Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: AjO4RGIgMFmxTVBliaHTwNRhYH/n5O4Qmjkxp0vyUa8=
Subject key identifier: 40:15:4B:F7:E6:45:95:7E:1B:64:AE:9A:D9:42:3B:BC:F3:20:B1:20
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 019A7149BC5955C1C89E788DB04AB4C44453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 0A2A
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: C49z2yvmaiCWaE+7e55I0QXFkGzzAKpJfMHkcfwbe8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bc:59:55:c1:c8:9e:78:8d:b0:4a:b4:c4:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=40154bf7e645957e1b64ae9ad9423bbcf320b120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:43:c9:3f:62:82:98:4e:c8:44:77:3e:63:
d0:95:61:eb:96:5e:d8:db:99:16:7e:2e:82:62:bb:
43:d2:0d:6c:65:61:e1:03:5d:5a:69:76:d0:85:56:
ae:18:db:a1:ae:ba:0a:36:97:2b:8e:00:73:06:c6:
02:af:85:7b:0f:d0:c1:75:75:ae:47:f7:46:6a:7c:
ec:2b:3f:72:af:57:e6:66:53:14:75:d2:b4:8f:d5:
b9:bb:9b:b8:ac:6e:c1:97:2d:f0:d1:f7:c0:5a:45:
b5:ec:a8:fb:01:76:d7:8c:00:1b:6e:0f:d5:17:a7:
58:5a:3d:d9:9a:98:01:d8:76:73:cd:4f:f3:7c:34:
49:eb:56:06:82:6c:c0:00:9d:ca:9c:04:85:d8:30:
a4:ac:5a:5f:96:c4:27:1c:16:00:09:a2:42:0f:6c:
85:b8:fd:92:4f:8f:86:f0:41:5c:24:1f:78:c3:e9:
32:29:71:18:a5:86:38:a9:7c:9a:c3:4f:63:53:2a:
54:7b:23:42:4c:55:01:5f:aa:7c:77:57:ce:37:bb:
1f:a6:ba:07:6b:25:1c:be:c3:96:f3:3e:4b:1f:ba:
a3:01:2d:01:dc:0f:73:45:f0:03:de:9c:9e:40:4b:
49:ee:41:ab:bf:cf:23:6c:2d:e8:cf:ee:5c:4d:c7:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:15:4B:F7:E6:45:95:7E:1B:64:AE:9A:D9:42:3B:BC:F3:20:B1:20
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7d:8e:fd:24:00:b2:98:00:11:bc:3b:05:a4:ff:42:f9:d2:
db:cd:b3:bb:04:b8:dd:be:d7:ab:99:73:d5:d3:31:32:6c:01:
db:5d:b6:10:02:67:3e:30:57:14:93:76:44:f0:c0:97:d9:a9:
47:77:52:19:42:c4:2a:7d:a7:74:b4:c4:e9:1f:cd:61:73:da:
f8:0a:42:05:a6:de:ff:76:73:9e:06:ea:64:f1:bd:a5:c1:6e:
11:3b:3e:a2:6a:40:78:ec:25:d0:f3:41:2d:33:c8:e9:48:23:
a9:63:19:4e:6a:24:31:c0:6b:90:8d:f3:9c:68:e8:9d:54:09:
ca:92:d1:89:d6:d2:d0:ab:d8:5d:57:1c:28:70:e4:4c:f9:f8:
7d:58:c7:1e:f9:56:86:b1:5d:1f:d8:59:ae:c4:33:6f:dc:75:
d3:fc:02:40:57:43:bc:29:23:11:2b:63:d1:7c:d6:4b:a6:4c:
e9:5c:6a:06:1c:86:c1:36:a9:2d:68:a3:bd:b6:73:84:06:4a:
fb:de:0c:e2:a8:2d:57:ab:b9:69:6d:c4:b2:40:3c:0a:33:5e:
a0:af:14:93:40:7e:e7:0c:e2:35:94:ad:ee:43:4a:ee:cd:c1:
ba:a0:42:50:0f:83:c0:18:6f:18:ab:fe:3a:35:0b:96:b8:b5:
48:58:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:15 2025 by rpki-client