Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: 1dTwNNRmv6LjKAqa+VzwDfMvSl5aUnbZy3vbYjkBL5c=
Subject key identifier: A0:2D:29:67:20:67:C4:4D:C5:A7:7F:9B:D1:D4:E2:08:38:71:5B:F0
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 019A59AF2DDC40A32C0CA49CAA3D2ABC3EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 0D4C
Signing time: Thu 06 Nov 2025 15:00:43 +0000
Manifest this update: Thu 06 Nov 2025 15:00:43 +0000
Manifest next update: Fri 07 Nov 2025 15:00:43 +0000
Files and hashes: 1: IlHeExFCZOwDVGR-pn-Mj6btqHA.roa (hash: G3OUewbUbdIfclHozVugqBGDnmkGwJv9DxeJNbUzFpM=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: dOlMZ6t0fVyjrYVcLKheiLr0izQJDyjBrbNJsFBHG8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:af:2d:dc:40:a3:2c:0c:a4:9c:aa:3d:2a:bc:3e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Nov 6 15:00:43 2025 GMT
Not After : Nov 7 15:00:43 2025 GMT
Subject: CN=a02d29672067c44dc5a77f9bd1d4e20838715bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:b2:63:3a:8d:93:c2:de:e6:bb:90:6b:25:
8f:95:63:76:6d:ff:66:8d:d5:ef:1e:49:6e:1a:2a:
93:ae:ca:c2:68:e9:ab:7e:ca:49:81:06:79:cf:fb:
91:29:60:ed:2a:b5:bb:63:e8:f7:e4:3e:73:57:12:
fe:5f:96:45:9f:d6:70:a5:6a:bc:26:e0:8b:45:a4:
5a:f7:b9:9c:e7:63:e8:83:b0:f3:11:43:d4:f1:a5:
5d:4a:c6:f1:74:85:74:6b:db:c7:7f:63:7c:66:06:
4d:9c:41:8a:7a:24:6a:03:63:09:f7:03:f2:e7:11:
31:62:8e:ea:79:3e:0a:46:1f:13:da:99:12:bf:f4:
80:7d:f5:2c:ff:25:71:22:c0:13:12:c0:de:f9:c1:
de:95:1c:2c:eb:75:ce:96:0f:41:8e:b9:4e:b3:f7:
b5:8b:6f:06:a1:ea:65:ca:18:96:23:b4:59:df:8c:
3b:c7:fd:c1:85:c3:92:6a:fc:5d:62:ea:1a:46:53:
d9:0c:06:cd:64:4e:53:1e:5b:8a:89:c9:d7:03:e3:
1f:38:d4:a2:ce:93:a5:3d:0c:05:8b:2b:be:df:88:
ca:09:4b:b4:dd:92:a7:07:c5:75:72:b0:b9:62:e1:
8b:72:cf:33:8f:6e:59:c0:6f:76:ce:3c:da:12:e8:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:29:67:20:67:C4:4D:C5:A7:7F:9B:D1:D4:E2:08:38:71:5B:F0
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e4:fb:f8:1c:57:f2:22:92:07:01:ff:9b:86:40:a6:0f:80:
c9:b8:28:1e:15:34:3b:f2:b5:a3:03:96:2f:b1:78:c3:db:72:
38:d4:b8:13:b4:20:9d:47:1d:92:20:81:fb:57:c4:31:89:de:
d3:a7:ad:38:ae:e4:bc:72:17:3e:27:b4:79:ee:16:d5:8c:f6:
05:c7:71:a8:37:a3:6e:8f:cb:cf:b6:49:0c:3d:c5:be:97:9d:
9c:57:cd:ca:f2:0f:9d:cf:c4:47:d1:6c:a0:9b:c4:a9:41:9c:
74:5b:1c:43:5b:f0:b9:8c:9c:bb:09:44:fa:9d:ce:03:c2:7e:
a9:6e:a0:a0:b8:6f:ec:91:a5:32:7f:9a:4a:0c:2f:cf:cc:33:
a1:d4:98:0f:a1:de:e1:cf:dd:3d:8d:64:e7:87:91:8e:f3:30:
c6:ac:5c:05:43:07:96:b4:52:f6:46:aa:c0:98:e7:e1:e1:04:
86:17:50:c9:5b:b2:19:07:18:15:c7:2a:33:51:58:d0:35:78:
ac:b2:42:3d:37:27:09:6f:65:f2:5d:b4:a2:57:d9:31:c1:8b:
7f:33:54:73:7c:0c:8d:fd:ca:9a:6e:cd:af:db:10:56:3e:c4:
a9:20:1c:3d:33:4e:ac:13:19:b3:a3:bd:c7:5f:3f:41:cb:2f:
81:00:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 00:39:24 2025 by rpki-client