Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json)
Hash identifier: M48591RrievgI96sRHrmtiyVy7NTH7CvaCjkd3d0jso=
Subject key identifier: 06:A1:BE:A7:A3:EE:FA:99:BC:CE:EA:A1:20:98:96:E0:11:31:55:3F
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 019918090679BE66A8F55F8497354BF0AF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
Manifest number: 13B2
Signing time: Fri 05 Sep 2025 04:01:08 +0000
Manifest this update: Fri 05 Sep 2025 04:01:08 +0000
Manifest next update: Sat 06 Sep 2025 04:01:08 +0000
Files and hashes: 1: YyOogR6T7jG6zD-5lx-V8y_JBFA.roa (hash: jTd/5MNcv4fqMfKWtnfVXAAWAN6UzlPvaAV2hpZQQJw=)
2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: Z6w9/nxxwd6IGCyTYNZ5XW5mhBQsYqu635pdG216tAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:06:79:be:66:a8:f5:5f:84:97:35:4b:f0:af:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Sep 5 04:01:08 2025 GMT
Not After : Sep 6 04:01:08 2025 GMT
Subject: CN=06a1bea7a3eefa99bcceeaa1209896e01131553f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:c3:92:93:fe:8d:26:e6:04:e2:18:83:c0:
9d:4f:1f:9c:ae:d6:7f:63:02:df:2a:b1:26:5f:b3:
87:18:0d:f3:e9:94:c6:02:8b:6d:9c:a2:98:be:9a:
3d:13:7b:3e:3e:ff:b7:cd:22:37:8c:35:17:be:d4:
44:9a:53:c3:40:63:3d:f5:12:e7:42:f0:25:30:78:
95:0e:d0:47:bd:1a:b5:5e:f3:15:ae:d5:09:5b:56:
6c:f8:5e:96:65:c1:fe:e0:aa:e7:71:06:a8:53:a6:
c8:43:d1:0e:25:65:89:5d:2f:55:5b:56:01:73:a9:
44:fe:82:3f:05:0b:fe:6f:25:39:f5:ff:ba:a3:8b:
13:87:f5:1d:b4:56:ca:81:a6:a2:cf:c9:38:df:64:
b1:e1:f7:c8:ac:4d:54:38:b2:b2:09:d9:6b:8a:3f:
b2:e2:cf:0d:aa:1e:8e:66:63:15:10:eb:5c:84:6c:
b8:4a:09:81:56:54:c5:91:f2:fe:09:57:2c:f2:1d:
79:90:46:3e:f6:ec:b2:fb:72:cb:d2:07:29:c9:6e:
24:9f:b6:89:41:c1:ee:b1:ef:af:20:f2:5f:4a:e2:
93:a9:c6:9b:0b:1f:33:1d:18:4d:00:4d:5e:84:ef:
4c:e2:75:be:e2:e4:fc:0a:57:bd:d7:b5:7a:0f:fd:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A1:BE:A7:A3:EE:FA:99:BC:CE:EA:A1:20:98:96:E0:11:31:55:3F
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ef:9a:0b:d7:9f:db:80:36:e9:d1:f0:a9:0f:c2:96:75:9c:
ee:d4:3e:c4:e1:7f:bc:65:b9:c5:37:00:b2:3d:d0:27:bd:56:
2f:eb:88:ac:75:7c:ea:14:dd:ad:02:c7:86:78:4d:12:cb:42:
91:87:95:76:a2:d4:80:35:11:ae:ce:d4:f5:9a:2f:94:42:05:
87:51:63:4f:92:55:f9:c7:46:93:0d:7d:3f:62:8b:99:ed:19:
51:1e:44:0c:29:67:14:83:bc:40:14:8b:eb:f0:1c:77:a6:9b:
d0:9b:6e:18:7b:33:11:7f:f4:de:42:02:9f:bf:22:c7:7c:cb:
11:d2:fc:c9:61:73:95:a4:8d:23:ff:93:8a:2d:6c:66:15:ce:
34:3e:fb:99:bb:68:3d:70:63:aa:20:44:b0:2a:fe:35:45:f8:
33:78:c5:ef:4d:67:8f:1a:b9:0f:ba:85:7a:a4:da:11:bf:d8:
4e:ba:99:65:11:be:2c:c5:e2:97:39:57:b8:ad:fa:b3:27:78:
35:48:11:99:fc:c3:f6:ee:fa:18:80:d0:6e:ca:b6:06:14:9a:
ad:c5:a7:f4:a3:aa:64:df:09:3c:6e:10:c6:83:a7:39:be:dd:
5a:49:8e:06:06:42:fe:fa:5b:07:f8:b2:91:29:c8:54:1e:9b:
0a:fb:1b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:26 2025 by rpki-client