Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: qB3YeEoVRGXf0s5AiBtEIld0A5ziR580aav4qfgUpPM=
Subject key identifier: BD:11:BE:9A:3A:02:9C:B8:90:E0:8D:B7:CB:32:5C:40:25:D0:65:21
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 019A71B8A5FAF3469458BB1E15746C64A894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 1420
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: DwTNlOmlMmnr3bnvrhL+rJYlMSn7Kvrd881WMK6L0s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a5:fa:f3:46:94:58:bb:1e:15:74:6c:64:a8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=bd11be9a3a029cb890e08db7cb325c4025d06521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:57:1c:7c:a1:2c:31:ec:89:42:bc:31:f0:
a6:8c:81:b3:d0:1a:5b:0d:4f:c8:4e:85:5d:a4:fc:
1a:5c:98:ed:0b:59:ef:83:82:be:42:2e:55:57:55:
5b:fe:2e:a8:17:18:f3:63:b2:93:bc:58:ef:20:dc:
8f:2a:af:73:df:6c:1f:c6:ac:ee:5a:3d:37:61:63:
84:ed:67:e0:88:e8:51:4b:89:80:4b:72:cd:42:66:
f9:f2:ae:67:a3:f4:cd:ac:2d:12:3c:07:71:6d:3d:
33:bb:89:66:9f:98:1d:ae:76:3d:2b:ae:a2:f4:41:
e0:4c:67:d0:bc:7d:b9:e8:88:0d:c0:85:09:8e:f0:
2c:6c:22:a7:74:38:4e:f4:0e:61:8f:2e:89:e5:c0:
40:c2:e6:5e:99:67:87:35:81:30:63:ab:5b:e8:58:
d7:43:14:c3:b7:ca:b3:d6:b0:cd:b8:b2:03:af:fd:
ce:58:2a:52:b2:53:93:3b:ba:17:4a:0f:1f:3c:79:
42:f6:11:1e:19:a4:cb:74:44:3c:04:a6:5a:2e:f7:
a9:c1:2c:c4:77:b0:2a:d5:d3:4d:95:3d:ca:19:b5:
e9:d9:3c:bb:11:e9:58:af:fe:ec:f8:d9:ff:44:f6:
d4:d1:63:cc:c5:e8:57:35:c2:d5:03:27:b6:17:00:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:11:BE:9A:3A:02:9C:B8:90:E0:8D:B7:CB:32:5C:40:25:D0:65:21
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7d:02:94:ff:d9:e5:01:3e:93:19:fd:cf:92:14:f1:70:d1:
49:92:e4:17:bc:22:a5:88:83:50:29:e1:c2:34:51:3c:2c:69:
5c:19:51:b9:5a:23:ce:27:b9:47:3f:3e:c5:15:b6:38:3b:87:
26:60:58:35:5a:c2:48:13:51:2d:80:d5:7b:9b:25:2d:de:a6:
cc:b9:69:09:95:50:fd:58:44:08:1b:73:cc:f7:be:d4:b9:fe:
e3:33:71:d0:59:82:46:1d:c4:6c:72:b3:43:f0:a3:81:f6:27:
28:13:f4:c8:3a:3c:c1:16:e8:8b:59:4a:a9:27:57:ba:dd:34:
bd:db:62:85:fb:f4:9d:b8:3e:74:42:bf:ab:69:7b:47:21:6e:
a5:3b:67:59:cb:69:32:89:93:95:c9:51:d3:61:30:22:94:8b:
28:b1:50:5a:93:af:37:1a:cd:b2:77:23:13:d3:d9:05:de:da:
dc:e9:b1:9b:ab:5a:22:e1:fb:89:11:22:dd:69:f7:0c:bc:25:
52:fb:1f:66:80:00:00:ca:2a:ce:99:ca:12:63:a3:ff:85:46:
d7:5b:7b:3f:f9:7f:f9:87:75:b3:ef:7d:48:c1:43:7b:0d:d0:
66:f4:91:8d:70:a9:94:eb:ae:12:1e:12:f5:f4:e5:d5:1b:a4:
af:40:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:42 2025 by rpki-client