Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: qskE1qVPqmLCmYoxFoWg6izO7NnyBRuFEfO2K4faI44=
Subject key identifier: 35:7D:F6:1C:F5:20:F7:F8:BA:FD:9E:54:45:D2:3C:8B:0B:52:73:F3
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 019A7293E72B7E3C61505AF56493E62AE173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 058D
Signing time: Tue 11 Nov 2025 11:01:26 +0000
Manifest this update: Tue 11 Nov 2025 11:01:26 +0000
Manifest next update: Wed 12 Nov 2025 11:01:26 +0000
Files and hashes: 1: wkYXDy6jmP0Af0Mp2rQ3k6yOAAw.roa (hash: UUIGA4ibmPpEgaOdXWNcs3JAI5RUgnFEIrwSbmNcKfs=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: fVdQcRoTILVvVf+vmTpa4fLgUlGzwrXj5ATZeHnY4Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e7:2b:7e:3c:61:50:5a:f5:64:93:e6:2a:e1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: Nov 11 11:01:26 2025 GMT
Not After : Nov 12 11:01:26 2025 GMT
Subject: CN=357df61cf520f7f8bafd9e5445d23c8b0b5273f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:4b:2a:6c:f7:fb:35:e8:dc:05:71:a9:ed:
75:88:ef:fa:06:ca:76:d2:15:52:90:21:45:a0:5f:
e6:23:aa:12:fd:bc:f2:3b:24:d5:71:85:a6:b7:20:
3a:50:ca:77:d9:92:8a:8b:25:f8:f6:ae:56:17:06:
70:fc:6e:2f:94:f6:fa:a7:4a:a1:ac:cc:16:c6:23:
ff:64:31:ab:9f:17:71:05:90:85:99:43:ad:73:6b:
f0:2e:54:dc:de:c7:5b:ef:df:4c:f3:24:80:2c:e2:
c3:2c:ef:d3:fa:27:70:01:ce:76:2d:71:5f:2d:90:
4b:52:77:0f:4b:74:55:87:3b:23:c7:a0:af:54:08:
96:f3:f2:b4:ea:37:62:f5:1c:6b:54:aa:75:90:8d:
90:e8:47:1b:af:ef:0b:f4:93:58:f1:b6:61:5b:f6:
12:b4:73:f0:f4:40:71:97:d8:d6:a6:41:79:16:f9:
40:28:ea:2f:ce:7a:62:58:75:81:0d:11:7a:33:4f:
ca:27:9e:bb:e4:7b:44:c8:35:de:a6:62:69:c8:a3:
22:02:23:c8:71:e8:ed:5f:40:50:d6:9e:e7:f4:b7:
09:69:e6:5a:86:36:ab:7a:8b:ca:c0:26:cb:55:bc:
40:50:b2:b6:6d:d9:51:8c:22:f7:ea:a7:b2:2a:08:
de:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7D:F6:1C:F5:20:F7:F8:BA:FD:9E:54:45:D2:3C:8B:0B:52:73:F3
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:31:87:08:27:45:c0:9c:08:e3:a1:8c:10:09:de:f4:0a:8a:
8c:6e:27:34:df:87:74:e3:9b:2c:0a:00:de:62:b6:3c:5b:f7:
12:14:38:f9:7c:e7:1e:92:f7:bd:52:b9:b2:e4:b3:96:41:99:
86:48:b3:fc:e3:bd:0b:b3:7e:15:24:e0:11:c7:b7:72:b5:7f:
d9:5f:00:e2:b4:bb:26:62:90:7c:fa:41:4b:1a:bc:13:d2:3d:
19:4c:d8:ad:fc:1d:4b:52:3f:32:29:7c:01:cb:09:0a:c5:60:
03:bb:25:21:a9:dd:9c:81:0b:33:b2:6c:bc:22:82:c1:83:0c:
05:7e:8e:00:92:99:d7:ce:a3:ad:e8:c3:66:00:58:f2:c7:cb:
fa:f2:c0:92:98:82:a6:ba:85:7b:b7:5a:0a:b6:71:05:c1:1f:
83:99:af:35:2f:3c:23:3f:19:47:07:b0:e9:59:b4:31:5b:bf:
82:4f:92:3f:3a:1c:35:0c:b1:b8:cd:23:67:55:95:db:96:b0:
78:b8:d6:70:d6:27:11:9d:90:89:35:a2:85:73:1a:29:ac:84:
57:24:45:d7:28:b6:43:67:07:96:c9:b9:da:eb:cd:8b:ac:0c:
ef:ca:6e:db:86:03:31:be:72:19:0a:a5:46:35:83:c6:d7:85:
f3:4d:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:01 2025 by rpki-client