Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier: IG1bNMyprov9fcbCsM2f04YNst4DRjKllX3r2nt7LN8=
Subject key identifier: 9F:BF:75:5E:66:89:2E:DD:70:56:AC:DF:28:5E:4C:4F:39:28:AB:5F
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial: 019A71B94A27C8201D3B797D4CC34C4A9BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number: 13B1
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=)
2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: 25D1Dd4jo5+NFRpFeTPE9uvWWu9AOWuMaXSTY0uZEgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:4a:27:c8:20:1d:3b:79:7d:4c:c3:4c:4a:9b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=9fbf755e66892edd7056acdf285e4c4f3928ab5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:77:21:26:f9:6f:55:32:5b:65:1a:5b:49:
b8:7d:21:56:c8:ff:89:70:57:2b:47:63:7f:5c:30:
43:b1:30:35:3d:20:d7:06:b3:57:4f:26:18:2c:af:
a4:34:2d:ba:1f:9f:e2:97:e0:8a:3f:fe:df:2a:cd:
9f:30:94:06:1e:d1:33:26:45:b7:b1:f6:28:40:d1:
74:c9:37:97:c1:ed:ae:83:53:6e:6b:5c:c4:21:09:
4f:db:f8:3e:47:97:db:f5:16:d8:30:74:82:f7:3f:
22:bd:89:8e:c3:79:04:2d:11:a2:04:6e:39:7b:24:
be:a3:93:ea:26:13:9f:3c:ba:b8:5b:46:42:1a:f6:
0c:29:5d:f7:69:dd:ab:66:06:22:9a:f8:81:ee:e9:
99:aa:5a:c1:d3:9a:54:0b:53:ee:8a:8c:37:09:73:
cf:29:76:90:79:17:85:5e:a8:f8:7d:64:7d:cd:c8:
77:03:f8:06:94:4c:4d:f8:ed:b7:33:20:53:f1:76:
4c:88:d1:10:d1:e1:a8:ac:10:61:94:a7:11:14:26:
38:af:93:a9:9e:d2:a9:bc:54:a5:9c:1a:18:4b:87:
a7:ce:d4:3e:28:9f:f6:db:ef:09:30:f2:d6:d1:33:
87:dc:23:b1:5f:18:6d:a3:e2:12:f5:66:b3:ac:50:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:75:5E:66:89:2E:DD:70:56:AC:DF:28:5E:4C:4F:39:28:AB:5F
X509v3 Authority Key Identifier:
keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:57:0b:94:0a:60:9b:07:74:1f:e3:7c:71:d9:60:b1:a2:f6:
0d:3c:8c:de:04:34:88:9b:ba:55:e1:f7:c7:87:a5:21:50:11:
35:1c:f2:e9:20:27:6d:64:59:a6:6c:54:fe:90:17:19:3b:a3:
0a:54:8e:ca:ca:15:36:cc:de:be:53:5b:1a:56:c0:2a:e9:36:
83:0d:52:9c:ce:c5:1e:55:fc:26:ce:14:f2:6d:bc:79:bd:7f:
11:e9:d9:3c:9d:1e:bd:39:3d:dc:29:56:89:e3:bd:b3:9a:22:
ff:b0:d4:ff:39:b0:cd:80:fc:f9:d7:10:1f:9f:63:61:c6:e4:
dd:59:48:9a:ae:9c:96:c6:c0:78:46:20:59:a5:db:5a:04:51:
c3:6b:3c:b5:6e:ae:95:58:a1:59:a2:d8:65:0c:14:6e:55:e4:
1a:0f:58:84:58:36:4b:ba:46:5b:8f:63:e0:26:d0:1a:76:bb:
c5:79:f7:c7:a2:f6:51:e8:80:06:e1:e2:e5:a5:7d:20:1e:08:
a6:f7:81:65:e6:bb:f2:f3:33:e2:2d:14:00:50:85:ea:6f:fb:
e5:8f:33:a0:d0:5c:7a:1d:01:14:cb:b8:68:f6:49:c4:c8:5c:
4e:b6:c1:23:a3:c7:49:01:4d:c7:b3:89:a5:fe:f5:f9:78:67:
84:70:af:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:38 2025 by rpki-client