Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
File: y15v1iT-wGkv5waeN5Ix5STYD7w.mft (raw, json)
Hash identifier: zPHzb/h+CFvYfMkZ1XfyqE/U9qAxZsi67lHvUW/o6R4=
Subject key identifier: 88:FE:4C:24:AB:6E:8F:34:8D:E2:3B:AC:A0:37:41:3E:D0:DF:07:2B
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Certificate issuer: /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial: 019A4E18DC8F90D08FE50C392628507330EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
Manifest number: 11B7
Signing time: Tue 04 Nov 2025 09:00:43 +0000
Manifest this update: Tue 04 Nov 2025 09:00:43 +0000
Manifest next update: Wed 05 Nov 2025 09:00:43 +0000
Files and hashes: 1: 3mViGQZ4y4dgsuOpVqTlOj7Fdak.roa (hash: bm9ouBBryfPy+46YnwBG/A6ErQmwE+ICHvcNK/AHLA4=)
2: y15v1iT-wGkv5waeN5Ix5STYD7w.crl (hash: lZBXeuixcusty/CXo2SkrSMhougpes0EDTMw2KGcaps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:dc:8f:90:d0:8f:e5:0c:39:26:28:50:73:30:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Validity
Not Before: Nov 4 09:00:43 2025 GMT
Not After : Nov 5 09:00:43 2025 GMT
Subject: CN=88fe4c24ab6e8f348de23baca037413ed0df072b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:14:30:65:51:ce:fd:92:be:61:45:9a:31:
4c:a4:c5:0e:d0:f8:fe:fe:23:43:3d:d7:e6:5e:cf:
51:cb:8d:64:09:41:98:c6:90:27:5a:d7:50:80:43:
f4:84:33:c3:c6:1a:fa:dd:e8:c3:80:48:27:5c:b4:
af:2d:3d:ad:3e:07:17:c7:6d:7b:bc:d5:64:6c:81:
4a:bc:7d:67:5a:6e:0b:ae:22:ac:bc:d0:8b:66:a5:
73:0d:25:da:89:71:02:01:b6:ee:8d:f8:58:c5:35:
3f:fc:1b:d2:cf:fc:ef:94:d6:53:15:e5:ec:89:99:
af:13:86:b5:6f:43:fc:f9:47:d7:d7:ff:54:eb:5e:
b4:a0:f0:ec:37:14:ea:25:16:05:75:56:81:fc:0e:
5a:3e:66:84:6f:f9:dd:61:ba:12:ce:8c:44:b7:f6:
51:f4:63:03:0f:de:2f:be:9a:2d:70:04:2d:f2:fb:
fe:4c:fc:16:ae:93:3d:97:60:0d:bb:10:0c:64:34:
2b:29:a5:83:3d:2e:0c:65:81:06:2f:d4:be:77:ef:
0c:6b:6b:8b:0d:8b:b1:01:82:12:54:70:e8:5c:0d:
a6:0d:12:87:27:00:fa:ca:56:af:98:de:cf:f1:05:
53:f7:0a:41:72:7b:47:0a:9c:98:d5:a7:a3:ce:b3:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:4C:24:AB:6E:8F:34:8D:E2:3B:AC:A0:37:41:3E:D0:DF:07:2B
X509v3 Authority Key Identifier:
keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e4:72:3e:d3:4f:ba:02:a6:df:ad:f8:f5:15:ba:d9:8f:33:
dd:07:99:c0:6f:d8:2c:04:f9:b5:e0:c1:89:e9:4e:59:7d:1d:
42:78:67:d0:40:c2:9e:26:32:27:4c:c9:b3:69:ab:24:b8:b8:
8a:39:49:32:17:34:35:bc:62:54:79:0e:a5:1f:c9:b8:54:40:
00:0f:3c:5a:78:36:61:7c:ce:40:07:81:b9:d0:52:1e:d2:0e:
a1:91:51:73:d6:63:47:1e:4c:6d:c3:96:5b:8a:cc:6a:24:a9:
19:c9:2e:fd:d0:ec:07:9b:4e:b3:5a:fb:db:e6:0b:94:1c:a3:
dd:45:8e:75:de:91:26:d9:f5:3b:d0:5b:ce:0e:b2:59:fe:cb:
dd:3f:79:c2:20:bf:5b:4f:e8:0c:14:ad:bf:a1:cc:7f:b7:9b:
a3:42:f0:ac:9b:7e:3c:a0:2f:af:d7:fb:88:e6:fe:9d:74:79:
73:a0:13:c4:b3:f8:ff:91:55:5d:cc:74:36:6c:39:5c:5a:52:
f8:ae:d2:01:0d:f0:b7:48:79:53:df:03:1c:58:4c:86:b1:ca:
5c:ec:de:70:b2:40:e5:41:0c:a7:6d:46:92:da:cd:58:0e:5f:
07:cf:a6:e9:a0:df:0e:7f:4f:bb:07:e4:8c:da:34:80:6c:01:
38:95:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:42 2025 by rpki-client