Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
File: ywyjSKyJHDNtjHlFpb1bMyXrXws.mft (raw, json)
Hash identifier: J52WFitKS8YyE/6e9/OTunVbyuu+f55dnaQg9ctMP/E=
Subject key identifier: E2:2C:5F:F9:38:AE:35:F0:91:9F:14:49:FD:9D:F6:66:9E:5D:17:FA
Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
Certificate issuer: /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Certificate serial: 019A0B5E0E86061CCE25D7F0E62531AF7036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
Manifest number: 05B8
Signing time: Wed 22 Oct 2025 10:01:44 +0000
Manifest this update: Wed 22 Oct 2025 10:01:44 +0000
Manifest next update: Thu 23 Oct 2025 10:01:44 +0000
Files and hashes: 1: 1-qEn14mRo-yGu8c_O2fP11Gqe8s.roa (hash: yW4zCmNuVTNX7nPMpOCV5q/ZpdegrJzqa57jVtQ1VMU=)
2: bZcXlnVt9TXCSOXEW_tbK9JFnDA.roa (hash: QoLawtosEpM+IFmVYlosGNqhPmD6XmihZ27v/0SHdH8=)
3: r0S9lUBCzvxdPzLKHfqohWINZ2c.roa (hash: ZqEGzoMzxDYZJnku4SCWLMdSJqeUHrxwhhK2Ayso5N4=)
4: ywyjSKyJHDNtjHlFpb1bMyXrXws.crl (hash: LfFc56l7j9MA8tSyB4BOkwFRf1vxKlVKGjmoE8htYtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5e:0e:86:06:1c:ce:25:d7:f0:e6:25:31:af:70:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Validity
Not Before: Oct 22 10:01:44 2025 GMT
Not After : Oct 23 10:01:44 2025 GMT
Subject: CN=e22c5ff938ae35f0919f1449fd9df6669e5d17fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:7d:a8:48:dc:4f:ea:31:be:c9:68:a3:4d:
eb:b5:b3:68:76:72:b8:9a:da:70:cd:5e:5e:d4:64:
6b:cf:15:c8:26:9b:6b:7b:61:7a:91:7a:1e:a9:3c:
0c:07:de:dd:63:63:79:74:c0:d3:e3:6e:ca:7b:ff:
45:64:41:a8:a9:d9:05:96:b0:75:f4:2d:8c:cf:a1:
36:7d:02:d3:7f:bb:30:2e:78:16:eb:cb:64:bf:00:
ad:d8:7e:2b:da:e4:e5:37:46:5a:1a:84:43:b7:6a:
b3:20:58:35:2b:5b:83:9c:48:50:25:34:17:c1:63:
53:1b:1b:9b:4d:0b:d6:b5:ad:b9:35:41:35:b6:00:
ff:94:fb:53:c8:24:47:6f:4f:c4:14:39:75:2c:4f:
17:01:5e:78:02:e5:6c:5d:56:be:8f:29:1b:1d:d8:
37:3f:2a:1f:03:68:d3:fb:c5:8e:1c:2e:c4:3c:c4:
b4:01:49:ac:31:0a:24:fc:f8:a6:6f:ac:a6:2e:59:
cb:db:b7:1b:be:02:9a:17:d7:5f:b3:e1:e6:b7:ea:
a5:54:fa:30:95:a7:06:44:8e:29:9d:69:61:da:4c:
73:86:49:ed:ba:3c:b4:97:54:74:84:47:f2:0d:b6:
a4:04:b0:e8:94:98:f5:0d:89:9f:71:93:02:8b:ed:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2C:5F:F9:38:AE:35:F0:91:9F:14:49:FD:9D:F6:66:9E:5D:17:FA
X509v3 Authority Key Identifier:
keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fa:5d:74:cf:2f:15:fc:f2:7f:09:e2:bf:93:37:86:64:a4:
11:5b:35:03:3d:b8:81:ed:2f:95:81:0c:8e:34:90:15:f6:0c:
af:5c:71:a4:a1:a3:2e:2f:c8:be:aa:f8:9e:ac:52:9b:72:a2:
f6:72:ee:02:4d:15:67:1c:1e:66:98:c2:6a:39:c8:8a:d8:64:
2c:21:d5:98:39:ff:65:78:80:a4:7e:2e:30:c4:e4:ed:29:1b:
e5:61:80:ce:35:04:9d:23:05:ad:01:32:c1:df:1a:54:6a:6b:
bc:b2:2e:31:91:c5:43:bf:23:ad:ff:8c:b1:f8:5f:d9:99:35:
82:af:11:f0:9e:eb:25:4a:ee:b1:48:ea:6d:50:e6:ed:b3:97:
53:fa:d0:6d:03:65:05:70:95:1b:22:7d:0d:f1:6e:0e:9d:0a:
d1:b3:8b:f9:28:1f:57:35:01:bc:05:22:f8:36:e6:a7:36:a6:
d1:58:5e:56:cf:2a:8e:11:dd:06:01:84:1b:90:a0:ae:ee:ab:
20:2c:f5:86:b6:79:d9:74:fb:50:c7:15:41:14:0d:f6:86:01:
74:ef:59:6e:f7:01:71:47:1e:fc:5e:86:6f:be:f2:27:9f:6c:
21:4a:c2:2e:97:53:9f:8f:bc:bd:07:f9:0d:5b:39:80:71:25:
a7:d0:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:11:40 2025 by rpki-client