Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
File: y1VBA5WqtJkUDDplzh90DvBw0-Y.mft (raw, json)
Hash identifier: rlZvMi5q2n1/0CfDnMuOsxRo85vSsNroXwx8esEeyWc=
Subject key identifier: 47:F5:C4:D4:5D:61:BF:11:90:9C:EF:B9:E7:D3:29:45:4C:3E:08:25
Authority key identifier: CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6
Certificate issuer: /CN=cb55410395aab499140c3a65ce1f740ef070d3e6
Certificate serial: 019A7225BAA80E0DB5894AD594B44CC93687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
Manifest number: A2
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: BbKEBgKAZuG3-4_d3jMXZeggsD0.roa (hash: IICjx5LS8I3lp2HvjFP9QP+Q2FZJdJqUoqfGvrxQA9o=)
2: y1VBA5WqtJkUDDplzh90DvBw0-Y.crl (hash: Mtg83yF1z/OONC8m0WStssphYYHAMJHtHVuqhk+PKig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ba:a8:0e:0d:b5:89:4a:d5:94:b4:4c:c9:36:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55410395aab499140c3a65ce1f740ef070d3e6
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=47f5c4d45d61bf11909cefb9e7d329454c3e0825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:06:d8:8c:8d:0a:69:d9:59:33:e1:6c:3e:
30:b7:d8:b1:33:c0:63:ea:24:25:7b:18:a4:c9:35:
b1:0e:69:c1:ba:8c:bf:16:5b:6f:25:ad:fc:92:ce:
46:c9:06:ea:f1:b4:cf:49:82:32:cc:12:ff:58:de:
95:84:ba:a4:ab:66:9a:2a:16:22:dd:ff:b5:8e:1c:
4a:ff:3f:ee:ea:66:39:77:d5:67:53:7d:2c:87:13:
e6:ef:ec:3b:2e:c9:ea:d4:a4:36:55:b2:9d:4c:36:
e5:b5:66:43:b9:59:0e:d2:fd:80:7c:48:10:e4:33:
db:00:5e:d2:00:9a:c2:58:1a:8e:bd:c2:29:61:82:
2e:95:3b:67:96:fc:ac:26:af:ec:b9:86:ec:a9:87:
4f:24:e8:43:87:c1:aa:12:54:7f:d5:36:84:db:68:
73:e6:a6:47:b4:47:4f:a1:72:f7:85:e8:0d:6b:9e:
11:1b:c4:27:bf:97:91:06:4c:2b:70:68:88:52:19:
12:6c:53:a9:9d:b9:c9:0a:69:23:67:89:51:9e:4d:
a3:9d:20:e9:30:d6:8c:28:50:29:c7:2c:34:46:eb:
3c:33:95:52:3a:1a:7c:7b:97:7e:88:eb:8c:51:69:
e2:d0:6e:9d:10:65:a0:04:b7:64:97:3d:b8:d4:af:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F5:C4:D4:5D:61:BF:11:90:9C:EF:B9:E7:D3:29:45:4C:3E:08:25
X509v3 Authority Key Identifier:
keyid:CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6c:29:ff:6c:c2:77:7a:21:c7:05:6c:5c:63:3c:22:6a:82:
a5:82:4f:f8:3a:e5:5a:3d:20:3a:40:26:ba:39:42:b0:24:00:
4d:74:0b:34:5c:b0:ce:50:3f:34:5c:5d:3a:8d:d5:4e:4e:7b:
c0:b7:70:2d:1f:dc:b5:f3:05:87:35:82:9a:a5:1d:67:83:c5:
ce:6c:be:52:48:b6:d9:4e:89:e6:6e:45:b8:a6:df:97:29:62:
67:c7:ae:32:74:42:89:08:25:c1:eb:a4:4c:7f:1f:76:00:4d:
4f:55:ce:90:78:14:fb:d9:72:b7:0e:f2:d0:9f:ce:54:85:cd:
d8:d7:4c:70:f5:f6:f9:45:cd:bb:37:8f:f3:09:66:17:42:8b:
b1:82:eb:63:6f:0a:78:f2:a2:43:e9:f4:c6:ed:a7:6a:9b:8b:
92:a6:1c:4a:38:b2:90:73:b8:c0:e0:ad:e2:38:1f:83:08:c3:
0f:4a:65:26:fc:1d:91:96:4e:03:df:88:54:d8:44:9d:0f:5b:
93:1c:89:39:38:96:00:6e:4b:4a:d0:db:36:05:cf:d8:72:00:
b1:28:86:e1:32:44:f4:c2:75:c0:c5:ca:81:8e:e0:71:02:be:
6c:60:fa:1c:79:6b:9a:b6:08:2b:8e:d1:8a:fc:ee:6f:02:4c:
5a:f1:67:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:23 2025 by rpki-client