Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
File: y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json)
Hash identifier: 98MCuMc03xxugUwZUq397aVPDb2wlAqkYzgF8tOgsgM=
Subject key identifier: 7B:9E:03:49:07:EA:BE:6C:99:47:01:97:38:CA:03:CA:E1:AE:D6:F4
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial: 0199FAD7A546B04C7001F75F69D5461E714A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
Manifest number: 10AE
Signing time: Sun 19 Oct 2025 05:01:00 +0000
Manifest this update: Sun 19 Oct 2025 05:01:00 +0000
Manifest next update: Mon 20 Oct 2025 05:01:00 +0000
Files and hashes: 1: xXYCNUnm-3UsiS0Y2j4IJt8GJmU.roa (hash: kfa/1BPOG2GKMxXo/zgSWZ2DSaf3+pCaWIgYdprI0TU=)
2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: 7+KpL44IpEBo0g+5O33P/flpb+eSPLV7FtbmGpEBXkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a5:46:b0:4c:70:01:f7:5f:69:d5:46:1e:71:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Validity
Not Before: Oct 19 05:01:00 2025 GMT
Not After : Oct 20 05:01:00 2025 GMT
Subject: CN=7b9e034907eabe6c9947019738ca03cae1aed6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:d3:d8:8d:e8:d5:e4:2d:be:1c:09:d0:e8:
80:4a:27:f6:53:a6:0a:2e:7d:cd:24:2c:77:99:3c:
5d:d6:d2:1b:41:60:44:8d:b5:c1:53:e5:62:21:23:
be:c7:8d:74:a2:ad:21:a1:20:e1:6a:d6:59:53:c1:
5f:f9:9e:c4:72:b2:e2:7c:05:e2:f5:14:89:94:96:
04:8f:80:15:39:ca:5b:cb:6e:f0:1d:6e:23:32:36:
4e:6a:8e:fe:33:41:63:85:ba:bc:6f:66:25:c1:35:
c0:f0:57:72:e6:54:ac:1a:ed:1f:17:2b:31:1a:b2:
2c:c8:33:c0:36:f7:80:45:f7:7a:49:ef:99:d1:a7:
f5:99:d5:05:7c:6e:4c:af:ba:3c:60:c1:91:35:b0:
c3:95:6b:df:94:9d:e6:57:04:7a:af:28:5b:b3:bb:
dc:80:8a:72:c8:ba:ef:31:1a:ab:45:96:d9:8b:f1:
bc:82:03:e8:a6:7a:3e:59:b6:93:42:8f:44:e4:88:
21:36:ec:3d:01:38:84:88:91:85:98:73:3a:a3:0d:
56:5d:99:64:60:35:04:b1:49:0f:cc:5e:3f:31:fe:
70:77:7b:48:2b:c9:61:75:5c:06:61:9e:db:df:cf:
82:6b:7a:3c:cb:24:f3:05:0a:51:c0:15:33:20:9c:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9E:03:49:07:EA:BE:6C:99:47:01:97:38:CA:03:CA:E1:AE:D6:F4
X509v3 Authority Key Identifier:
keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:af:d9:37:84:c3:72:c7:a4:d7:18:88:66:f6:3d:36:bb:a7:
ef:ff:71:fe:a7:a2:a0:26:6e:8f:64:22:f4:17:9c:cc:db:f5:
c8:0d:cf:56:10:d4:e8:8f:1f:25:7f:f2:ee:8c:2c:ec:11:ee:
14:e3:8e:2a:d3:9d:1e:91:1a:f3:56:5e:be:34:38:c0:3b:ce:
fd:54:91:25:f5:33:51:05:9f:1c:2b:00:54:c5:70:26:66:5c:
cf:d7:ee:2a:85:9f:6f:4d:59:13:60:b6:ee:49:b3:6b:5d:ed:
2c:6a:8b:e2:8c:23:fd:95:25:fb:73:e1:84:e6:99:9e:a8:1b:
5f:6d:f4:2d:64:e7:fd:49:10:bd:cb:2e:3b:3d:84:3d:5b:60:
c6:d6:15:c7:9d:eb:b8:40:05:a7:25:77:68:fb:57:2d:58:e2:
db:52:99:ef:0e:86:56:1b:a2:1f:9b:7f:9a:06:0b:4e:28:eb:
97:84:25:bb:6f:cd:41:e6:d1:4e:c0:3b:f5:f5:47:0f:16:eb:
0c:43:94:11:08:b7:c4:23:1a:8e:a7:5f:5f:75:25:1a:8a:fc:
50:eb:89:4e:e8:ca:ea:9a:c7:1b:90:bf:68:08:98:5e:38:a1:
9a:3a:3b:6a:09:70:3b:d5:1e:44:b4:f9:72:cb:0c:79:59:b0:
2d:6a:00:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:54 2025 by rpki-client