Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: //AntaJ1YeCW+aBAkSBJUCOuWhRd+A74aTOukobA3qU=
Subject key identifier: 23:99:E1:ED:74:0C:18:20:71:C5:A2:EE:33:2B:2B:E9:48:5A:51:6E
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 019A522CCEA2CB1257DDCF956816ABA61E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 11AC
Signing time: Wed 05 Nov 2025 04:00:59 +0000
Manifest this update: Wed 05 Nov 2025 04:00:59 +0000
Manifest next update: Thu 06 Nov 2025 04:00:59 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: yCYXau8hQlCUUwwToNnFRez/WEgVewIxs+5v2QhyF+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:ce:a2:cb:12:57:dd:cf:95:68:16:ab:a6:1e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Nov 5 04:00:59 2025 GMT
Not After : Nov 6 04:00:59 2025 GMT
Subject: CN=2399e1ed740c182071c5a2ee332b2be9485a516e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:78:92:e1:04:44:11:a2:d7:3c:04:82:dd:96:
54:25:4a:42:13:4d:e0:57:29:7a:71:52:6a:1a:1e:
6c:13:a6:bc:8f:8b:c7:7c:72:59:52:28:8a:e7:dd:
2b:9c:a5:09:9e:26:fb:2e:d6:a7:08:1f:18:19:86:
d1:ac:26:09:af:0f:03:86:b0:19:52:3d:a8:51:ec:
a5:5e:54:cf:9b:ba:68:90:92:60:a5:16:40:19:bf:
60:03:64:6a:5b:ac:c9:c5:86:e2:45:1f:5d:9e:6d:
0b:fa:ed:b0:29:51:d4:96:32:c8:50:65:91:9a:3e:
75:1f:2b:98:71:d3:4b:d7:3e:56:2a:83:7f:02:aa:
72:2c:78:d4:54:1d:3c:44:37:cf:0b:2a:d6:23:b2:
09:fe:2d:99:43:c8:d4:fc:ec:28:15:9c:c2:58:2d:
f1:a6:47:99:30:99:59:81:fb:d9:0a:6b:a8:4a:c9:
ce:5d:c2:0d:10:2f:61:69:44:59:31:05:09:f9:34:
19:db:07:23:dd:3b:90:58:3c:d7:2f:8a:30:cb:50:
8f:c3:08:98:30:bb:ee:bb:6e:ad:ce:3a:a8:e6:4a:
4f:d4:4a:5b:c7:98:a0:dd:fa:c3:5c:c6:85:f0:a1:
cd:01:c9:da:df:9b:56:9c:91:22:a6:02:a6:80:29:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:99:E1:ED:74:0C:18:20:71:C5:A2:EE:33:2B:2B:E9:48:5A:51:6E
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:54:4a:7a:c2:c2:dd:95:87:0e:b6:a7:5f:60:ab:30:a3:17:
37:df:f4:30:d0:5a:6d:10:65:7e:fe:16:61:04:11:e3:4b:91:
3c:7a:95:a1:6d:2b:77:e7:e3:1c:3b:d0:c8:53:31:ed:2c:77:
1f:4e:78:a0:22:8c:d3:66:76:3c:0d:68:0a:93:22:48:38:2d:
c3:64:d3:2b:b6:79:9b:b9:3b:01:ab:63:4f:46:1c:ad:3a:3c:
75:80:a8:89:e8:8f:0d:9d:cf:bf:94:94:6a:bc:5f:ac:f7:55:
f6:ce:7a:29:85:a3:4e:d5:43:e9:20:35:1b:bc:c6:dc:3b:90:
77:7f:d5:e6:b6:ff:e6:28:a6:c4:de:73:6d:0d:2d:0e:a4:7f:
a6:74:3b:97:a4:5a:67:a1:51:08:92:41:54:76:67:5d:85:b3:
57:36:21:85:36:05:11:7f:93:e6:36:5e:ac:fe:70:29:05:46:
05:86:9d:03:2a:0e:31:3c:3a:66:cd:2d:d2:ed:87:53:3c:76:
a2:21:ff:66:9c:03:72:41:d2:99:91:7d:4a:bb:2a:66:15:31:
a9:c7:77:68:ee:0c:9a:3d:33:05:da:5e:68:68:4c:9e:c6:f8:
6c:b9:57:7f:ed:f8:df:32:cb:bf:ea:16:a8:df:fd:70:69:35:
b2:cc:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:22 2025 by rpki-client