Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json)
Hash identifier: 0gRjIA8Dti+JTmmZkqJ/X1mvrMG8MwiajTJp+r3tnmU=
Subject key identifier: 42:CF:9A:08:32:07:25:A3:7E:6F:06:3B:CA:22:82:48:97:0C:6F:60
Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Certificate serial: 019A4E869DFD3A53E1D1724CEF53EB02E22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
Manifest number: 13CE
Signing time: Tue 04 Nov 2025 11:00:36 +0000
Manifest this update: Tue 04 Nov 2025 11:00:36 +0000
Manifest next update: Wed 05 Nov 2025 11:00:36 +0000
Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=)
2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: ighOMMyngF16Rm5eWhOIachoJoEcO8JMRv2k+0sSbhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9d:fd:3a:53:e1:d1:72:4c:ef:53:eb:02:e2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e
Validity
Not Before: Nov 4 11:00:36 2025 GMT
Not After : Nov 5 11:00:36 2025 GMT
Subject: CN=42cf9a08320725a37e6f063bca228248970c6f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:76:0b:38:6c:77:18:1e:21:9c:ec:6e:ba:
97:f1:75:e3:d3:e3:d3:bf:bd:3c:3d:d0:b9:57:81:
2f:60:86:69:20:8e:57:61:b7:68:90:99:1e:f8:6c:
ae:4d:45:1c:e8:cf:d6:3b:fc:83:4b:4c:d7:24:2e:
10:5a:76:c3:dc:f7:8f:2f:c6:d3:ac:b9:74:c4:30:
9e:e8:9a:51:80:d6:61:6b:2f:e0:a8:1d:db:3b:ad:
56:5c:1d:81:7e:45:b4:54:b2:8c:b9:68:e3:c0:9e:
45:39:fb:d1:90:bf:ea:97:55:f3:89:c2:c0:6e:e7:
30:81:3f:52:1a:a0:88:cf:9a:7a:75:be:da:37:4c:
7f:76:49:07:5e:0c:87:a7:ed:75:9d:7a:49:83:fb:
90:26:52:ea:18:0b:8e:b2:1d:14:a4:fb:a6:c1:d6:
f7:05:49:73:3d:a2:11:35:a6:4b:c2:b8:ea:da:85:
6a:68:70:d1:5f:24:c7:27:1e:d9:03:9c:49:dc:6a:
a8:f4:a9:db:fe:bf:50:b0:57:f9:5f:5f:40:ac:c1:
5e:f3:0f:8e:06:87:98:b3:82:98:d9:78:a6:00:29:
86:50:49:9b:2a:d3:1e:e5:c8:b8:ae:32:23:70:02:
0b:6f:74:80:74:9f:88:98:4c:38:88:9e:1b:6c:d6:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CF:9A:08:32:07:25:A3:7E:6F:06:3B:CA:22:82:48:97:0C:6F:60
X509v3 Authority Key Identifier:
keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:70:40:81:be:22:29:b2:19:5e:ed:6a:e6:f8:07:bd:a1:f0:
4f:d8:2e:8c:de:31:aa:c2:d1:dd:66:82:ba:bc:ed:3c:73:50:
d4:79:a2:70:e4:78:7b:3f:ac:30:01:cb:e7:34:23:ef:72:cc:
21:2b:c2:3e:e3:ae:19:ec:2b:a3:b7:88:e0:ea:07:ec:89:53:
d5:03:62:18:e3:f3:cb:ef:20:ae:66:c3:26:49:b3:02:95:39:
e0:99:e3:30:b8:b2:ba:d0:cf:7a:dc:35:e7:d7:53:5d:a5:dc:
11:f8:f7:68:15:ad:23:66:4c:1f:1a:e7:1d:3c:f3:be:8d:b6:
42:b7:3d:42:fe:fb:e0:fe:0b:8e:43:33:8d:7c:23:5f:d1:86:
f1:46:a6:2f:3b:4e:eb:7b:80:d8:ac:31:ce:5e:21:54:78:0e:
7e:b2:e7:5e:c9:8d:8b:73:92:7c:d1:ff:47:df:94:52:c7:77:
fd:06:be:e3:f0:53:85:2c:23:8e:36:2c:25:68:8b:66:5f:71:
c6:77:3c:12:14:14:52:11:3c:9f:7b:40:2a:93:72:d5:9e:71:
ec:02:ff:43:44:33:1f:f3:06:e6:d3:2e:3c:9b:b3:36:ee:c6:
65:91:6d:67:14:eb:b7:68:f9:ba:68:b9:6f:6a:26:e1:78:21:
f3:8c:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:13 2025 by rpki-client