Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
File: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json)
Hash identifier: aBOa9YBKBkBuS9d3nqNaUPu0KrEebnRjX0oJZHHSZmQ=
Subject key identifier: 1E:5B:DA:97:AD:FE:C2:B8:E0:A5:CE:20:9B:E2:24:21:1E:73:4D:26
Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
Certificate issuer: /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Certificate serial: 019A72935E442D0224E81305BC58DF8717AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
Manifest number: 0547
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: fOUkBLPvgdmMw3qOCphjRq4t0eY.roa (hash: r4VQRSy7Gza9d4nweiTC6bFhiBWBCqInaEx5ZdTsmu8=)
2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: zy/PuKy9DuTLsUc5bvOUfNqS2HtuiBb5oIBLSy+gavk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5e:44:2d:02:24:e8:13:05:bc:58:df:87:17:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=1e5bda97adfec2b8e0a5ce209be224211e734d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:4f:94:27:8b:63:09:6c:a8:5b:f0:00:8f:
e0:45:aa:c8:9f:48:6a:68:94:ca:e6:02:85:1e:75:
bb:70:c7:37:24:3f:4c:76:69:d7:ec:c1:76:b6:f1:
de:3e:da:c4:f1:e7:e1:e1:5a:e1:43:79:5f:a2:e5:
30:1b:9e:b5:03:1c:2b:9c:31:f2:12:ff:7e:cf:3c:
e2:e8:61:ff:6f:74:9f:b1:99:1e:a7:ba:bd:e9:fe:
3c:0b:de:a4:c4:1e:53:b9:94:3b:d8:33:38:51:81:
b8:c6:8f:44:b8:b0:aa:de:29:81:01:d9:ff:34:63:
26:08:e6:a2:1b:8e:74:db:18:78:a2:9c:0d:c6:81:
dd:44:46:6a:bc:bb:36:44:62:57:f0:f1:51:c6:70:
b3:1a:a9:47:b6:9b:87:1e:e1:0e:f2:a0:e1:e9:e7:
8a:46:a6:2d:d5:81:7e:2d:e4:4e:10:65:8c:03:31:
45:a9:85:7f:c7:9f:af:df:ad:8f:dd:e9:99:39:74:
fa:4f:bc:b2:a4:88:23:c5:00:9f:c9:d9:f2:d6:39:
aa:e6:b0:60:78:dd:bb:25:8c:6d:a4:12:6f:cc:86:
37:72:49:ae:f2:6a:05:b8:a9:26:ba:04:f0:56:1c:
9a:1a:5f:7f:86:c5:9d:49:3f:bc:bb:e8:12:ec:cb:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5B:DA:97:AD:FE:C2:B8:E0:A5:CE:20:9B:E2:24:21:1E:73:4D:26
X509v3 Authority Key Identifier:
keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:35:56:be:b5:f1:69:42:b2:d3:b4:17:68:62:fa:ec:24:cf:
3e:bf:01:e7:7a:7a:24:f6:f9:3b:a3:d8:45:37:99:47:fa:48:
06:f7:8d:31:45:60:ef:51:3a:a6:d4:60:5d:2e:85:bb:0f:64:
c7:39:a1:9b:df:22:6a:2d:1c:8a:dd:7c:14:a3:06:2f:18:9e:
76:f5:65:a5:42:3d:97:f4:45:fc:f1:64:d5:81:8f:d8:da:ab:
b7:ad:ef:4e:9d:0b:1e:52:8c:c5:f1:30:0b:de:9a:64:4e:45:
8e:40:3b:ff:19:4c:f2:b6:a3:9f:41:a2:6e:c6:09:4d:3c:6c:
83:7b:b8:2f:e2:48:5e:dc:6c:f0:60:cf:46:c3:9f:36:b5:38:
0e:be:7a:5e:1a:d1:71:dc:e9:4c:01:89:38:5d:8a:e3:b7:f3:
b6:ee:42:fb:e9:27:4d:ef:b7:fa:65:55:91:43:58:d0:84:cf:
86:a3:fb:4d:e9:2a:5a:ea:64:0c:73:22:2c:e5:ff:4b:a4:f4:
fe:f9:7b:e7:7a:7d:0b:df:cb:67:0d:d7:cc:03:f7:9a:56:35:
7d:a3:b8:d8:c9:fc:7c:15:d7:2f:c8:71:68:05:51:74:64:f7:
e5:7c:89:22:f3:b8:f7:55:ed:ee:d4:c3:af:8c:c4:d2:08:5a:
8e:6a:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:01 2025 by rpki-client