Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
File: y-lwmA1WXMdK2ylKpox7BvUTKJA.mft (raw, json)
Hash identifier: fI8JC8UkCiYXGfu4KyY5J/PSFPpeJUn6Bn9sPC7uwNE=
Subject key identifier: 67:32:6D:6C:D4:36:BF:46:45:57:FE:19:AA:D3:03:85:3A:4B:5E:35
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 0199FD6AF033B0C6457AE77DCD2D9B022521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
Manifest number: 09EE
Signing time: Sun 19 Oct 2025 17:01:07 +0000
Manifest this update: Sun 19 Oct 2025 17:01:07 +0000
Manifest next update: Mon 20 Oct 2025 17:01:07 +0000
Files and hashes: 1: w3_nPHf7a07mKfqvAI84MjCWgdc.roa (hash: zETLR/82/cCeh7r1wtGHL+Bc+UNE2hnrIZTGYx5oKPQ=)
2: y-lwmA1WXMdK2ylKpox7BvUTKJA.crl (hash: wD4M3ssYfkCt13003DPMqKqH/XU+m81USEli/Zwtq9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f0:33:b0:c6:45:7a:e7:7d:cd:2d:9b:02:25:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Oct 19 17:01:07 2025 GMT
Not After : Oct 20 17:01:07 2025 GMT
Subject: CN=67326d6cd436bf464557fe19aad303853a4b5e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:bd:63:e3:87:00:3b:c3:64:c4:00:6b:bb:
4f:ac:e2:06:80:1c:d3:cf:98:28:cd:51:71:7d:0f:
33:c0:79:fb:af:b8:c4:7b:fe:3e:1d:1b:5e:6e:31:
5d:6b:3a:8b:ce:ec:5e:a9:6d:7a:6f:fc:59:0e:01:
9f:76:5c:5f:16:7e:b0:45:ec:c4:1a:1b:77:b3:19:
64:fa:55:a2:40:bf:96:b6:48:86:af:cc:43:91:f0:
6a:f1:fa:fe:af:81:e2:7c:7a:f7:68:ca:e9:57:8b:
0a:d9:f6:ce:c8:95:ae:83:b6:f6:75:7c:aa:81:fe:
b8:63:ac:93:36:9c:93:a6:73:54:55:45:9a:50:d0:
4b:a4:41:1e:94:4d:ae:03:70:ce:60:e4:9b:6c:02:
78:9b:c0:e9:ee:9b:93:79:1d:a2:48:95:ca:6c:70:
ec:3d:f6:d5:a5:ae:64:01:24:5b:b5:b6:0f:44:0c:
8e:b4:2e:44:8e:94:72:13:f9:cb:f3:70:a1:f1:7b:
5b:84:a9:47:04:35:80:a5:f2:eb:ac:42:47:e9:16:
7a:35:ca:9a:14:66:f0:94:a8:1d:05:23:b7:22:5b:
be:22:2a:8b:21:7f:55:3d:c8:0a:8b:1d:15:49:0a:
e3:dc:46:4c:d6:f7:25:8b:5f:83:a5:e8:da:85:8f:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:32:6D:6C:D4:36:BF:46:45:57:FE:19:AA:D3:03:85:3A:4B:5E:35
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8f:e9:6d:71:fb:54:21:75:7a:a0:69:d8:c9:88:e8:b1:99:
26:5d:d7:f0:c1:0d:a3:41:35:68:89:e0:b5:6f:ae:45:99:b6:
67:95:5d:00:4d:f4:89:cb:74:de:88:19:9e:38:d7:a6:96:2f:
3f:88:6d:6f:15:27:c2:85:db:f6:b3:ab:76:84:54:54:53:b2:
f6:ff:11:68:95:6a:2a:fa:f2:3d:47:6e:1d:5c:82:5d:bf:3c:
83:23:0a:da:e5:01:94:e1:f8:da:a6:fa:24:85:78:3c:66:c6:
8c:62:cd:58:2b:cc:13:08:53:3f:67:e7:39:00:0d:12:c7:51:
a9:96:73:02:6e:0c:85:df:ed:f2:63:2a:0b:55:1e:f2:82:2d:
af:8a:d6:ff:d6:e3:f6:d6:f2:7c:42:67:22:f8:73:eb:3d:35:
e9:28:92:85:02:e1:90:e5:2b:6a:7d:f0:10:e4:be:68:df:b2:
b8:6a:a6:42:cb:21:43:a9:75:e6:0a:02:cd:01:33:ab:c4:15:
88:b4:ba:1f:77:bf:0d:51:c3:ec:26:24:4e:36:70:08:ff:13:
05:a2:60:d8:f8:8d:29:3d:1f:04:c9:1c:c1:52:f2:55:39:65:
82:1c:21:5f:e4:14:6a:b7:9b:3f:e1:d2:33:35:8a:d5:6e:15:
15:d7:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:25 2025 by rpki-client