46:2b:79:
c1:a6:6b:87:cd:50:0f:8f:03:46:33:85:d6:08:66:
6a:f7:73:c2:ae:38:ea:80:8c:0d:7e:0c:89:55:21:
fa:fc:f9:e5:51:0a:fc:d0:4c:ea:92:6a:f7:41:b6:
1f:3b:51:af:ae:a1:20:e8:66:5f:43:f7:88:90:53:
73:81:25:6f:17:86:08:7f:de:79:09:36:58:9c:f9:
9b:5b:f8:11:3e:53:14:48:98:57:f5:eb:e8:b8:1a:
27:f2:1a:e9:69:36:42:bf:cc:c2:01:2a:85:04:38:
48:74:db:fa:51:cd:ff:83:56:cf:dc:fa:ba:b0:75:
c0:45:6e:a3:f8:d5:94:a4:73:84:d9:c3:2e:c9:68:
d0:8d:c4:41:42:88:c9:2d:6b:f3:e6:07:56:86:4f:
b6:b1:39:60:90:6f:28:05:47:d6:8d:4c:e7:f5:36:
ef:0d:cf:ea:2f:0d:b9:d2:8e:ff:1e:fd:9b:50:54:
74:46:34:cd:e5:5e:16:f6:79:94:d1:e4:63:ac:1a:
79:a2:d1:62:29:21:7d:cc:b7:24:e3:7f:ab:d3:6a:
26:32:a9:b8:a8:80:cd:3d:17:c5:9f:ca:af:e0:17:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D0:77:85:55:EA:BF:CA:5C:29:74:9C:8A:AC:35:86:02:B5:8C:C3
X509v3 Authority Key Identifier:
keyid:73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d5:40:0a:3a:71:a3:e9:d2:9b:54:a5:c4:0a:c2:20:6d:c2:
96:52:85:45:0e:fb:34:ba:e8:31:46:bb:bc:61:13:60:a7:7d:
42:8c:7a:cf:d7:50:98:b9:ef:f8:62:43:a9:b5:93:0b:5e:dd:
92:ee:b2:35:b9:d6:b4:71:4f:f2:b8:db:1e:7e:ac:97:60:99:
f4:c0:37:af:2a:c9:57:16:f5:95:e3:85:6e:ed:ea:63:1b:97:
eb:80:06:73:89:18:16:71:df:60:68:bc:d3:1a:00:63:14:03:
8f:39:ab:79:34:5a:7d:b1:a3:67:d4:34:55:e2:2a:2b:81:66:
ce:57:d6:05:95:d4:73:c7:41:60:a7:a0:6b:c5:86:20:85:22:
41:1e:5b:b2:df:55:9c:c8:80:7d:b2:3b:18:39:c5:e5:47:80:
86:b6:bb:6d:bf:aa:87:d7:64:1c:8b:3f:db:ca:c6:49:71:ff:
d4:41:cb:cb:f7:65:92:bc:1c:a7:23:ff:94:d7:f9:a8:70:c9:
12:05:19:0e:70:14:29:86:00:5e:6d:da:d5:d3:1c:82:55:8d:
20:da:2f:f7:69:11:59:6a:fb:6e:75:e5:a6:8f:a7:5a:9d:8f:
3a:89:5f:ef:45:0b:ca:ca:a0:b6:fc:60:01:38:ef:28:31:cb:
7c:c8:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:32:09 2025 by rpki-client