Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: HPXazsyMRgb822qCyiwlT945Wzs1Z3HkJ5YxSsKXi2o=
Subject key identifier: D1:A3:CD:89:AC:28:A3:F0:4A:08:3F:64:CE:6E:B5:B2:F3:C9:8C:F6
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 0199FBEB58E234A652AF4E0DBE27C724D94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 1065
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: wDvIF8IUEQhjnYm69O7DnmCZNJY.roa (hash: AHCZUkCpuvskw07HtMA8aALHO5a1ETyk504pdPIdAIc=)
2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: umcSGJUMqB++VGASfmGeB04XjDIlIX+MOm7RSuzVxtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:58:e2:34:a6:52:af:4e:0d:be:27:c7:24:d9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=d1a3cd89ac28a3f04a083f64ce6eb5b2f3c98cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:56:f6:06:0c:e8:93:1f:f5:3b:2d:ae:ef:
d9:f6:c9:88:dd:95:b8:bf:24:87:89:8d:73:ac:6a:
e3:78:9f:9f:fe:55:d4:cd:21:e3:93:5b:3b:e1:df:
4a:3d:2e:ad:45:0c:c7:b7:d2:6e:86:ac:6c:65:13:
b2:d3:6b:1d:bf:09:7d:68:f5:3d:63:68:4a:9f:92:
9c:6c:3f:5c:4f:d4:ac:0b:f7:38:fb:65:75:0d:2d:
b5:ac:60:de:f9:59:54:53:a4:5d:00:8d:23:01:de:
7e:e5:ec:44:82:3e:ed:41:f1:30:55:18:f3:34:9f:
7a:7d:32:b2:ad:20:a2:82:6b:4d:3b:5f:cb:3c:5a:
d1:ad:7e:f7:8a:1a:cb:b1:e9:9c:36:a1:08:88:9c:
9c:9a:84:48:4f:12:29:dc:48:fc:e7:26:90:21:8a:
42:75:b9:cd:12:e8:cb:fa:c6:97:74:2d:07:57:86:
ee:29:7f:f2:a0:d0:1e:e3:a2:30:ef:fb:67:f3:a4:
65:a2:95:79:f1:13:4b:23:ac:a1:62:75:06:11:da:
45:84:a7:8a:43:c9:bd:2e:27:f4:4e:a9:07:bd:0b:
ea:c2:6f:c6:4a:c7:49:2d:34:c4:ac:c2:0e:3a:14:
e0:0c:e4:49:23:49:62:2b:fc:6f:48:a4:b5:e6:1e:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A3:CD:89:AC:28:A3:F0:4A:08:3F:64:CE:6E:B5:B2:F3:C9:8C:F6
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2d:70:38:ae:16:dc:40:a5:65:0e:38:d0:03:d5:4e:86:9c:
0b:fb:40:0a:05:20:3a:55:42:02:37:2c:2b:0f:4f:e5:4f:e3:
f1:41:4d:fb:2d:6e:e4:62:95:8a:93:13:77:d8:04:7e:7c:99:
4b:33:5d:1d:d1:c3:d5:15:10:8b:fb:71:ef:7a:1c:91:cb:71:
4f:3a:fa:88:0a:9f:5b:4b:36:22:c8:8e:dd:eb:02:d1:5b:e9:
19:dc:36:99:3d:dc:c7:e6:65:01:d1:99:f6:58:79:e2:af:41:
4f:26:d2:5f:57:f9:13:be:0a:da:51:46:d1:27:ce:a5:b1:21:
53:f4:dc:99:bf:c4:f3:a0:e4:3b:ce:91:96:88:f3:ba:91:1e:
1d:d3:df:fc:c8:dc:7d:a7:82:2e:cb:41:c0:4b:df:e9:80:b1:
64:25:ac:54:1e:39:fa:81:7e:e7:66:33:af:e8:c9:e8:71:15:
a0:d2:33:1c:e3:05:07:5a:2b:2f:3e:a4:89:71:72:a2:9b:12:
f3:23:24:b1:45:80:9b:28:96:15:4b:9f:cf:1d:54:ee:b7:10:
54:a0:6d:9d:f4:17:dd:33:cf:37:7d:c8:3e:21:d3:f5:1c:24:
5f:c2:0d:c5:be:56:fb:d7:16:60:a9:ad:2d:c3:66:e2:64:1f:
ef:f2:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:25 2025 by rpki-client