Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: 54NiNSohjoyAZe2EsFvhRMkwVCgXRavAMoEGYxx3LNE=
Subject key identifier: 44:BC:5C:18:1E:23:B4:4B:56:9F:82:52:A4:7C:01:B2:B0:6B:AC:4E
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 0199FBEBB91F82C3CA228E2B0A9AAE35B133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 0295
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: OxpJu2YgcS66U22qwIYmf+WWV87WpgOmt6nPqvHxULE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b9:1f:82:c3:ca:22:8e:2b:0a:9a:ae:35:b1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=44bc5c181e23b44b569f8252a47c01b2b06bac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:0a:39:69:0a:d4:ca:fc:1b:cf:bb:a8:89:
5e:0a:4a:4f:64:bb:26:19:b6:b2:ad:1c:4d:c3:54:
aa:31:38:92:3d:5c:95:44:89:39:d5:86:8a:00:53:
d4:bc:93:5b:c3:a9:fb:86:4a:c9:4a:57:6a:d3:12:
8e:52:5c:08:8a:22:29:18:8e:87:80:f0:d4:7a:2d:
a4:24:3a:bb:dd:b0:77:13:16:d1:82:30:13:6b:0f:
03:e2:01:d4:d2:86:03:8b:d9:e0:59:2e:b0:4e:6b:
b7:57:99:e1:8a:07:d6:af:a4:76:75:11:d2:f5:b7:
38:6b:0f:cd:b3:7c:e6:91:8f:cd:8d:a8:a5:6a:54:
55:21:c2:f9:6f:b9:3e:12:a2:4a:12:4a:90:2e:e9:
0f:df:d0:6c:fd:81:f3:01:12:68:f3:c5:23:a3:7e:
61:c9:af:31:66:26:42:e2:3d:c4:3e:a1:de:70:c2:
65:08:41:54:a5:cb:91:6b:46:d0:36:15:20:d3:ba:
55:a2:62:12:30:a4:c4:31:ca:56:ea:77:a2:fa:88:
d3:f3:37:42:20:b4:ea:65:44:be:5f:a2:e9:0d:e6:
cd:00:8c:4b:fa:a3:de:d0:bc:ee:6c:b9:73:da:3b:
82:5c:a6:24:75:37:df:aa:2c:79:0f:49:34:44:90:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BC:5C:18:1E:23:B4:4B:56:9F:82:52:A4:7C:01:B2:B0:6B:AC:4E
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1b:e0:2f:cf:4d:eb:f3:27:49:be:b0:22:9a:f7:b0:d9:5f:
4f:94:43:08:c0:ee:96:e0:5f:7c:ea:7b:1b:87:18:55:32:de:
0d:76:d8:9e:d1:d1:02:ee:4c:d9:81:8c:52:81:1a:c6:6d:69:
d2:ed:3f:1a:77:07:c3:4a:17:b9:d8:c0:da:3d:67:ac:21:4c:
66:67:e6:42:8b:c6:7d:3f:12:59:eb:6c:b6:bd:54:7b:f1:d4:
0e:a5:64:75:b5:39:5b:2f:e1:12:0a:0a:44:2c:49:79:57:a6:
b0:19:30:19:67:b9:49:96:a5:7c:37:c5:ca:c0:0e:de:42:a2:
fd:7d:1c:d4:cc:3e:3e:d7:a6:a9:f6:03:47:63:02:fd:f7:85:
2c:f8:ea:3a:b8:52:74:2e:93:40:bc:a9:60:fd:90:7d:bf:e9:
8f:94:9b:0f:3d:5e:38:9a:e5:6f:ce:78:46:c6:32:a3:1c:b5:
26:a0:1b:92:c8:a9:57:da:9e:ff:7c:7e:ce:07:3f:4e:ea:4a:
80:6a:a6:39:c1:ff:9c:12:d7:e1:8c:79:33:4e:57:58:e4:85:
87:6e:b0:d5:f3:6d:ac:67:00:07:cb:c8:11:49:8e:cf:20:26:
58:e2:25:1f:7b:a1:d3:cb:a2:d4:94:fd:23:64:7d:b5:79:cc:
59:75:3f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:45 2025 by rpki-client