Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: Ulf6fJVucv+s5zhkzaCp5OzXxIho0RH+FvnyQhzf2dw=
Subject key identifier: 5D:3D:E4:57:DD:D6:B4:D4:8E:0E:21:E3:FB:AA:54:A3:96:30:35:AE
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 019A4D7391C2868562BA5CF4C9876C8E215A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 06:00:10 +0000
Manifest this update: Tue 04 Nov 2025 06:00:10 +0000
Manifest next update: Wed 05 Nov 2025 06:00:10 +0000
Files and hashes: 1: FCsvVRb4swZVn7i4DbPOyl1zfXM.roa (hash: pWG3xc+TD2BjxXH94IjEoL3ycjPpI1BrWH3pnVMhatw=)
2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=)
3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=)
4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: E04bO11pX+mn6mwmjAyKKNPLA1ociz9hncWWwGqNpno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:91:c2:86:85:62:ba:5c:f4:c9:87:6c:8e:21:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Nov 4 06:00:10 2025 GMT
Not After : Nov 5 06:00:10 2025 GMT
Subject: CN=5d3de457ddd6b4d48e0e21e3fbaa54a3963035ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:4c:40:0d:53:0d:1d:ec:ab:ae:89:bb:b8:
dd:f6:1c:d2:33:60:2f:42:59:f4:69:48:50:eb:b2:
8f:ac:d9:35:90:f6:61:89:e8:70:44:62:91:b3:2f:
72:d6:d9:ff:18:c9:00:d9:2d:29:ca:43:a7:36:dc:
ab:70:a2:86:2b:2e:66:7f:70:a6:42:8b:28:16:28:
9b:b3:cd:db:59:0d:0f:b7:b7:ec:01:e6:94:05:ea:
0b:1f:40:d0:23:71:10:26:16:c6:16:a5:56:c7:57:
cf:ec:94:3b:00:83:2b:f4:14:1b:a9:0b:d4:13:4c:
95:3c:ca:65:44:5b:c3:5d:0f:9b:b9:ad:de:69:1b:
49:d5:97:2f:e9:b0:0a:0f:92:00:b1:73:a3:e8:c5:
af:ab:9d:e5:10:fe:7f:28:1d:9f:c4:d6:e2:ef:69:
3a:ac:48:16:ee:f8:5a:13:d7:bc:43:a3:ec:bb:e9:
c8:0e:81:02:b3:8e:10:d1:c9:92:d8:7f:e1:4a:05:
a7:2d:29:61:64:3d:66:ec:d9:00:44:50:d4:a8:e7:
c4:1a:a2:0a:d2:7f:e0:bc:7c:b0:c0:87:f2:2e:d5:
40:15:04:eb:c7:e9:14:d5:0b:3d:83:a3:2c:26:0e:
32:54:99:0d:f5:07:af:99:d8:c1:1d:90:1f:25:1c:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:E4:57:DD:D6:B4:D4:8E:0E:21:E3:FB:AA:54:A3:96:30:35:AE
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:93:09:dd:15:80:88:d9:c2:49:e1:4c:3c:1b:46:5b:63:1d:
ab:eb:0c:c0:64:76:fc:b3:50:3b:af:11:54:21:55:e4:83:81:
38:5b:3a:95:64:3d:48:fa:59:05:03:2d:55:e0:2d:04:1d:c6:
99:b9:8b:82:07:90:b8:d8:52:e6:d5:6a:45:5e:02:65:56:6d:
4f:9a:a0:09:6f:ae:2f:7c:61:a5:75:13:db:0f:ba:bc:cf:17:
80:24:f5:e6:10:31:38:b7:58:3f:bc:84:66:d1:c7:4e:36:6b:
2e:38:7a:68:c4:32:ce:11:b6:4e:73:64:fe:b0:af:11:ee:a0:
09:e3:1b:df:b0:a0:24:db:05:cf:8f:26:74:f3:00:b9:72:99:
30:01:c8:d7:92:b8:cd:af:18:be:9b:5b:c8:5b:ec:b7:bd:4f:
f0:ef:c7:9a:2f:ce:74:ac:a1:e5:5f:c1:90:be:3e:d0:a0:8d:
55:cf:f3:2a:6f:ed:61:84:96:0c:2c:5d:89:3a:e2:3d:9c:c0:
ea:e6:d9:f6:9b:1c:d2:39:05:14:f2:e1:90:aa:f7:68:88:9f:
3b:2c:ae:78:20:6b:fe:9c:37:88:fa:4a:37:c7:86:d2:a0:be:
70:42:95:29:f6:df:74:b0:2a:11:2c:bd:4b:f3:93:5f:02:d1:
7a:1e:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:15 2025 by rpki-client