Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
File: y1VBA5WqtJkUDDplzh90DvBw0-Y.mft (raw, json)
Hash identifier: Smo9h+STfkfANtuE0/ahO/eDuB2UKDSvyMlaLfpoZWE=
Subject key identifier: 7A:EA:DD:7D:F4:E2:33:96:69:36:6F:C1:6F:A2:4F:EE:80:CD:DC:F1
Authority key identifier: CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6
Certificate issuer: /CN=cb55410395aab499140c3a65ce1f740ef070d3e6
Certificate serial: 0199FA6AB22174E9BFFF52870AB5CCADCEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
Manifest number: 64
Signing time: Sun 19 Oct 2025 03:02:00 +0000
Manifest this update: Sun 19 Oct 2025 03:02:00 +0000
Manifest next update: Mon 20 Oct 2025 03:02:00 +0000
Files and hashes: 1: BbKEBgKAZuG3-4_d3jMXZeggsD0.roa (hash: IICjx5LS8I3lp2HvjFP9QP+Q2FZJdJqUoqfGvrxQA9o=)
2: y1VBA5WqtJkUDDplzh90DvBw0-Y.crl (hash: G2okK9WMCpAct3bk5dEPT1SXUjWw0HOL2pQp5sKEWBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:b2:21:74:e9:bf:ff:52:87:0a:b5:cc:ad:ce:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55410395aab499140c3a65ce1f740ef070d3e6
Validity
Not Before: Oct 19 03:02:00 2025 GMT
Not After : Oct 20 03:02:00 2025 GMT
Subject: CN=7aeadd7df4e2339669366fc16fa24fee80cddcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:0a:b6:17:c6:11:d9:45:c7:98:11:89:3f:
16:9f:6f:77:ee:97:57:d0:f9:95:84:7c:54:63:a7:
9e:7f:08:bb:7b:46:92:0f:98:ae:c6:f7:d3:df:8c:
23:08:03:9c:ec:58:33:db:bb:b1:f7:1c:b7:19:b1:
92:90:c4:6b:f8:06:f1:a7:64:5c:4f:24:25:ec:18:
c4:8b:22:c5:7c:52:4f:b4:b4:90:77:ab:f3:e9:46:
a8:74:c7:34:d5:c0:30:f1:d0:a3:89:80:bc:08:eb:
95:a0:74:3d:b4:c2:20:2e:35:cc:e4:be:d4:f2:b0:
57:b9:e2:bb:d7:b0:e7:4c:7f:3d:eb:61:1c:ee:82:
5c:37:ef:e9:e5:21:c0:77:0a:ce:85:5d:b8:bf:15:
09:9f:e1:e2:99:31:24:fe:bd:98:2c:df:92:cc:70:
fb:00:96:83:8b:8d:ce:54:02:ed:fb:50:45:fc:4d:
30:8c:5a:47:e4:aa:ba:76:73:4b:58:f6:e3:29:66:
69:ff:70:0a:58:c7:71:06:97:da:da:ff:b6:7c:2b:
c9:60:38:40:94:cb:78:65:fc:92:d4:0e:ed:4d:b6:
2f:bd:62:dd:27:52:9e:0c:4c:e1:2b:3f:c9:ba:22:
aa:86:94:13:67:cf:64:a5:c4:44:33:08:d5:a3:62:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EA:DD:7D:F4:E2:33:96:69:36:6F:C1:6F:A2:4F:EE:80:CD:DC:F1
X509v3 Authority Key Identifier:
keyid:CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:af:dd:a3:3e:15:1f:43:2a:48:22:33:84:1d:e2:51:1a:f1:
07:72:86:45:7c:da:81:dd:60:16:9c:e5:5c:a8:61:09:54:0e:
1b:0b:d4:b0:07:86:30:93:9f:f8:87:d3:55:93:46:df:0c:27:
ad:8e:7a:40:31:eb:9b:10:8d:ee:c8:bf:33:c6:3c:49:95:1c:
a7:b8:0c:b9:b0:d8:0b:24:ef:52:5b:a8:ac:bc:b8:98:32:d6:
bf:73:ba:ad:13:f1:87:84:40:c6:5a:ab:cf:5c:71:89:62:01:
14:93:ff:eb:9e:dd:bc:07:4a:5b:98:66:41:bd:24:ed:3e:a5:
d9:8b:76:4a:c3:ea:07:a6:a5:87:cc:d8:75:3c:a0:ca:fe:76:
0a:3a:7b:83:71:d3:0e:db:1a:80:58:c4:d1:04:83:b7:07:7d:
f7:1c:d9:5b:5b:98:e3:05:0e:66:b5:f1:67:85:a4:4c:71:14:
42:66:97:47:9f:84:eb:9f:fb:df:77:bd:65:ee:7d:a7:c7:11:
e9:18:0e:98:df:3b:ae:1f:80:2a:e3:ac:c3:1e:d3:ca:53:8d:
74:f2:08:fb:fa:78:ca:0a:6e:28:e0:e9:bc:23:f4:72:0b:d5:
19:5c:ae:6d:47:39:36:1d:31:aa:87:fa:f2:b8:93:2a:72:be:
f1:5e:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:50 2025 by rpki-client