Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier: s6dcrmB0LFAZNqChTive6BJuMT1M97waEh2Gro4C70s=
Subject key identifier: C9:F9:2F:F4:6C:53:88:D2:1B:C3:41:BB:59:C4:16:46:CA:8F:59:05
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 019A7112C208CDBFC9EC8C7C0052522096D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: HD6zC7xfGA0SAuF4e7yz2Af08gs.roa (hash: VEGKVVclN7mqg9gsZ7F7LgAgXxZFarPfa+qJz1ng4Pg=)
2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: NF8r1KYHzKQU5rGzgnmmeMddOid4iIOapcUuIBSEY9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c2:08:cd:bf:c9:ec:8c:7c:00:52:52:20:96:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=c9f92ff46c5388d21bc341bb59c41646ca8f5905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:13:e9:06:e1:55:8d:89:f6:bf:45:90:e8:
63:ec:cb:8a:ec:7a:90:68:38:fa:b8:6c:85:86:9c:
b5:38:85:37:f7:9a:a5:a9:8b:bd:60:cc:45:c9:b9:
d4:65:af:27:7e:2a:a2:bc:e9:75:e8:ff:85:ec:66:
79:20:92:ad:b2:5b:23:43:96:d0:d5:62:7a:9d:4b:
3b:a4:cb:10:cc:89:a7:e8:f0:c8:90:d8:fc:ef:7e:
6c:2a:ab:ce:d0:86:b9:ec:45:ca:24:7c:26:fe:2a:
b4:92:bb:05:d9:03:48:2a:8e:d2:96:41:6a:2c:0b:
5b:fd:11:95:2a:e0:ca:3c:bf:6b:94:44:d9:da:5d:
bd:f3:7d:1f:6b:8b:b9:7b:46:bc:f8:d0:a7:0c:66:
43:84:a4:cb:4c:f5:6a:2f:cb:fc:87:1d:4a:f0:fd:
9d:00:21:72:63:23:bb:b2:9f:3f:f1:d0:e9:6e:60:
af:0b:d5:4b:7f:ce:db:c4:e8:19:b0:91:23:70:cd:
6c:8e:5e:59:46:cf:5c:55:02:1d:c3:24:6e:89:ab:
51:35:fd:05:84:b0:32:17:87:1a:77:75:b2:c6:0e:
26:82:0f:f2:10:24:a9:98:d2:aa:9d:72:6a:d9:3a:
23:66:f2:ee:9e:da:47:06:e0:27:0b:e6:1a:a4:1c:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F9:2F:F4:6C:53:88:D2:1B:C3:41:BB:59:C4:16:46:CA:8F:59:05
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9f:5f:fc:1a:a8:54:37:9a:d8:1c:54:6c:d4:9d:52:68:cd:
bf:58:6f:3f:04:8c:af:ab:93:5b:58:77:6c:b5:1d:37:e2:14:
6e:bb:11:a1:75:34:8f:b2:fa:1d:0a:89:3c:40:dd:5b:72:02:
3d:79:90:38:b8:c6:b7:96:fa:ba:54:2a:83:31:ae:9d:de:a0:
87:47:2f:d6:c1:b7:86:0b:68:55:d2:a5:84:b8:3b:8a:a8:40:
44:db:6c:5b:e4:0e:bc:14:41:b8:10:c1:b2:4e:62:23:76:f9:
fe:15:6b:91:70:40:be:5d:b9:8c:1d:bc:17:6b:ff:2e:31:c0:
5f:bb:1a:7d:1e:a3:f4:18:a4:8a:f8:f9:c7:a3:7f:8c:fa:a6:
43:ad:75:8e:3b:ad:f3:ed:b5:21:2e:39:2d:43:be:43:b8:b3:
10:56:64:8a:f3:78:d5:38:f2:a0:71:15:be:62:47:f9:3e:0b:
aa:ed:bd:83:9e:27:49:d9:f9:72:9f:0b:53:ed:63:70:c2:38:
0b:af:90:c8:12:db:56:6b:ea:eb:fc:11:8e:91:38:1e:f0:b1:
97:3f:c4:93:96:9e:df:a2:e8:46:23:ba:49:c7:ad:ed:06:36:
19:7a:5c:1b:92:df:a4:15:3e:19:7c:69:fc:ec:fb:9d:0e:46:
c0:0c:b1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:35 2025 by rpki-client