Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: d3Hvl30P/FAAcJB43OduaQw92sQkPNW3Xf0rFE/2b2k=
Subject key identifier: E5:1E:BE:F9:E4:CE:CD:FA:B0:C1:55:B5:A5:3C:0B:F3:05:1B:80:9B
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019A72259E6412426A96835BE4D52BFF26FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 06B5
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: N3+kno1fq+mC6/ivDYl6y5MUIjjlYXaY4tRJj4pjrnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9e:64:12:42:6a:96:83:5b:e4:d5:2b:ff:26:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=e51ebef9e4cecdfab0c155b5a53c0bf3051b809b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bb:13:ca:2c:cf:62:05:9f:fe:12:cf:a9:41:
75:ce:8b:7a:21:c2:c8:c3:a5:c6:a3:cd:be:28:25:
a2:6f:b8:da:a5:db:74:57:80:3e:b8:80:88:70:bd:
0b:30:54:d4:bd:9d:16:d7:90:18:22:ae:fe:60:db:
75:ee:fb:4b:33:e7:de:68:a6:20:74:fd:a2:95:38:
75:52:7e:64:9b:d3:d7:97:54:cc:58:b6:e8:69:c3:
d2:32:c1:0f:40:0b:71:01:f4:8e:6b:85:c6:69:89:
d7:ce:57:f1:31:d5:d3:ae:5a:d2:16:81:1a:0e:39:
3d:be:6b:ae:c6:06:4a:d7:94:7d:3f:84:4e:ca:0d:
81:8c:72:85:12:db:44:c2:27:7c:2e:d1:9a:2f:cd:
9a:ab:ab:34:93:1e:ce:c8:b7:74:0d:93:92:0a:5d:
c8:4e:a4:09:bf:ef:16:4f:70:de:ab:90:4c:2c:b5:
fc:08:3f:7e:ff:2d:66:65:f1:df:0b:0f:06:aa:7c:
5a:fc:fd:b2:7c:a0:12:00:84:de:6f:e0:2b:cb:a8:
05:03:33:8a:8f:da:db:13:b5:7e:65:fd:a4:e7:0e:
55:b2:17:f3:e9:33:70:4b:f8:7a:17:53:15:2d:3e:
ed:b3:4d:06:8f:28:0e:31:3f:5e:ff:db:aa:ed:37:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1E:BE:F9:E4:CE:CD:FA:B0:C1:55:B5:A5:3C:0B:F3:05:1B:80:9B
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:75:3a:b9:c3:eb:31:36:cc:dc:7d:de:59:47:75:82:1f:ec:
70:98:58:9e:77:45:94:cb:91:5b:e8:51:c6:38:54:36:7a:2f:
02:07:aa:9f:8c:25:9a:a1:c6:e7:67:5c:90:d5:ca:0c:8c:09:
96:91:07:8c:2f:c5:aa:5a:7a:4b:1e:52:44:b3:d6:96:65:8f:
63:f5:cf:60:cd:05:0e:cc:9e:e9:15:7a:28:ef:63:dc:1c:f6:
53:1e:97:1d:8b:7c:f7:d6:bf:34:ff:7a:3c:6b:f7:71:71:9b:
22:58:01:03:18:23:8d:af:65:02:23:d0:f5:0a:da:ea:28:ed:
e6:93:9f:0f:83:d4:b7:41:02:81:78:a6:16:05:a2:e9:37:99:
d6:8d:67:7c:8e:e5:34:51:a0:00:6f:89:e3:dc:56:07:74:f2:
f4:e8:8e:7b:8b:0d:3d:02:21:e4:6b:bc:76:53:c9:6b:ff:cb:
d6:95:e3:e3:76:ce:eb:2b:6f:62:1d:d9:5f:d1:7f:26:bf:d9:
5c:13:c1:aa:84:25:bf:8f:16:8c:84:d0:a3:65:7b:9f:9e:a6:
ab:c5:85:33:b1:89:f6:cd:62:04:d0:7e:3d:23:00:4d:98:95:
9a:19:23:72:2a:9d:b6:8d:af:51:ae:42:9f:dc:ad:18:4a:ce:
9a:08:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:26 2025 by rpki-client