Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: XWjj8D7/6qmOH7S+/6K9AC8bQHZF5p3DNNGpXFY1k1g=
Subject key identifier: 90:34:DB:E5:9C:BA:D4:49:08:71:74:DF:09:90:59:B2:58:C5:64:CB
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019A1EAD5A9D017753A15953430CC0B0F181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0822
Signing time: Sun 26 Oct 2025 04:01:08 +0000
Manifest this update: Sun 26 Oct 2025 04:01:08 +0000
Manifest next update: Mon 27 Oct 2025 04:01:08 +0000
Files and hashes: 1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: Sd1A4G0FVPRzH71heV3ZBtWqb8a4Wdyekots/Xwj9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:5a:9d:01:77:53:a1:59:53:43:0c:c0:b0:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Oct 26 04:01:08 2025 GMT
Not After : Oct 27 04:01:08 2025 GMT
Subject: CN=9034dbe59cbad449087174df099059b258c564cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0b:e4:8e:51:9a:4a:61:85:9a:48:4f:b7:6a:
cb:3e:be:f6:d7:06:f2:28:16:48:89:35:5c:a2:6f:
a3:df:14:8e:15:5d:01:d4:3f:96:3c:bc:a9:90:32:
97:8b:9c:d6:02:13:17:67:71:ef:09:ca:73:cf:fa:
e8:ad:76:c5:7c:ba:3b:34:d1:19:a3:91:e9:bb:4f:
33:d2:e7:74:cd:b7:f8:5f:46:99:94:bd:8a:e5:42:
38:fd:af:a1:88:9e:56:a3:80:c1:b0:09:9f:01:2a:
d2:2a:b0:f5:41:b6:50:cd:da:b1:60:b8:bf:69:38:
2a:0d:5f:94:74:4f:45:32:33:e1:fb:13:3f:43:f2:
c1:3e:b6:5b:f2:a2:61:69:06:67:25:31:51:83:f2:
e7:b4:34:3b:84:34:27:be:d0:57:01:6b:d8:1e:3e:
b0:2c:ad:96:18:ea:c8:e2:ab:0b:27:a7:ac:e0:15:
1c:22:bc:b6:a3:af:c8:fb:12:f8:44:09:fa:42:12:
f0:9a:77:88:31:1c:26:e8:28:40:16:25:98:92:f7:
06:45:69:16:00:c8:80:cd:36:3a:e5:92:e7:b0:91:
9a:10:e7:cb:8a:d0:f6:65:1f:3a:1e:b6:18:11:8e:
cd:ce:fd:84:b5:c8:d9:96:7a:31:37:ab:99:b6:5a:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:34:DB:E5:9C:BA:D4:49:08:71:74:DF:09:90:59:B2:58:C5:64:CB
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7a:1f:42:ea:d3:f7:02:14:d7:59:43:9c:e0:28:4d:97:eb:
c2:87:49:25:a6:77:57:2f:28:49:a8:18:d0:9d:a7:c3:ef:6a:
10:b7:ba:cf:f8:b4:77:36:76:3c:22:c2:8f:1c:ec:90:2a:5c:
47:d8:a9:a8:d0:2c:bb:d1:60:b8:f4:4f:11:25:93:98:55:0a:
70:5e:b7:76:26:42:71:75:1e:57:3d:93:ae:f1:ad:bb:cc:a7:
f6:be:09:70:f1:eb:20:7e:1b:28:df:a7:9a:2a:e9:69:44:64:
6a:b6:4a:53:5f:42:76:64:b4:e1:72:66:bb:eb:cd:71:94:46:
cf:5b:c7:1e:2a:be:15:9a:24:0b:cc:b7:d8:18:36:e1:f5:a5:
4f:96:3d:5e:27:7e:55:85:7d:2f:70:03:dd:f0:65:b3:9b:5c:
40:98:2c:b0:18:b0:74:83:e8:6f:39:da:cc:df:2b:1d:77:de:
e9:e8:4e:55:01:b7:5b:4b:59:e9:56:29:65:0a:22:43:14:7a:
b8:21:3b:41:d1:53:cf:7f:31:04:ca:62:28:5b:c7:14:11:81:
6d:cb:34:de:41:ab:70:f2:33:29:d5:9f:fb:78:cf:0a:3f:d6:
a4:64:00:7c:26:e7:a3:59:da:86:0d:d9:89:07:cd:72:97:38:
a5:85:3e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:11:59 2025 by rpki-client