Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json)
Hash identifier: piveFMl4SP9mkm1TvCVBnWzKjv+CRElwTrROQMu6+Ss=
Subject key identifier: 66:23:B8:D6:5F:EB:1A:E2:81:C7:AE:C5:B0:F8:06:04:B0:E5:1A:C5
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 019A71B7DDF912C780358D19C78F9B29FE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
Manifest number: 1465
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: YyOogR6T7jG6zD-5lx-V8y_JBFA.roa (hash: jTd/5MNcv4fqMfKWtnfVXAAWAN6UzlPvaAV2hpZQQJw=)
2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: kYJkZvDljn0xpTz4EUYKlRVLo8jJuyC8bHxP2St7oQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:dd:f9:12:c7:80:35:8d:19:c7:8f:9b:29:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=6623b8d65feb1ae281c7aec5b0f80604b0e51ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:c5:c7:03:f7:99:c3:91:fc:bf:80:55:ca:
9c:89:c9:14:bd:06:43:33:c6:5c:82:5f:41:8a:80:
53:fa:0a:9f:73:56:19:e4:35:6a:7e:d4:2a:00:b2:
ad:65:bc:8a:1d:36:c3:a0:62:5a:ab:55:5f:f1:88:
1a:0a:ba:a7:19:dc:5f:64:8f:81:ad:9b:3b:a3:6c:
e3:ae:70:d8:60:e5:49:67:3b:b2:31:ea:c0:e4:44:
ed:99:97:28:4a:f9:04:f8:b6:d0:c9:9d:85:2d:5d:
1f:c1:fa:83:3a:52:6d:dc:48:d8:c6:31:44:73:36:
1d:3d:23:f9:71:ca:4c:94:0f:6d:5a:46:21:96:1c:
09:7b:56:04:68:1e:f6:41:64:2a:45:9b:fc:ba:c6:
e1:43:43:d4:55:ad:a8:c5:96:9c:6e:ff:ea:da:58:
44:56:9f:d4:02:d7:dd:16:e6:d3:bc:59:53:49:3c:
08:55:2b:0b:43:ea:da:9a:b2:24:51:3b:51:14:44:
62:5a:70:2d:5f:39:94:14:dd:3e:61:62:1f:ac:79:
27:a3:1f:ba:61:f9:4b:54:1b:53:10:1d:d3:7a:90:
b5:76:dd:76:be:d9:f9:2c:de:34:e3:6a:53:18:cd:
48:ad:1c:a6:73:e0:84:56:3e:70:f6:4a:c8:6a:4b:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:23:B8:D6:5F:EB:1A:E2:81:C7:AE:C5:B0:F8:06:04:B0:E5:1A:C5
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:55:75:2a:8c:60:c6:5b:66:2c:a0:65:85:d3:ff:72:e4:79:
1d:fc:a0:93:76:cc:17:c2:3a:7b:ec:30:43:21:94:eb:16:26:
aa:57:ca:0d:8f:0f:06:f1:c5:e1:7a:97:36:87:93:e5:51:03:
2d:3d:be:af:7b:96:63:94:cc:5d:2e:0b:18:80:69:cc:2e:02:
a6:94:a4:ae:d1:68:92:2c:8f:5a:9b:25:d4:06:42:4b:22:ee:
bb:92:2f:d5:fd:d6:1f:42:c8:e7:4a:f4:ec:90:e4:40:6b:e3:
9d:5c:bb:e1:8b:04:0a:be:8b:d8:77:d4:c4:75:ac:3d:1d:13:
c0:d4:b8:ee:9f:66:07:b4:db:78:17:50:6b:33:2b:e9:24:02:
f1:8a:77:aa:24:40:1b:fd:a3:ec:c4:7e:3f:5e:ef:a1:25:00:
6c:84:0a:32:06:c2:62:90:3d:13:37:05:3f:78:af:28:d3:80:
81:57:49:75:d0:b8:3c:0e:6a:77:cd:01:64:3a:4d:dc:38:e3:
3b:93:bb:e8:62:53:a6:3d:c2:c0:18:36:fd:06:0e:48:88:38:
6f:7d:a4:15:6f:7f:ae:f5:7e:6b:e7:55:54:d7:16:e9:7a:a6:
89:47:7d:63:1e:46:c3:8a:d9:1f:73:5e:10:69:52:2e:ba:73:
2c:06:9d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:21 2025 by rpki-client