Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: UyuoAmQeaOmsAhKRnSYlH19HbaHF6LlAy44w/vEs/p4=
Subject key identifier: 3B:B4:1E:93:7D:B7:E4:69:87:9E:2C:DF:76:F8:8C:C5:18:D9:0C:21
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019A4E18F164C1D98B2BD7F054DBCE5D3699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0844
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: sL8bHEmsI5TlJdsYseDC7Rh4NmB4emwR4hK0TmPQ1Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f1:64:c1:d9:8b:2b:d7:f0:54:db:ce:5d:36:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=3bb41e937db7e469879e2cdf76f88cc518d90c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:4f:b6:7c:2f:da:4e:a2:50:7e:99:f7:91:
8c:32:f5:3c:10:66:34:91:19:8d:80:02:d6:a2:f4:
8f:16:91:df:ad:ec:04:49:fa:ce:b0:7f:3b:77:d7:
5c:f4:7d:50:ee:db:9a:75:d3:e7:77:56:8a:65:3c:
90:98:17:cc:55:d3:79:e8:98:93:c9:94:ec:e0:45:
6d:c8:bf:de:55:54:8f:01:e8:5d:75:46:02:52:c4:
33:76:e0:fd:91:1c:7c:b7:39:28:ef:22:36:bd:be:
dd:dc:54:a5:ba:e4:8d:d7:d4:40:c6:9d:26:a6:bc:
8c:b3:33:7f:4d:96:41:0e:6b:31:e0:84:f4:00:b3:
6d:36:a1:38:22:ad:30:98:1b:56:66:b9:73:c7:78:
a6:df:8f:a1:45:9e:81:a6:92:bf:1d:f4:52:67:ef:
85:02:67:01:94:58:0d:22:65:34:ed:e9:4f:cb:fa:
1e:f4:52:d2:c7:ce:88:27:81:b5:92:5f:bc:ef:f5:
9e:03:05:35:31:90:7e:a8:c6:90:36:2e:20:d5:fc:
e7:bd:d4:8f:40:7b:56:58:61:e3:b9:1d:9d:21:75:
63:d4:be:7f:eb:c2:64:89:a9:d7:63:ff:7d:7c:3c:
ec:ab:db:46:76:d5:b1:fb:5a:52:25:23:a8:a8:a5:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B4:1E:93:7D:B7:E4:69:87:9E:2C:DF:76:F8:8C:C5:18:D9:0C:21
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b4:d4:c6:88:ba:ae:97:15:df:2d:86:26:71:92:01:b7:e0:
b6:4b:38:39:bc:22:b6:1e:f0:42:8f:9c:0f:85:65:9a:3c:fe:
69:b9:88:30:36:3a:5c:2b:d9:1e:f9:da:b9:f2:f5:2e:e2:71:
a6:4b:25:86:12:3f:ea:df:5b:e9:3b:a7:23:7f:a1:00:2c:25:
e3:07:d3:da:4f:9c:c3:4d:05:ec:44:16:fc:0d:b3:c5:20:81:
3e:22:cb:10:ee:33:f3:b1:9e:09:ee:e1:87:d8:78:93:53:06:
a7:1e:25:78:18:27:09:99:33:86:d3:c8:58:44:9d:2d:4a:98:
c3:35:3d:d2:52:d3:82:1a:27:12:8c:23:a6:48:64:30:32:82:
ae:f2:75:8d:57:e3:d4:e9:8f:34:87:43:32:ba:2f:3e:92:e4:
2a:b6:07:ae:87:d0:64:e0:25:a7:ab:af:b0:43:09:ff:66:a8:
51:54:da:3c:b5:f2:98:62:33:91:10:0b:36:34:4b:04:28:57:
bc:ad:88:02:77:11:1a:25:45:8b:35:08:d7:fc:0e:35:48:df:
16:ee:e3:a8:3f:27:05:d2:b7:60:53:96:b0:ee:5e:c2:6e:0b:
cb:5f:d1:77:7d:25:c5:54:1f:08:6b:29:45:b9:70:57:78:f0:
af:38:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:02:48 2025 by rpki-client