Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: CPHJtP8iPef4w564a79RFKvAaxP548+jM0OjKAUQaEo=
Subject key identifier: AE:5F:1E:E2:51:89:35:A1:54:4A:56:E4:E9:3A:AA:E9:A0:95:42:03
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019A0F70BA0314514B955B7FF6E5DB997631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 0FD9
Signing time: Thu 23 Oct 2025 05:00:36 +0000
Manifest this update: Thu 23 Oct 2025 05:00:36 +0000
Manifest next update: Fri 24 Oct 2025 05:00:36 +0000
Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=)
2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=)
3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: 8gIiKuvfPSjMXtRI/4F70Lhv+k/lPObAWad/ptu8MIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:70:ba:03:14:51:4b:95:5b:7f:f6:e5:db:99:76:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Oct 23 05:00:36 2025 GMT
Not After : Oct 24 05:00:36 2025 GMT
Subject: CN=ae5f1ee2518935a1544a56e4e93aaae9a0954203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:85:19:5b:81:ca:99:a2:98:ad:40:e0:b2:
00:95:e4:1a:41:6d:20:8d:df:bf:7c:1b:56:72:bc:
08:0d:3b:3d:fb:3e:ac:20:ef:bb:d8:80:f6:de:7b:
29:6c:58:1a:0d:14:da:e9:be:fd:c9:41:0f:bd:78:
56:15:94:0b:6b:c7:4a:29:66:a4:4f:2b:c1:2f:fc:
fc:e4:fd:a0:26:58:86:f5:25:76:97:a0:5e:af:38:
3e:0f:ba:0f:1e:bd:3f:27:f8:9d:3b:79:da:cd:41:
80:80:22:83:72:76:0a:75:a4:7b:2f:db:08:62:b8:
dc:8c:a3:90:1a:2c:ea:45:c6:a1:e0:5c:6c:03:5d:
61:22:3f:ca:85:fc:78:64:cf:b5:9b:06:08:d2:4c:
e2:62:c2:40:3c:ad:d8:74:a3:ae:c9:aa:e2:7e:be:
e5:7f:ea:02:8a:ff:8d:5d:da:6a:64:32:bf:4f:6b:
b8:47:f2:01:0e:dc:b5:b5:97:35:79:03:6d:29:d6:
87:cb:a9:4c:83:84:37:da:a5:0e:78:46:e9:bf:96:
97:bd:1c:eb:44:63:28:cd:d6:d0:fc:f8:4f:1f:2f:
5e:e7:16:6b:ef:2a:ea:9b:85:a3:88:3c:21:9d:88:
df:63:32:38:30:8c:d7:d0:e0:47:81:fd:8c:82:06:
de:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5F:1E:E2:51:89:35:A1:54:4A:56:E4:E9:3A:AA:E9:A0:95:42:03
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:73:74:49:d2:7f:bb:6f:70:23:5e:6d:ad:80:3b:9e:c5:f1:
58:b1:13:ba:f6:cb:d5:2c:f8:f7:a9:b3:dc:c1:c4:35:a3:c7:
5b:9d:fe:fb:ec:50:ea:a3:bb:2c:0c:fa:b9:5f:ec:f8:61:2e:
a6:63:8f:f0:26:81:2d:8b:7a:d1:fb:6d:72:4e:3b:b1:73:c2:
0e:39:04:78:b9:c0:8a:64:a5:48:da:8d:f6:9c:d3:ca:cc:9e:
b9:94:d6:54:c1:8b:34:82:2f:8f:d8:13:7e:c2:8f:51:16:1a:
c0:7c:5b:86:19:a1:fc:1a:98:c8:dc:5e:c8:67:36:60:ef:66:
6e:37:9d:ee:c7:72:b7:81:15:1b:05:d4:ae:f2:0c:36:be:8b:
9d:73:08:a1:38:cb:c4:a7:89:1d:cb:7c:4c:06:d9:be:fc:ef:
1f:3c:f0:5c:01:98:ce:3b:67:b2:4b:95:05:bf:1e:c2:ba:b4:
4e:26:3f:5f:4f:a7:fe:0a:3f:aa:e8:98:86:d3:a4:52:b2:a7:
9a:9e:63:48:4c:7d:1a:b2:bd:21:d7:34:d4:f8:e6:9d:b7:5c:
57:42:b2:37:21:a9:cc:44:f8:07:b6:88:99:bc:37:c9:88:2b:
13:85:cc:5a:d6:b4:0a:9b:ac:e0:73:c0:d1:e4:f9:9d:8f:42:
1f:0e:4f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 13:01:35 2025 by rpki-client