Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: pOeVth0latLjqBSekTzH/LbyHSY+gk9XOd9BXG85vyg=
Subject key identifier: 46:B8:DD:9F:B0:59:B9:61:EE:42:DF:02:5B:37:D2:CA:9A:54:73:77
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019A4D3CE7ABE9F5D0BCB64C654DFBE20E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1765
Signing time: Tue 04 Nov 2025 05:00:28 +0000
Manifest this update: Tue 04 Nov 2025 05:00:28 +0000
Manifest next update: Wed 05 Nov 2025 05:00:28 +0000
Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: 3x/Nz/3DPErFTqnm3bPN9H2UKBpwEbKGaASfmUNdPtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e7:ab:e9:f5:d0:bc:b6:4c:65:4d:fb:e2:0e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Nov 4 05:00:28 2025 GMT
Not After : Nov 5 05:00:28 2025 GMT
Subject: CN=46b8dd9fb059b961ee42df025b37d2ca9a547377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:13:45:2d:e6:26:35:93:b5:73:63:fd:06:cd:
a8:a4:c8:4b:b8:e9:d8:da:9d:34:e4:a0:4f:ae:e2:
72:4f:9d:a3:77:3f:00:1d:56:dc:3f:e2:90:7a:96:
09:22:c3:b1:84:ac:9e:cd:a5:7b:6a:6b:8b:07:34:
25:7c:33:55:06:07:00:f7:7b:4c:de:c5:c1:bf:2e:
6c:01:ca:6d:bf:29:16:35:8c:3f:06:cd:a3:1e:a6:
ce:c9:49:3c:e0:a4:36:97:44:31:ba:65:0a:76:e0:
39:5b:13:8c:f7:8b:53:87:fa:58:f4:cd:38:31:38:
e4:99:ce:ba:c6:f8:e1:a7:db:75:d4:23:dc:cb:0e:
a9:4d:95:2f:25:fe:e6:77:ea:1e:91:63:e9:40:ca:
64:96:d7:a3:c9:ab:5b:e1:cf:7e:57:12:a5:3e:84:
01:e9:68:9b:67:ec:23:21:15:f2:45:e2:e3:8c:9a:
92:71:7e:74:df:18:b3:7e:dc:d5:8e:52:ee:19:12:
3d:29:2a:b5:e9:da:ae:cc:7d:a1:67:d7:8f:b9:0f:
64:15:34:44:cd:a9:29:8c:0f:b5:5b:13:5c:fb:89:
a8:10:35:39:07:58:7c:64:42:07:69:12:38:2d:6e:
05:d5:dd:0e:54:ea:e5:2b:ba:1e:5e:27:04:d0:ef:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:DD:9F:B0:59:B9:61:EE:42:DF:02:5B:37:D2:CA:9A:54:73:77
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a5:ef:9e:af:b5:19:c9:81:fe:9d:e9:b6:26:a7:9c:2a:10:
78:af:4e:8c:9d:d8:e6:fc:af:48:dd:19:5a:40:e6:ff:d6:32:
bb:c2:6d:bc:d4:10:33:b7:24:e3:82:fa:46:2f:fa:29:8e:e5:
52:37:3f:36:18:3c:b3:ed:a8:02:a2:7a:bb:32:8e:cf:20:de:
ee:ab:08:dc:79:1b:d0:a5:ed:b6:a5:71:97:13:bc:85:f4:5d:
90:e9:f7:6c:5c:c5:87:c9:dc:9c:3c:c0:1f:a4:1b:8b:10:4b:
21:36:bc:ac:50:06:94:da:e1:eb:6d:5c:33:ff:aa:3a:b1:b5:
c4:b1:2d:03:93:e8:61:76:cb:55:a4:85:fc:e5:0b:78:7d:42:
44:43:9c:1e:66:8d:eb:35:af:52:08:55:dc:29:62:c1:8c:b0:
4f:d6:94:91:dd:50:58:02:a5:22:5a:44:a0:1d:e8:42:6d:b9:
85:5e:9c:c1:fc:4e:a1:1c:05:6f:0d:41:47:7f:98:80:0a:fc:
e2:7b:d6:91:54:08:43:72:39:4c:22:da:76:eb:c0:fc:a4:48:
2e:75:0a:8e:9f:f0:3a:90:64:0a:30:84:4a:0f:ba:d2:7d:7f:
1a:d2:2d:e1:8e:5f:c7:e5:e1:c4:44:af:6f:e0:fe:05:1e:38:
4c:bb:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:05:19 2025 by rpki-client