Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
File: y5-GErfxR1ABa4SMQvYN82rYMtk.mft (raw, json)
Hash identifier: aHaO4G1wzM8qqIDhvOb8/AnDC51N7DNNBZWbIJ/lWx8=
Subject key identifier: F8:12:AB:4F:DB:5C:DB:41:BC:6A:3F:74:1E:7D:F8:00:EC:AB:68:99
Authority key identifier: CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
Certificate issuer: /CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Certificate serial: 0199239FC55F82235172A051E4ED4810063C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:37 +0000
Manifest this update: Sun 07 Sep 2025 10:01:37 +0000
Manifest next update: Mon 08 Sep 2025 10:01:37 +0000
Files and hashes: 1: 35Hkh6WGB56LhQUZWJy4fWu8adc.roa (hash: N+zjw78vBIKP/bKJa3b5qGQ6N/RlG9tWFNOT+GZrtRA=)
2: y5-GErfxR1ABa4SMQvYN82rYMtk.crl (hash: Iulbs2Cio75jUf18aK6gLv2IaGfv6spxsTThX/uROhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c5:5f:82:23:51:72:a0:51:e4:ed:48:10:06:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Validity
Not Before: Sep 7 10:01:37 2025 GMT
Not After : Sep 8 10:01:37 2025 GMT
Subject: CN=f812ab4fdb5cdb41bc6a3f741e7df800ecab6899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:37:a2:44:f1:d8:43:45:31:82:1b:d9:d9:80:
8e:61:b9:d4:12:11:dd:89:fb:e4:35:39:1c:b0:57:
83:36:28:7d:21:a8:a1:a9:8f:59:20:f1:cb:af:e5:
c4:23:52:a9:85:78:e5:3b:0c:b9:6d:fd:84:4a:2f:
c0:43:cb:88:bd:81:1c:bb:52:d3:e1:0e:7b:b0:d4:
92:85:ff:b8:c4:4f:05:3b:cd:87:04:0f:a0:89:12:
f8:78:46:69:e7:4b:d0:1e:e5:ff:fd:6c:a6:a1:ed:
d7:cf:17:b5:53:c9:70:fa:a3:8a:38:e9:cb:f7:da:
12:bf:04:ad:b7:75:40:88:cf:ce:35:32:0a:85:bb:
a9:a1:97:7c:9a:7a:62:31:c1:1f:d7:08:ba:d4:ff:
84:ee:50:f3:54:05:13:f2:c0:79:92:2c:aa:51:09:
9e:da:b7:95:8d:dd:f6:b7:b5:59:ee:59:7d:7c:40:
11:4a:65:b8:07:1a:b1:6c:7c:55:7e:a0:23:dc:43:
90:28:62:9a:57:aa:e4:3b:3a:7a:d8:82:31:64:85:
d4:77:f0:46:ca:ac:df:f3:97:0a:86:a7:5c:68:fa:
eb:39:aa:f0:e4:a5:e7:4b:4e:ec:6e:4d:7d:32:23:
98:fe:05:a3:69:78:1e:d6:dd:d5:77:0b:5e:30:3c:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:12:AB:4F:DB:5C:DB:41:BC:6A:3F:74:1E:7D:F8:00:EC:AB:68:99
X509v3 Authority Key Identifier:
keyid:CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:30:0d:03:90:6c:c6:75:03:e9:60:ba:8d:80:ef:3d:e1:e9:
77:9f:da:35:12:4a:56:57:7e:37:4f:da:fd:82:9a:a8:19:49:
1d:23:2a:74:10:ac:c2:2e:b7:53:17:d5:3b:66:fe:c4:f8:dd:
50:5d:5a:e3:f4:69:c6:ee:f8:33:4e:05:29:c0:cd:44:00:99:
a4:d6:76:4b:ed:21:40:3c:3f:fb:3a:1f:f2:97:97:94:4d:0a:
ab:f6:06:c2:15:83:33:71:48:69:6d:6b:5d:18:4c:1e:c5:f2:
18:75:19:47:b7:ff:a0:9c:ce:dd:ad:7b:e9:51:a1:ad:4c:14:
1a:17:9b:a6:6d:4a:d8:6c:28:0e:b2:99:86:32:bd:aa:46:60:
00:7e:4d:04:ff:0a:1a:3b:1e:14:78:5f:9d:07:d0:55:53:13:
31:47:fe:9c:3f:2d:9c:bb:dd:2d:a9:52:db:68:17:01:44:0d:
81:63:63:a4:0b:a0:f6:e2:d8:0d:47:6d:e7:a0:cc:3c:93:13:
e3:9a:5a:07:8b:23:54:4f:5e:02:ba:7c:61:77:c2:8a:7d:e7:
54:78:ac:04:1a:11:d2:c0:5e:5c:24:ca:40:13:d0:29:d9:98:
0f:95:f6:ec:bf:84:b4:e3:31:5d:ec:10:88:61:16:69:e9:05:
37:c5:24:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:43 2025 by rpki-client