Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier: Bmmm/Yp8KIGKas3BZVBLmcLgjhqBYMa5Gc2TN6+cRDQ=
Subject key identifier: 5F:86:72:AE:BA:D6:E0:AF:07:CA:30:F7:F6:0C:54:CC:5A:05:AA:53
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 019A4C611496E579E154C0F629FFE03215DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number: 0BE7
Signing time: Tue 04 Nov 2025 01:00:21 +0000
Manifest this update: Tue 04 Nov 2025 01:00:21 +0000
Manifest next update: Wed 05 Nov 2025 01:00:21 +0000
Files and hashes: 1: hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa (hash: scGqiYOmrM2j/apqj1QvggRupECIf8XpZkFfLXcvrsc=)
2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: q/Hwm4AYHWSFpvhPIZuhss74I9tcs32a4XrJ08RnQUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:14:96:e5:79:e1:54:c0:f6:29:ff:e0:32:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: Nov 4 01:00:21 2025 GMT
Not After : Nov 5 01:00:21 2025 GMT
Subject: CN=5f8672aebad6e0af07ca30f7f60c54cc5a05aa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:51:47:31:52:bd:72:a8:d9:89:4d:e7:98:
cc:78:50:25:a1:ef:71:dd:e5:47:a5:a7:66:3c:48:
d3:a3:1d:6e:a1:d9:5c:ce:c6:49:de:32:68:e8:30:
a9:18:e0:39:c3:d6:3a:84:49:f2:78:ee:f2:2c:11:
09:56:84:86:52:de:04:38:07:97:e1:ab:c4:93:7e:
b7:fc:bc:1a:99:30:ff:15:32:c4:a4:1a:90:9b:25:
15:c1:22:d2:23:f8:aa:92:05:5a:43:21:67:43:7d:
f5:42:7d:e7:c6:7d:b4:fb:67:e0:25:1e:43:a2:6d:
40:86:95:bf:39:5d:44:b0:0a:ea:d8:42:31:30:01:
48:af:ce:c3:01:31:c4:7c:f4:e7:06:c0:89:17:3c:
82:19:cc:dc:59:8f:fa:d5:d5:7e:a8:ed:87:59:73:
1c:be:2c:a4:ad:99:f1:b3:27:f8:ba:79:ca:9e:1c:
fb:b2:c8:1f:25:4e:fe:cb:a3:ac:c4:b5:bc:bb:89:
1d:9e:eb:c3:25:ba:a1:b8:6f:19:2d:d1:dd:af:36:
a8:b6:80:5e:a5:d6:51:2c:2f:ab:ce:28:00:15:db:
c8:d1:92:ef:29:5f:65:d0:6c:b4:2e:e9:31:21:27:
8b:a6:d0:13:08:d1:a0:5c:94:16:db:ee:70:08:d1:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:86:72:AE:BA:D6:E0:AF:07:CA:30:F7:F6:0C:54:CC:5A:05:AA:53
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e6:aa:56:1b:b1:71:7b:c4:99:bc:c2:ee:7e:2d:36:6a:20:
f2:80:f8:26:4c:b5:2d:24:81:a5:10:bd:9d:02:a4:7e:b9:7a:
3e:2c:e2:81:82:2d:a2:ce:32:20:af:41:5b:19:8a:dd:45:77:
cd:90:2f:62:86:45:59:b1:f3:1b:b0:d4:03:b3:e1:32:6f:09:
8b:41:9c:8b:21:61:f9:4f:3f:77:3d:33:e9:87:26:f3:58:93:
28:fc:b5:e6:24:94:fe:a3:9e:0a:d6:c5:c9:ab:53:7d:5f:2c:
4b:89:31:3c:78:01:b0:f4:25:68:f7:a2:ce:40:87:4d:45:ad:
b4:42:15:9d:3c:70:af:86:44:38:70:89:db:7a:fd:85:52:df:
6a:43:a2:ad:64:84:ea:1e:a7:47:ae:95:ab:40:0c:54:f3:fa:
94:4f:1e:46:ba:7f:76:0b:3c:a1:0b:fe:07:94:36:bb:59:83:
db:a9:34:c8:76:c9:b3:2d:20:4b:29:1d:fb:f5:da:14:20:21:
ee:e2:a7:18:6d:e6:32:b2:da:f4:ad:91:c5:1c:70:09:a4:74:
c5:b1:cb:9b:6f:5a:92:36:f8:eb:f6:5a:67:e7:f8:9f:18:fa:
4d:0f:6f:76:eb:a9:0e:2f:f1:96:ec:8b:a9:c0:9d:64:16:6b:
6f:8c:2b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:52 2025 by rpki-client