Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: RB5EtOV+6roIkSRKjWvKF+WGS3VW4ANeS8eJ9kRd9v4=
Subject key identifier: BE:16:05:F2:6E:96:9D:47:B8:71:D0:2C:62:DC:CB:CA:2C:82:D8:97
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 0199FBEBB13E4DE883D5E842A7893703EE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0810
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: huuLuRITapDRtqugRVpxBMDF5noZhZ2YSsL/tzM7cj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b1:3e:4d:e8:83:d5:e8:42:a7:89:37:03:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=be1605f26e969d47b871d02c62dccbca2c82d897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:e2:8a:79:33:cc:b1:64:38:72:83:da:d2:
2a:a5:af:67:f7:d7:3d:bd:5c:ed:8b:0f:34:28:e1:
c4:fd:da:2b:db:f4:17:a9:23:94:a6:53:df:13:a2:
77:2d:42:43:4e:36:08:6a:e4:af:dd:42:8d:db:22:
0e:30:4e:f8:32:fa:91:39:3b:04:08:fc:8c:4b:08:
d8:31:f7:b9:ce:39:c5:6a:fb:54:be:88:0c:3d:a3:
80:62:23:5b:a0:c5:6e:b0:47:1c:0c:74:e2:a8:cd:
e8:13:be:38:7e:cb:9d:e2:47:70:45:fa:4b:bc:8a:
01:49:5f:f8:55:54:e3:a9:6f:38:42:44:54:ab:2c:
c3:cb:1f:f0:e3:96:a4:e5:5c:ca:1f:c4:fd:19:cf:
d4:ac:d8:96:18:42:ad:05:e0:9f:98:9e:29:dd:93:
d7:8c:3e:b0:70:6b:b1:73:ab:bf:da:71:1c:dd:fc:
01:a0:4c:db:69:de:b0:0f:f9:43:e8:ee:1a:b0:cb:
82:d7:bf:95:4b:7d:c5:e0:67:03:be:06:0f:e7:c8:
3a:57:10:98:48:02:de:66:39:52:21:be:d3:6c:43:
5a:68:92:f4:24:f1:59:09:2e:b6:ec:b0:5c:33:ce:
bd:a6:7b:66:2a:06:a9:ee:75:d5:ba:97:e6:ba:04:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:16:05:F2:6E:96:9D:47:B8:71:D0:2C:62:DC:CB:CA:2C:82:D8:97
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:07:09:db:36:a8:90:d9:ac:f1:c0:54:7b:e9:14:4b:8a:55:
23:c4:bb:b5:03:cb:5d:3f:1c:35:18:d4:e2:b5:3d:3d:62:8b:
cd:37:a5:57:67:6d:13:c5:05:9d:37:b7:2d:70:12:34:db:45:
ca:d0:06:d0:8b:fa:88:7e:97:53:58:8b:b5:88:f5:20:8d:54:
27:b7:fd:9f:f1:7c:68:7b:ed:93:c6:a6:20:65:e5:af:66:49:
48:c3:7d:ba:27:7a:e3:d4:f4:26:d6:83:9e:f4:5f:cf:8b:b6:
3d:54:9d:0d:5d:fe:bc:3c:4b:53:38:01:20:cc:5a:46:a6:d1:
99:5b:b1:6c:db:a5:e4:62:a6:d5:ad:a9:81:d9:bc:6b:15:ad:
1f:e3:ef:3d:bb:8d:30:5a:6e:d0:46:f1:0e:9d:1f:dd:31:73:
20:37:74:f8:9e:d3:3c:6d:19:54:8f:dc:ed:60:0d:f8:4a:28:
84:e5:87:b9:1a:0c:69:5d:fe:dc:79:2d:52:00:a8:4d:23:af:
38:0a:dc:fb:6f:71:15:9a:80:9e:92:1a:f9:5d:38:45:80:9d:
35:ec:4c:0d:7f:a3:0e:f9:97:1f:81:2a:29:0d:d0:48:59:2a:
09:f2:7b:98:5e:c3:99:84:76:96:df:13:62:90:42:d3:d6:b7:
f3:01:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:29 2025 by rpki-client