Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: P1xk9Xf0FLnLf/LLKwjT1kPe3VKOaC89fuUvTtqjuCQ=
Subject key identifier: B5:F9:02:7D:8A:B9:AB:AB:D5:8D:41:88:25:D8:11:3D:37:00:CF:D9
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 01992D7E20FD4E360B39D536F53D76A519F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 07A5
Signing time: Tue 09 Sep 2025 08:01:04 +0000
Manifest this update: Tue 09 Sep 2025 08:01:04 +0000
Manifest next update: Wed 10 Sep 2025 08:01:04 +0000
Files and hashes: 1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: ngkT+g7XyrLNESq1Qsrnqiq1TfHUqX3Pj2FvTSvVr5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7e:20:fd:4e:36:0b:39:d5:36:f5:3d:76:a5:19:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Sep 9 08:01:04 2025 GMT
Not After : Sep 10 08:01:04 2025 GMT
Subject: CN=b5f9027d8ab9ababd58d418825d8113d3700cfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:16:1a:29:80:53:07:9e:d5:d8:fb:85:a2:
cc:aa:2c:97:8f:86:5a:49:5f:50:c7:77:bf:98:03:
ac:1b:b9:aa:68:c7:6e:ec:99:26:6f:bd:d3:b8:7d:
2b:90:ef:af:e4:fc:14:85:0d:33:3a:15:76:e5:e1:
7e:24:4f:8c:71:41:ae:ca:93:1b:99:99:76:ee:c1:
9a:fd:de:91:19:38:b4:e4:a3:a9:e0:f1:84:7f:ac:
f2:10:24:0e:9e:55:94:d3:3e:42:d9:4d:b3:d1:98:
6e:7c:09:40:93:95:54:89:e5:41:0f:50:51:b9:48:
36:20:c3:c2:76:76:6b:1c:13:d2:07:a2:b2:86:60:
7d:19:87:6b:d6:9b:35:db:23:be:e9:c7:53:73:a4:
1d:86:4a:8e:1b:45:a2:7a:e9:8a:0a:13:f1:d4:46:
d7:68:de:d3:94:1c:19:e6:f3:f7:09:f5:32:aa:2c:
5b:69:85:40:99:70:fc:f6:43:5c:dd:ce:0f:09:9e:
5b:f3:1c:49:e4:cd:63:27:8f:1c:62:82:cd:63:44:
8b:13:96:34:ca:33:61:bd:bf:d3:26:bc:ae:e4:c7:
31:b5:ba:5c:47:19:57:91:6f:4b:9f:d2:ab:71:a0:
26:e3:ef:cc:b1:c7:f3:d0:ab:34:3b:ae:a7:32:00:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F9:02:7D:8A:B9:AB:AB:D5:8D:41:88:25:D8:11:3D:37:00:CF:D9
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:47:c9:00:bd:8c:bf:4d:ea:33:77:56:8a:1b:d4:75:b9:9d:
05:9c:e7:b3:af:af:de:7f:6e:3e:45:23:3c:89:1c:dd:9a:94:
f8:df:42:34:b5:96:95:14:ad:13:07:24:43:c8:c0:5b:15:7a:
41:ff:bb:d8:41:dd:07:4b:33:92:d0:c6:62:17:88:00:b5:59:
25:d8:e9:64:44:b6:c3:61:f0:22:c1:2c:cc:28:de:44:0f:7a:
7b:0b:3c:14:b8:27:59:77:b4:1e:ed:f5:49:06:11:8a:3f:50:
b7:bb:07:78:c0:86:35:92:21:5f:98:4d:31:e9:a9:81:78:fc:
e0:39:b5:e3:61:00:4c:87:47:09:83:dc:7d:0a:c1:a2:a8:a9:
cc:35:d0:1d:91:06:c5:c1:5e:fe:bc:98:8a:52:c1:29:eb:d0:
9b:c0:0a:25:12:e9:d4:2d:d1:95:63:4c:e7:78:00:c5:bf:65:
1d:9f:29:17:12:ca:df:72:4c:3d:68:c1:83:ac:b8:d9:53:3b:
7d:49:fc:70:f8:d7:56:0a:71:24:50:b6:3c:b9:97:2e:e1:5f:
ea:53:2e:b2:61:64:de:3c:79:93:9e:26:05:c3:84:c4:ae:fa:
2a:67:fa:1a:27:6a:6e:4c:64:2f:57:4a:8f:7b:6e:3f:36:ee:
1b:a8:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:12:51 2025 by rpki-client