Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json)
Hash identifier: QuAbP02v7Pyao8HPgUuB3n5xd/1HvJo43I040TsSBhY=
Subject key identifier: 09:D1:AA:2C:58:2E:D9:9C:AB:99:24:24:90:D7:87:2B:BC:E4:13:52
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial: 019A7225D668A866A63B5631BB37E09BE02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
Manifest number: B9
Signing time: Tue 11 Nov 2025 09:01:13 +0000
Manifest this update: Tue 11 Nov 2025 09:01:13 +0000
Manifest next update: Wed 12 Nov 2025 09:01:13 +0000
Files and hashes: 1: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: wGRYOn9PG5Q0WTxdR3IR5cF5uZOIHRNFPo8SmHbN+So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d6:68:a8:66:a6:3b:56:31:bb:37:e0:9b:e0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Validity
Not Before: Nov 11 09:01:13 2025 GMT
Not After : Nov 12 09:01:13 2025 GMT
Subject: CN=09d1aa2c582ed99cab99242490d7872bbce41352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:f2:74:3f:79:e0:94:5e:18:d6:61:ce:a8:
7c:d7:e0:5c:ca:df:c6:0d:dc:3b:d1:1b:8a:18:1b:
3b:c4:9e:96:f8:2a:39:44:52:0b:17:9b:2a:65:c7:
8b:a6:3c:e1:69:22:2b:3f:71:db:13:6a:26:97:7a:
4c:57:35:3d:86:3f:c2:07:6e:1a:ba:ae:32:3a:e2:
51:f3:77:3b:b1:88:57:0b:0a:c6:8e:57:98:dc:2c:
0d:7f:56:d1:b5:e6:76:e9:31:6d:d6:06:e7:ed:9a:
8c:63:40:62:9f:78:51:0a:81:2d:b5:4f:e4:6d:35:
fe:d3:9b:01:86:90:80:d6:65:25:e7:67:94:33:41:
cb:f9:89:84:c2:d5:f6:20:16:4a:88:b7:d3:15:59:
f9:3d:1c:26:bc:97:c3:0c:3d:90:6a:40:f6:dd:2e:
67:96:39:07:23:83:d2:c5:c4:ee:f1:14:ad:6a:e1:
78:10:31:ea:b5:70:44:2f:26:aa:09:d7:e9:9e:2c:
cb:ee:7f:10:a7:67:9b:5a:24:c8:b5:46:b1:c7:48:
93:7b:4b:64:57:ff:e5:f2:b1:e2:4d:9a:35:b4:ea:
19:61:41:47:63:b5:2d:66:0a:22:88:15:4b:c9:ae:
6f:dc:69:03:f4:63:62:4d:38:ba:7f:bf:27:91:90:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:AA:2C:58:2E:D9:9C:AB:99:24:24:90:D7:87:2B:BC:E4:13:52
X509v3 Authority Key Identifier:
keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fe:8f:4a:36:ef:b1:61:ee:91:fc:78:da:59:dd:48:1b:6c:
f5:0f:89:91:fc:99:40:47:20:83:84:2d:e8:71:9d:3a:6b:7f:
5e:57:82:a8:ec:4d:7c:e8:21:34:c2:56:9a:2e:3f:9d:82:da:
8b:84:7f:aa:1a:f3:80:4d:50:69:f6:cf:a5:29:96:09:bc:cb:
5b:5c:41:3e:0c:ef:69:df:82:77:d2:74:87:f1:d6:f0:71:f0:
cf:8d:98:af:93:36:34:1b:cd:27:3d:38:d5:57:4c:ca:b3:a8:
a6:4b:ca:78:38:27:11:a1:05:aa:68:e9:8d:c3:2c:70:14:64:
6a:c1:13:6f:1d:59:46:b3:fb:5a:a9:78:e2:79:f4:ca:15:17:
31:8d:7d:d4:5d:d5:42:19:a9:58:ee:ad:9c:48:a6:d1:fc:bf:
34:b6:5f:09:7f:4e:39:3f:c4:c6:04:c1:da:88:22:0c:e2:d3:
5e:88:de:6b:7f:04:7c:71:31:af:66:fe:25:f5:b7:80:60:0a:
08:e5:42:7e:ce:95:bd:82:a7:7c:55:f3:7c:22:02:5f:e3:93:
1a:57:0a:ea:92:95:c1:21:b3:75:8d:9b:ce:93:8e:b5:5d:b6:
a4:73:3c:ba:33:6d:80:e6:2b:79:42:35:a8:9b:23:2f:a0:1c:
de:1a:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:28 2025 by rpki-client