Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: IO5BoeuvjSI/ODUVGEPDNIzlz+9YSQY05jh3nWrjXcY=
Subject key identifier: 25:54:68:B1:0C:FA:AC:90:86:2F:B1:5A:16:2D:4D:E7:A5:72:C0:CF
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 019A7225AB242017CBCDEF300383E21EA85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: hwvB8+FkWqbbNlMhSDvv/PR3nFD/M4DT++NdHDPj33I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ab:24:20:17:cb:cd:ef:30:03:83:e2:1e:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=255468b10cfaac90862fb15a162d4de7a572c0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:9d:2f:df:48:37:a2:b6:5f:59:4c:4b:9f:
37:b3:97:b5:7b:a6:cd:87:b5:fc:40:e5:20:d7:0e:
32:9b:91:f1:0e:8d:0a:17:dd:c9:5c:a8:55:2a:f5:
ab:a9:41:36:59:05:67:9a:4f:1f:e7:af:f5:0b:81:
24:72:c5:de:6e:af:45:cd:e2:fb:a0:59:3c:d2:50:
77:b7:92:a5:bf:27:af:87:b8:fd:b8:cb:fd:b3:96:
a2:a3:6a:5f:7d:0b:d3:02:56:8e:eb:61:06:0a:60:
f6:72:f0:46:5d:15:05:fb:17:77:af:3a:4d:5d:cd:
4e:01:bd:ba:42:bd:11:99:cb:ba:f3:e4:d7:57:ba:
29:63:c3:db:7d:60:c8:5a:09:47:8e:ed:f2:21:9e:
e9:f3:9c:49:5e:82:67:dd:14:7a:62:b8:23:8d:7b:
63:fc:1f:86:b9:c5:ba:b4:5c:d4:72:a3:46:ce:9c:
5e:17:71:28:b0:04:0d:a9:57:8e:dc:29:15:0a:c9:
0a:e0:86:89:68:0e:50:7a:fa:1d:49:fa:8b:52:6b:
79:9e:3a:f4:71:24:ee:30:fc:3b:53:27:5d:c7:a3:
3f:a5:7a:07:8a:99:de:17:da:dc:94:94:6f:db:08:
8b:fe:2d:0b:fe:01:7c:81:89:99:a4:85:3a:56:fc:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:68:B1:0C:FA:AC:90:86:2F:B1:5A:16:2D:4D:E7:A5:72:C0:CF
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:dd:8a:3e:4c:c8:3c:13:69:fb:a0:37:a9:c4:1b:63:7e:b2:
7c:6f:4c:6a:28:b4:5f:08:79:e0:0a:89:52:84:a4:bb:1a:f4:
37:52:6c:7f:1d:32:12:4e:92:18:08:52:c1:bf:ec:cd:a4:0f:
8b:6e:a6:ba:f9:3e:1d:43:f3:bc:7d:f1:98:eb:2f:73:8e:2c:
7e:24:e6:a5:2a:8a:49:5c:5f:a3:f9:c0:66:48:e5:c1:a7:e4:
15:4c:22:03:82:12:0f:b2:d5:4b:3a:8f:78:ce:b3:81:bc:1e:
21:58:56:b5:cb:2a:95:35:f3:26:dd:c3:db:d4:f1:d9:57:c1:
d6:ce:f6:5f:68:13:81:0b:e9:40:6e:3c:30:88:75:67:25:7d:
db:3e:33:87:35:21:19:1b:4e:ad:d6:1d:ab:93:df:93:a5:67:
ce:82:b9:8b:26:73:68:9d:f9:82:89:9e:41:64:17:07:54:28:
a2:68:66:8c:71:f6:71:e2:f8:e9:73:e3:5d:29:92:e2:fc:e5:
6e:61:0e:8b:63:b2:92:e3:56:60:7c:b2:05:2f:bf:bd:cd:6e:
ba:70:c5:be:42:77:04:77:1e:f5:f0:e5:e9:dd:7c:60:f4:d6:
e2:67:e4:dd:46:55:28:11:88:1b:5c:07:28:d5:0a:89:57:b7:
c6:8f:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:33 2025 by rpki-client