Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
File: y9lerW0qHa8u9oestMKedgdrKAk.mft (raw, json)
Hash identifier: kpze/kF1jJZaeIe3P9pAfG6VIUyPh7Ea2lwuy2DmA6Q=
Subject key identifier: E8:4F:C5:15:20:7E:21:D4:6E:44:9B:D1:48:FE:A2:B0:A6:B0:03:E1
Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Certificate serial: 019A4E191736B14D22C068991D3725734FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
Manifest number: 0AEE
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa (hash: R+7BGQyfLFShlywgi4Re33H2XJ0XnH/YSJRVXJB4EDE=)
2: y9lerW0qHa8u9oestMKedgdrKAk.crl (hash: e3RPNG38cfiTUUZT2GdOSFznt4ULRSSr8VZxxFccwqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:17:36:b1:4d:22:c0:68:99:1d:37:25:73:4f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=e84fc515207e21d46e449bd148fea2b0a6b003e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:55:5d:22:1b:90:85:86:7e:17:57:97:95:
b9:0f:d2:54:46:f2:a0:c9:73:6b:cc:fd:d3:78:ab:
ed:a3:ff:85:dd:1d:68:d9:f1:74:33:94:b1:9e:00:
16:5d:12:7e:3a:02:5a:f5:51:8c:b7:4c:4f:e6:85:
95:c1:fb:18:fc:cd:09:3d:e1:dc:9c:00:05:ed:65:
43:d8:90:4e:a1:e8:bc:c8:e6:34:a4:8a:80:ba:60:
0b:c7:69:a7:49:df:b0:85:5a:98:e0:2a:9f:f8:4b:
f0:cf:96:ea:7e:6c:14:2d:ef:38:e0:38:04:ac:19:
a4:d4:01:30:21:da:0f:a7:fe:80:a4:d3:67:83:0c:
59:4a:8e:14:83:f3:49:25:e6:24:89:98:0d:e1:03:
1d:96:ef:5a:98:84:12:ac:d1:c9:22:b2:51:48:f6:
2d:68:61:2d:e4:43:51:dc:0c:1e:38:18:77:21:92:
90:3c:7b:b2:96:e4:d8:b6:ec:5f:da:d9:2e:7e:85:
15:54:36:cf:20:84:ec:00:48:a5:ee:55:4e:95:ba:
38:9b:9d:06:ec:0a:2c:1f:91:e3:f2:da:15:98:dc:
3a:75:aa:e6:63:1b:fd:08:3c:c4:05:05:2f:cd:47:
f6:66:28:f1:4c:c9:0e:d0:6f:dc:b9:24:c3:bc:5d:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4F:C5:15:20:7E:21:D4:6E:44:9B:D1:48:FE:A2:B0:A6:B0:03:E1
X509v3 Authority Key Identifier:
keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f6:04:3a:bb:18:fd:ed:dd:17:f8:82:92:eb:55:25:71:b4:
f3:3c:95:aa:2f:7d:5a:9c:49:1d:3d:4e:ad:f8:a2:b4:5f:e8:
e9:a4:af:2c:db:f0:95:d8:57:f0:ae:62:6e:a3:95:c3:2e:38:
96:ef:db:2e:ea:e7:92:ff:ea:52:ce:97:0f:cb:3f:fb:a8:97:
84:76:67:ea:25:7a:bb:b5:a4:5e:bc:72:c5:cd:27:c6:ed:40:
dd:b0:ac:2a:63:3b:d2:b4:15:64:79:69:4d:17:1f:4f:55:cc:
9a:ff:7c:53:c6:90:79:3a:c2:e7:7c:45:45:68:96:85:dd:b0:
6c:40:00:72:66:33:f1:57:0a:9b:6a:5a:76:6d:40:29:26:fe:
7b:e6:bc:44:f8:71:39:dd:7c:a0:2f:f6:fc:0f:5f:a9:26:bd:
16:d4:1e:82:74:01:0a:41:17:37:cc:f2:60:9c:27:e8:82:32:
77:2c:60:77:0b:b5:65:36:6f:0b:bc:df:86:01:e8:d8:b5:f3:
2b:05:21:9f:ca:af:ed:3e:98:e9:c6:45:0e:31:9b:87:e9:10:
95:a7:9c:30:94:20:0a:68:75:15:1f:06:91:b0:e3:72:62:ad:
d0:b7:12:23:58:4c:1c:a5:35:46:bd:60:ff:2e:d2:91:29:b5:
0b:bc:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:01 2025 by rpki-client