Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: Y8/+dmBeagbGj4fs9qeyOsimGihjJKKddk+Bs2NI2uA=
Subject key identifier: B8:3A:6E:76:BE:17:AB:23:44:76:B3:69:09:29:DA:A8:2F:37:AC:9F
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 0199221EEC13982A3CD38CA6AD3CB07C0559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 0607
Signing time: Sun 07 Sep 2025 03:01:15 +0000
Manifest this update: Sun 07 Sep 2025 03:01:15 +0000
Manifest next update: Mon 08 Sep 2025 03:01:15 +0000
Files and hashes: 1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: 8ohg/lnaMLBWnaaWohzvu9VnEbDNxSjHKrh7avABbrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ec:13:98:2a:3c:d3:8c:a6:ad:3c:b0:7c:05:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Sep 7 03:01:15 2025 GMT
Not After : Sep 8 03:01:15 2025 GMT
Subject: CN=b83a6e76be17ab234476b3690929daa82f37ac9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:d3:5d:7a:64:61:96:cc:61:95:5f:07:51:
41:92:56:b6:3c:f3:50:59:15:d6:68:9b:bd:56:e6:
08:55:d5:df:b0:87:08:97:ea:d5:0c:e7:b5:2b:99:
0a:e8:d8:b4:b9:87:12:1e:5b:65:2a:f9:83:90:05:
20:f2:61:55:3c:ac:53:ad:ae:1c:95:b3:13:95:81:
cc:06:7c:18:85:39:51:82:37:5c:22:03:b4:59:b8:
20:d4:d9:70:d0:e6:42:da:95:26:cd:b0:9c:83:5d:
f7:c6:db:ec:6b:3e:1d:9f:78:58:5d:6f:c9:24:33:
9e:98:e8:3d:8e:28:b7:d2:f0:0c:b8:b3:ce:07:df:
53:2d:03:a7:76:96:24:99:3c:ad:44:cb:be:eb:c5:
19:cc:74:c6:4f:6b:b3:5e:ee:09:8a:f3:81:07:b0:
99:ab:02:2c:27:b9:a2:94:72:c3:57:1c:1c:2e:64:
b7:e0:82:c3:73:9f:b0:66:17:cd:e4:0d:42:e0:bf:
07:91:b6:2c:7f:49:d8:11:35:a2:e3:f4:ce:5e:01:
54:0d:f3:50:60:99:8d:35:d4:67:50:86:57:43:83:
9e:64:62:5e:53:b9:dd:85:1d:20:47:8e:80:83:57:
31:bd:cc:09:48:10:0d:d8:88:4d:c4:81:15:27:ce:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3A:6E:76:BE:17:AB:23:44:76:B3:69:09:29:DA:A8:2F:37:AC:9F
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:88:5c:6d:89:ef:cc:5d:3d:58:3a:fa:34:97:99:1e:b1:ec:
87:8a:78:9b:cb:ef:17:c5:6b:55:16:c7:9a:5d:5c:d6:ef:76:
06:d5:43:97:4b:e4:2e:69:d7:32:1e:1c:e9:7d:cf:4e:c7:da:
e3:86:33:a8:cd:52:be:ad:73:8c:75:57:59:5f:09:46:d8:85:
da:a4:2e:c2:8a:5b:27:e8:3f:18:30:d8:87:3c:63:7d:fb:81:
8d:61:88:14:eb:09:97:95:20:b3:db:24:62:96:5c:ce:ea:8f:
4b:bf:4d:c0:52:52:29:22:ee:1d:e1:17:84:34:c8:6e:5a:23:
14:25:db:68:16:1e:2f:40:dc:d8:98:68:70:94:2f:26:32:a3:
5c:68:61:cc:39:94:cb:ef:1c:68:37:56:31:5f:24:3d:56:d6:
78:e5:1e:96:8b:0a:79:3e:3c:5b:e6:a0:46:07:12:02:e7:51:
bb:8a:25:92:ed:09:ae:25:f4:ac:07:14:6e:fa:1d:03:b9:84:
21:f3:f1:5e:13:9b:c5:4a:20:b5:8d:ee:e8:0d:0d:53:50:c9:
5e:c7:e3:9a:2f:4b:27:33:4d:a4:af:1f:e7:8a:fe:e5:47:c4:
ec:d6:ac:ba:39:6a:f2:57:df:66:06:c6:95:5b:41:83:65:42:
13:3c:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:18 2025 by rpki-client