Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: VJc6wllRTsFId4/7M834d2d0/T/uOYhITi4QFZZitsU=
Subject key identifier: 91:7D:47:A3:5C:A1:0E:47:AA:31:0A:E4:ED:C1:9D:89:68:9A:B2:2F
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 01992331008C885F61F5D05313ECD77D98D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 097D
Signing time: Sun 07 Sep 2025 08:00:37 +0000
Manifest this update: Sun 07 Sep 2025 08:00:37 +0000
Manifest next update: Mon 08 Sep 2025 08:00:37 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: 4uc+tGGCTkg2icah9dM9uhqeP81DEnLyqbJqo4phQzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:00:8c:88:5f:61:f5:d0:53:13:ec:d7:7d:98:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Sep 7 08:00:37 2025 GMT
Not After : Sep 8 08:00:37 2025 GMT
Subject: CN=917d47a35ca10e47aa310ae4edc19d89689ab22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:a3:05:a8:87:b5:a1:6c:97:41:51:a1:30:
05:ef:21:d5:07:2a:54:07:c0:4f:f9:19:f9:3e:f8:
b7:6c:10:5f:61:f6:99:53:94:a7:f5:3f:f3:99:fb:
4a:18:8c:c6:93:3b:f7:ef:79:a2:09:92:ea:ba:1d:
e3:7f:8c:f6:2c:2d:f6:ba:82:6b:a8:b8:0d:c4:e8:
b4:bd:62:c5:87:e7:4d:78:1e:dc:37:fd:94:e1:cb:
77:bc:73:ba:8f:67:0a:f6:ba:e7:49:b1:78:39:28:
29:e7:f4:39:32:a7:7f:51:b4:5b:22:55:5f:70:28:
de:ce:82:46:44:24:f8:3c:d0:a0:86:89:49:fb:91:
a7:82:34:6e:a7:e3:3f:bd:84:3e:53:a0:7e:57:44:
35:eb:d3:48:22:20:a4:05:fe:7e:76:d1:47:21:bd:
47:7e:b4:bb:8f:ef:f3:4d:d4:6b:a7:68:90:e5:ba:
7a:47:2f:67:cb:19:5d:28:f8:b6:d4:4a:9d:27:d9:
c2:60:8f:da:a4:49:bb:cd:bf:e3:ce:53:74:a9:25:
ce:fc:cb:03:bc:c0:ac:48:89:b4:10:5d:5f:f7:b4:
11:36:5d:d9:d5:38:fb:74:5a:ea:93:37:9e:3f:92:
83:db:55:23:27:d7:d4:3d:e8:53:da:3a:64:12:c4:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7D:47:A3:5C:A1:0E:47:AA:31:0A:E4:ED:C1:9D:89:68:9A:B2:2F
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a7:3a:6f:db:83:b5:80:66:0f:ed:25:58:09:d2:b9:1d:a6:
12:dc:33:33:af:ff:14:57:65:77:31:b1:e7:0f:da:4e:35:57:
c1:c3:0e:95:25:82:3a:bb:2b:27:18:ae:89:d4:8e:65:ab:26:
5f:5b:2c:3c:ff:39:e0:bf:68:55:62:38:ca:5b:b6:a4:1b:56:
0b:5e:7c:22:72:ac:71:f0:f3:85:0b:9f:ff:d0:03:63:3b:77:
01:53:47:34:de:76:ee:5d:94:13:d9:8c:eb:cc:7d:6b:3e:02:
cb:2c:29:c0:59:a5:9f:07:86:25:a8:29:c6:9f:a0:ea:af:dc:
8c:4c:05:81:f5:bf:41:de:8f:8b:0b:ac:67:e0:9d:5a:c7:7c:
3c:e2:f7:ab:dd:14:0a:b3:df:f3:5e:9e:08:b7:72:bf:16:54:
4c:07:a1:3a:d3:b1:d9:5b:af:62:17:0d:e5:28:9b:96:ab:bf:
9a:00:f1:dd:ce:2a:52:d1:17:ec:57:d4:fe:6a:4c:4b:c1:68:
8a:74:16:d0:e5:12:8e:80:f2:b2:c5:30:3a:62:8c:09:31:07:
50:d1:7d:e1:b1:7b:1c:b4:75:77:cf:78:fe:6c:ce:2d:24:f0:
bf:fe:c7:f6:39:42:ba:a4:37:7b:40:69:25:9a:fb:85:82:e3:
46:a6:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:15 2025 by rpki-client