Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier: fMGvW2nhFktuR3flnnJ5KwTpVDRj3VsbSzNtABN8n94=
Subject key identifier: FC:6C:C8:B5:2F:64:8E:C4:24:6A:D0:AA:70:9F:65:D1:DB:DC:9D:8E
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 019962B572E79638DC7F52F9DC9BF73A7E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number: 1696
Signing time: Fri 19 Sep 2025 16:01:22 +0000
Manifest this update: Fri 19 Sep 2025 16:01:22 +0000
Manifest next update: Sat 20 Sep 2025 16:01:22 +0000
Files and hashes: 1: HD6zC7xfGA0SAuF4e7yz2Af08gs.roa (hash: VEGKVVclN7mqg9gsZ7F7LgAgXxZFarPfa+qJz1ng4Pg=)
2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: QGMrQ9ks9f+kw62qqhHXTNCPd5vOEZlLLb6X37mHHIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:b5:72:e7:96:38:dc:7f:52:f9:dc:9b:f7:3a:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Sep 19 16:01:22 2025 GMT
Not After : Sep 20 16:01:22 2025 GMT
Subject: CN=fc6cc8b52f648ec4246ad0aa709f65d1dbdc9d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:60:39:bf:fc:86:61:32:6b:90:8a:ba:90:
43:a4:44:e6:29:4c:3d:fd:b8:f2:a0:f8:17:1b:c3:
3b:b2:29:2a:ef:0e:12:cb:d5:f0:d8:47:2e:02:d3:
22:7f:32:b6:f3:af:e3:14:a3:9c:4c:61:44:d7:62:
2b:84:26:76:51:d6:86:4d:83:6f:e5:12:4d:8c:29:
d9:f6:9b:16:72:73:8e:38:29:68:2f:ab:31:42:09:
fe:b1:92:57:36:45:09:eb:aa:fa:9d:ae:76:da:31:
81:e6:82:12:58:84:a8:7f:c6:0d:76:25:e9:36:ea:
00:34:45:f6:ca:de:19:c1:b1:83:80:a9:6b:e3:19:
69:b3:d4:3e:22:88:d9:9f:92:3f:36:b0:d4:73:33:
21:41:d9:ff:26:27:6a:13:3d:13:b1:f8:b9:bd:62:
8b:f5:68:63:d5:4b:84:4b:17:ba:00:dc:9b:3d:06:
bd:5a:3d:82:3f:87:ec:b8:7b:b0:05:da:b6:5a:35:
f4:fa:68:29:84:ed:72:24:43:fa:1b:cd:b2:6b:ca:
5f:2e:f1:77:4b:f1:00:34:2d:04:43:d8:52:20:34:
07:d8:c6:f3:63:b1:0e:b2:69:c4:c8:75:c6:41:73:
66:d9:9d:aa:2c:0f:e5:32:35:a0:87:41:30:54:4b:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6C:C8:B5:2F:64:8E:C4:24:6A:D0:AA:70:9F:65:D1:DB:DC:9D:8E
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:19:13:86:9b:da:c6:36:3d:5f:7d:95:47:7c:40:aa:06:ee:
b6:b7:58:aa:ac:8c:dd:2d:87:56:57:a1:b3:c4:56:15:79:6c:
27:a9:77:28:88:1e:d2:2e:7a:26:78:71:f9:82:b6:a0:24:b6:
0d:d7:8a:f6:d6:03:34:9a:95:0f:fb:47:d4:d4:76:0d:2c:81:
1d:e6:18:0b:20:dd:2d:48:e7:1a:ec:f8:20:15:2c:d0:14:ce:
da:ee:59:fb:ec:0b:e4:91:97:65:ba:fa:38:08:83:14:62:f3:
36:06:d7:2b:33:d2:5d:1b:d6:31:d9:1d:fe:80:37:72:74:11:
98:7f:e7:01:bb:fb:0e:c4:d1:84:c5:09:d8:81:af:38:90:4b:
17:55:70:4d:0a:59:73:6b:90:c4:99:0a:98:d6:5a:a5:09:cb:
dc:c2:7b:19:4a:84:86:e2:dc:b4:35:3d:98:63:23:e4:6a:12:
a5:7d:89:ed:1a:b3:e4:cd:89:98:2b:4d:5b:ae:1d:f7:e5:ed:
ee:08:c4:b9:4f:06:46:53:cd:30:11:74:60:32:cc:75:8e:c8:
dc:03:94:4f:c9:20:38:8e:c7:14:5e:24:0d:a9:f7:49:6b:32:
a2:e9:99:7e:d5:45:90:78:a3:26:c5:ff:ac:8a:59:d1:35:d3:
e7:d0:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 01:48:46 2025 by rpki-client