Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
File: y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json)
Hash identifier: NrPyIz493oi5Qb28oxBxPtbZYhExo1ucSiDbqbojm0w=
Subject key identifier: 3E:E5:85:D9:D8:B7:6C:0E:BF:36:CA:EA:5C:19:C0:E4:BE:95:A8:37
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 019A4DAAFCF2B49DB123DD47E27BCBA1955A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 07:00:42 +0000
Manifest this update: Tue 04 Nov 2025 07:00:42 +0000
Manifest next update: Wed 05 Nov 2025 07:00:42 +0000
Files and hashes: 1: 7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa (hash: 878HhGYlePO6JgY3PtW7VLOGBnrfdtyTWzeH4xsP4g8=)
2: VeBtVkpIYodNfDVL9q0zO2G9fI4.roa (hash: 69DCX1Y+C0YR951ujfa1InW/UlkkHLEEqX2IFa0T65Q=)
3: WFk1Sbl9ffKO0_c5-wWqDgx_UdY.roa (hash: 17TQJSkjsNV4kLocHOeLmKp8frraMCHjxrwGJ2DZ/TA=)
4: YQH8RWxADt9aJV8FpUmZfLr_4hA.roa (hash: as+j57YQ6lscVO9lYUdKRdByZHNNE4AzI7PATyHo/j0=)
5: qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa (hash: k2V4zT3lW1qBoAk74wdn7K6a/aSM0/Ew+2PcshHyMps=)
6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: 8U/MMbvPeS/SOCWkEfskw1ffTr+reIVpiHaZqtxhulI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fc:f2:b4:9d:b1:23:dd:47:e2:7b:cb:a1:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Nov 4 07:00:42 2025 GMT
Not After : Nov 5 07:00:42 2025 GMT
Subject: CN=3ee585d9d8b76c0ebf36caea5c19c0e4be95a837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:69:ad:b8:5f:77:84:ed:a4:77:31:16:fd:
f3:d3:ab:96:e0:ed:31:0c:4b:d2:c8:91:78:22:cc:
dc:10:42:0c:ba:04:06:cb:9d:a4:d5:55:9a:0d:63:
90:32:e1:ee:57:44:f6:f8:a7:f0:9b:ea:d2:39:a6:
b4:9d:c0:a6:3f:39:83:14:70:f2:a2:22:7c:0c:3d:
e8:e4:ec:eb:05:c1:1f:8e:39:ea:14:c4:fc:35:5e:
73:d4:06:46:e1:17:26:a6:f4:1c:24:f1:bb:70:71:
f7:70:aa:4c:85:a0:b5:13:11:37:1d:42:1c:86:3f:
32:83:6f:65:f8:da:a8:b2:47:f0:96:7d:ad:b1:5a:
ad:72:07:69:76:9a:05:43:79:a6:da:10:7d:c2:0e:
48:ab:98:c6:2c:e4:b1:67:7d:58:ca:d1:ec:14:e2:
3a:b7:ab:c3:e6:c1:9a:6b:30:4a:4d:e2:0f:53:ea:
6f:f0:f5:ca:81:a5:11:aa:fe:5b:de:7f:31:55:52:
25:e4:82:e8:64:d9:38:7c:2d:19:a8:88:66:ce:02:
4e:9f:46:a9:b6:75:e2:59:4d:d7:50:63:6c:93:f4:
34:32:ec:a5:31:b7:ad:7e:a8:0b:99:ef:e9:51:08:
25:93:f4:46:18:90:45:c2:85:ab:ea:2c:25:42:b3:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E5:85:D9:D8:B7:6C:0E:BF:36:CA:EA:5C:19:C0:E4:BE:95:A8:37
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bb:e7:ec:d1:44:8a:95:a6:0d:d1:29:3e:fd:ef:75:a9:0a:
61:42:2f:c2:04:9b:8b:a9:c9:a4:77:be:6f:58:02:d5:01:21:
63:6e:76:c8:25:fe:3c:12:d0:84:78:e2:4a:c0:fa:01:1f:0d:
b8:25:4e:9a:86:ec:24:05:92:c1:06:90:d7:2e:c7:bb:35:14:
ae:2d:cc:98:ae:f2:12:b1:f9:a4:40:7b:fe:8d:90:a8:98:d3:
93:8a:f2:79:0c:74:10:62:6f:4a:bf:80:7e:0f:58:a9:af:b0:
31:3c:66:96:50:ec:ce:59:71:9a:f6:b7:e1:e3:10:06:49:9a:
1c:2d:6d:33:37:8b:5e:bf:65:75:cc:54:d3:d8:09:ff:21:27:
68:10:96:0b:83:56:90:db:df:10:4d:a6:2d:c0:7c:d7:62:72:
1c:8b:ef:90:a0:e2:47:57:40:a7:ef:55:7a:c7:e6:72:86:8f:
f5:8a:48:5b:62:e7:c6:e6:ba:a8:08:4d:be:c4:1c:1f:b6:1f:
36:fe:3c:0f:7d:7b:fd:3a:74:c5:ae:5c:94:37:84:1a:6f:8f:
9a:b5:18:39:7f:17:c8:e0:59:a6:6f:33:6a:bf:cf:26:30:33:
f5:7f:f3:44:14:a6:69:c9:13:78:fe:7f:d9:78:0e:a6:17:07:
56:e3:14:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:32 2025 by rpki-client