Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: fdEeB+k+QhR9yebzkMasXaAbfN+Q77bq6xxr5X+xxjw=
Subject key identifier: 02:B3:62:1B:A6:DF:21:7E:B7:64:77:5A:1E:5E:66:06:CA:D1:A9:03
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 019A7112B642DFEA89EC96ACE13EFC996AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 04F2
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: 7egd1jrlKLwA4O7cjdnVPcLU/kgMPAEj7mQnSRrNam8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b6:42:df:ea:89:ec:96:ac:e1:3e:fc:99:6a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=02b3621ba6df217eb764775a1e5e6606cad1a903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:9d:64:85:65:fa:9a:de:99:58:f4:d1:04:
2f:96:0f:7e:b1:6b:2c:1e:28:27:db:fe:17:dd:77:
63:a1:39:a1:0e:2b:8d:a6:4b:b3:b5:28:8f:65:59:
04:e5:6b:09:8d:ee:13:ef:87:9e:dc:3c:2e:cc:2f:
03:61:57:14:4b:c6:d1:8d:5f:54:ae:41:27:b5:30:
db:af:22:13:8b:28:bb:b7:1c:7b:b3:f4:4a:d2:ab:
94:70:9d:6c:3e:9d:d0:39:6e:18:c5:fb:8a:36:41:
08:ef:8b:60:97:ce:a7:9c:5d:6d:bc:0b:e1:46:ba:
bc:8c:cb:7e:a6:e0:4b:99:28:d5:ab:2b:f7:0c:08:
c8:41:07:ec:9e:89:8b:70:cf:71:ef:3e:8a:d7:61:
90:ac:aa:ef:0b:ed:89:77:ea:4c:98:8a:f1:e5:bb:
14:3e:80:31:5c:7b:93:72:b7:02:fb:63:23:c3:79:
86:83:d5:e5:01:51:fa:37:f4:85:05:fe:fa:1e:f9:
f7:c3:8e:95:28:89:85:d0:77:8e:8e:c8:e5:7a:71:
49:99:c5:51:78:60:3b:14:05:5d:e3:25:05:b3:e1:
ad:6e:55:88:1f:78:d6:a5:aa:44:06:b9:f4:29:c1:
01:c4:0c:b8:8e:e3:03:fa:1a:50:63:8f:bc:4a:28:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B3:62:1B:A6:DF:21:7E:B7:64:77:5A:1E:5E:66:06:CA:D1:A9:03
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:51:33:78:bf:53:ed:f3:b8:8a:82:8f:25:9f:a3:85:b7:71:
c7:5f:be:ab:c3:30:09:aa:bf:e8:00:d4:ba:a8:b3:a4:16:55:
ea:d1:a9:72:b6:f0:c3:9a:b7:f0:3e:32:81:e9:48:8f:d5:d1:
e6:8c:9a:86:74:e1:d5:3b:78:49:13:ef:b9:1c:ea:9e:1c:c4:
12:de:5c:f1:a5:4f:41:da:ce:e6:1b:e6:06:1c:72:ed:c7:84:
38:7e:b1:10:f7:b2:fb:f1:fb:f3:f4:2b:42:d6:5f:87:23:d6:
08:95:63:87:ae:3f:fd:40:69:28:9a:2d:d2:34:66:07:72:b4:
ad:d7:a1:43:7c:04:b8:ef:cd:c6:d1:28:84:8b:f5:51:f0:50:
31:f6:68:b7:9f:46:60:6f:d2:d5:90:1a:c9:0c:51:45:60:ae:
36:27:90:8b:7e:cc:45:9d:60:08:df:46:2c:75:39:71:f2:b0:
07:46:07:b1:95:96:29:63:21:57:bf:b7:33:ef:7c:a9:1d:91:
36:bb:97:26:6b:8a:99:50:96:ed:54:a1:d3:13:ae:b7:a8:d5:
60:3d:94:42:58:de:28:2c:91:6b:6b:f8:b5:7c:76:fd:24:81:
c5:1e:4d:f8:8f:14:d3:f7:a1:28:51:ae:98:4a:06:51:a6:de:
b1:9d:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:02 2025 by rpki-client