Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: z+9fnKBZQIUMlQUD+TU8gpVjDGVK6P7LVa4B1vEHgwM=
Subject key identifier: 30:FD:75:E8:83:CE:8C:7D:4E:19:D1:2E:BD:27:E5:B1:CF:3B:55:C9
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 0199627DFCAE5C1B9C6E7E2E234CFA803D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 07CA
Signing time: Fri 19 Sep 2025 15:00:47 +0000
Manifest this update: Fri 19 Sep 2025 15:00:47 +0000
Manifest next update: Sat 20 Sep 2025 15:00:47 +0000
Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: Bzjx2yDlqjsgr1ZbmI+KoSRqEFw4hpQauMk1OxJ22QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:7d:fc:ae:5c:1b:9c:6e:7e:2e:23:4c:fa:80:3d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Sep 19 15:00:47 2025 GMT
Not After : Sep 20 15:00:47 2025 GMT
Subject: CN=30fd75e883ce8c7d4e19d12ebd27e5b1cf3b55c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:d8:84:ec:4c:36:ee:4a:11:80:24:fc:5b:
ee:c4:2b:30:04:e7:32:b6:d8:e5:cc:f2:a9:d1:e8:
26:a4:cd:1d:d4:0f:99:a8:48:97:14:ff:20:1d:80:
53:f0:13:33:69:17:d2:9c:a6:fc:5c:2e:c0:a2:04:
86:c6:bd:a4:23:3b:36:52:d4:9a:05:70:45:3a:8f:
96:83:2a:e9:de:39:d4:7b:f0:d1:f0:9c:24:7e:77:
ba:df:07:05:aa:9c:ba:61:95:2f:7f:cc:3f:3a:0a:
9c:4c:f9:5a:98:eb:1a:c9:54:60:33:8d:77:79:b4:
94:2f:24:9e:2a:94:60:77:d9:bc:5a:f5:77:ca:58:
27:fc:0b:66:cd:23:94:51:ea:6f:92:24:9d:3b:bb:
35:61:d5:66:65:30:92:de:f2:ac:b9:e2:1b:71:4f:
ff:c6:9f:4f:83:c4:55:67:26:18:84:1a:32:d4:13:
21:e6:eb:72:f2:3e:10:2f:dd:7a:d6:e2:c3:76:30:
99:c4:0b:bd:71:bf:fe:33:8c:63:21:72:c7:8d:cd:
0b:32:00:de:8d:05:b5:f3:e4:e8:0b:8b:1b:bc:c7:
bf:49:00:3a:e2:19:d0:5a:29:8f:33:b9:93:de:ec:
f9:1d:af:65:e1:7d:cd:80:d7:93:60:4c:22:31:7b:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:75:E8:83:CE:8C:7D:4E:19:D1:2E:BD:27:E5:B1:CF:3B:55:C9
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:18:8d:85:13:6b:e6:0b:9b:de:a8:0a:cb:d8:76:9b:4f:1c:
ef:6f:f9:09:b8:e4:4c:e2:ae:50:82:d9:a6:ef:c0:70:e0:eb:
19:97:02:0f:86:64:40:56:3f:85:01:04:77:a0:cd:e1:32:c0:
5b:1c:6d:46:52:c2:b0:4a:53:40:5d:75:9f:dd:0a:e3:d9:c7:
d6:ed:44:17:49:98:a0:69:a2:64:65:dd:71:aa:d0:68:07:b1:
b9:2d:d6:9e:11:be:20:37:50:4a:0f:51:8f:8d:34:2d:98:43:
06:aa:5a:bb:ea:22:22:94:d5:ca:3d:38:50:88:8f:45:d2:c4:
1e:ac:1e:3a:76:c5:50:9e:93:10:29:b8:31:4c:58:e4:96:9a:
db:a2:b3:0f:66:bf:1a:c4:1b:ae:99:f8:a6:95:b0:14:b3:4e:
bd:4d:d4:3f:02:76:cd:0c:58:b3:75:c9:d6:ca:07:67:61:5b:
a4:e7:9b:ed:42:3f:48:e4:cc:7d:c6:0e:01:8e:9a:a4:b8:21:
c0:dc:7b:45:6a:28:56:cc:9f:b6:55:8a:07:7c:26:6c:77:95:
d9:2e:ed:fd:6a:92:62:a6:24:52:76:50:72:d1:99:62:36:94:
5f:bb:59:cd:73:2e:af:16:cc:49:9f:ca:b4:8c:89:ac:6f:dc:
42:09:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 23:02:31 2025 by rpki-client