Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
File: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft (raw, json)
Hash identifier: eVrVT9KQgZmEHz1WEoVnbby6FsdvHUg+AdwaAcXZLeE=
Subject key identifier: 92:05:50:9D:2F:95:E2:0C:77:65:AF:E5:A9:01:E0:C6:47:1D:47:B2
Authority key identifier: CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
Certificate issuer: /CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Certificate serial: 019A1FF6A6A649A17642B4782DF31A90F17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
Manifest number: 03A8
Signing time: Sun 26 Oct 2025 10:00:49 +0000
Manifest this update: Sun 26 Oct 2025 10:00:49 +0000
Manifest next update: Mon 27 Oct 2025 10:00:49 +0000
Files and hashes: 1: q6cfXUDveWHdgQWTYKqVwvvOAe0.roa (hash: BJPMM6GNYN6IqCj9i2G5fXzbZjuTVnz0OtAPd8t+eZk=)
2: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl (hash: jx9TatGOBqvQN3kRkhDLeKq8WA87dqhsdPTlBc4RM0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:a6:a6:49:a1:76:42:b4:78:2d:f3:1a:90:f1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Validity
Not Before: Oct 26 10:00:49 2025 GMT
Not After : Oct 27 10:00:49 2025 GMT
Subject: CN=9205509d2f95e20c7765afe5a901e0c6471d47b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c2:a7:4e:a1:72:1d:62:97:e1:a8:7a:a9:92:
69:7c:c4:09:24:16:db:62:c6:06:4f:5b:cd:df:cd:
94:34:4f:06:31:91:bb:c3:00:ee:e0:05:c2:59:12:
e0:a8:0c:f4:03:21:ab:1c:d1:ef:7b:2e:43:77:20:
80:a6:5e:5d:3c:c2:58:ee:40:d2:1e:60:a3:9c:50:
b3:c0:7a:61:c7:06:0c:1e:e5:c1:fa:df:8e:80:5c:
91:c1:84:07:ef:70:19:a7:2e:34:0b:94:f5:42:0d:
4d:42:e3:9c:e0:d7:d0:81:6c:ed:c2:f5:c5:7d:7a:
a3:a9:57:ed:eb:4e:da:b9:d1:bd:3f:8e:4b:48:b6:
5d:2b:6a:78:51:ce:3c:07:e6:ee:59:78:5b:75:0a:
22:a5:e8:7a:b3:02:bb:b5:70:45:62:82:24:4d:8b:
9f:0c:56:e8:67:4f:93:60:19:22:7c:80:73:29:7b:
9c:c0:6c:2d:46:2d:0a:4d:7e:19:64:84:1c:cc:b9:
d3:63:4a:4a:ba:bd:e7:08:ee:e4:49:38:f2:38:29:
2b:5d:66:49:72:93:c5:9a:fa:9d:ba:90:2a:45:fc:
a3:53:9b:9f:2d:20:44:9c:eb:00:bd:02:82:f5:39:
1c:a1:c3:97:c8:67:23:ec:a6:f3:93:35:3f:66:7b:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:05:50:9D:2F:95:E2:0C:77:65:AF:E5:A9:01:E0:C6:47:1D:47:B2
X509v3 Authority Key Identifier:
keyid:CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b3:d6:61:05:cd:bb:13:53:5a:cd:06:f4:91:7d:0d:b4:98:
da:1f:a6:55:fa:6e:00:b2:72:55:fc:36:5b:f2:e9:36:4b:cc:
02:23:ea:0e:e3:42:14:9c:88:9a:47:ab:ed:f9:89:12:c9:c6:
82:be:a8:7c:1b:d7:34:9d:9e:92:91:32:f6:54:15:3b:6e:1f:
e2:0f:38:85:cf:b7:2d:58:9b:fc:eb:37:30:13:e7:d0:8a:a7:
37:82:30:a3:ee:b2:d3:22:7f:5b:ec:85:97:40:3c:1a:5c:a4:
67:18:87:d1:32:d6:14:97:c0:2c:f4:12:2f:5a:2e:01:6d:a5:
86:f5:4d:da:69:ae:45:05:f2:f0:ad:48:90:06:6d:94:ca:6f:
2d:c2:22:26:a2:eb:67:12:42:6c:ef:56:81:82:65:39:32:0b:
77:e6:0c:40:cd:52:86:94:15:f3:0f:45:d0:2d:27:21:a2:2a:
a7:a4:a7:c2:3c:1c:a1:2a:66:86:1c:93:76:5f:36:2d:c8:27:
cf:f8:d9:56:2c:7c:30:95:9e:bd:62:40:ce:c7:29:7e:60:14:
cd:97:fd:eb:3c:f2:97:c5:75:83:9e:8c:0b:b1:2d:01:97:14:
68:1b:b7:f7:e7:fe:6a:72:c9:b2:f5:0a:b2:95:7b:ef:8d:3f:
2e:b8:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 19:11:40 2025 by rpki-client