Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: sJN95xrEji+ROWLVdXnNWTD//H/A+A53hT3eHdEbUMI=
Subject key identifier: 51:7B:97:3E:4A:0F:39:9D:D4:7E:9E:CD:EE:E1:C0:76:0E:B4:98:0C
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 019A54F66BAC53080F752AFDACF86A630F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: DD
Signing time: Wed 05 Nov 2025 17:00:26 +0000
Manifest this update: Wed 05 Nov 2025 17:00:26 +0000
Manifest next update: Thu 06 Nov 2025 17:00:26 +0000
Files and hashes: 1: IjHqWxuNpJU8DaK_lff-VC_PVWQ.roa (hash: kBcWX1ntdL3bghAjxPsE3h6Q1xLnJksKwhAqQ4KHWmw=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: U1Ly/Q+29/PwW6EHxms5BTgDn0U+gMSLMJWCEaHyV9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:6b:ac:53:08:0f:75:2a:fd:ac:f8:6a:63:0f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Nov 5 17:00:26 2025 GMT
Not After : Nov 6 17:00:26 2025 GMT
Subject: CN=517b973e4a0f399dd47e9ecdeee1c0760eb4980c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:b4:23:30:03:dc:06:19:67:98:fa:5d:e5:
c1:b1:7b:ca:38:a8:d8:6d:7f:da:e3:09:56:ed:20:
e6:09:5c:37:6d:9b:62:62:8c:5e:ac:d3:88:be:be:
46:4b:5c:a7:70:51:9e:e3:78:c1:1e:57:f2:66:8f:
8d:65:9a:55:d5:44:b9:c1:4b:4b:f5:03:22:d1:67:
44:cd:29:93:96:ba:61:16:1c:e8:c5:7c:be:cb:a6:
05:aa:a6:47:34:f4:36:07:ce:37:3a:f8:2a:f4:17:
d9:b9:e8:f1:a4:2a:8e:7b:93:23:51:32:6d:f0:61:
0c:9a:a4:bb:a1:a7:a6:ee:cb:98:f8:62:95:93:06:
1a:c3:3f:61:7b:9b:9c:5d:bf:a2:6b:70:fe:b6:99:
81:31:82:d2:da:27:18:71:9b:67:04:be:fa:d7:02:
f4:c3:a7:2e:6b:dc:ed:e8:f1:d6:33:41:2e:b3:a3:
b1:4d:16:16:53:00:a9:39:c3:34:f7:10:dd:b6:ea:
5d:2e:b4:7b:33:c5:4a:04:20:89:e5:82:28:5a:ef:
6b:8e:34:54:21:88:16:93:f5:cd:34:39:99:ad:16:
05:21:6f:d4:b3:37:0b:4c:2c:af:b6:60:e2:65:eb:
06:be:3b:fd:b7:d7:a4:89:d5:50:50:ae:2b:f8:1c:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:97:3E:4A:0F:39:9D:D4:7E:9E:CD:EE:E1:C0:76:0E:B4:98:0C
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:92:39:8c:88:46:25:34:03:c2:1a:a6:8e:d8:11:66:60:cd:
54:a2:79:07:f4:b8:6a:71:1e:d4:9c:14:d2:8c:d3:9a:04:79:
d7:6f:95:02:60:db:36:24:be:b0:03:5a:1a:d1:4b:e8:9b:cf:
c5:e5:74:fe:77:69:e2:b0:40:fc:05:63:1b:db:4f:6e:ed:28:
db:d4:10:66:5f:6b:18:85:e9:c8:81:27:3a:12:58:5b:d4:e5:
f2:51:29:f2:3d:2a:e8:05:54:f8:4d:c2:cc:2e:32:4a:db:44:
e0:5b:fb:b6:64:e6:54:f2:44:f1:68:19:60:1c:d4:00:89:c0:
20:6e:06:e3:cd:e0:dd:05:a7:14:9e:19:d7:3f:50:98:31:8d:
fb:8c:8e:ef:84:20:5a:c9:c0:8f:bc:47:f2:57:6e:f6:b3:06:
c4:ee:77:9f:1e:dc:1e:dd:d8:c8:8c:22:9f:4d:d5:b3:ee:f9:
29:7a:ff:ec:ed:1a:3e:52:1e:e4:5c:a2:88:7b:d3:7e:92:7d:
85:7f:e2:51:a0:5e:3f:1c:14:c8:2c:e1:63:df:4d:17:3c:2f:
94:23:2f:09:29:67:38:fa:b2:81:75:a8:98:c3:df:54:fc:06:
fb:0a:6f:23:13:2d:86:04:90:53:39:2d:d0:08:46:8f:56:1a:
15:f4:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:55:36 2025 by rpki-client