Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: +2lM2iJD6QHNgoWDG/0KY0qA4Vqo5aqscBZaDlZ+HZY=
Subject key identifier: 4A:2D:B3:E5:8C:AD:37:00:DC:C7:7A:6F:A8:68:11:20:15:CD:C3:2C
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 0199FD6AE01A7CCFAF4DFA8DD4A8A2321942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0BD5
Signing time: Sun 19 Oct 2025 17:01:03 +0000
Manifest this update: Sun 19 Oct 2025 17:01:03 +0000
Manifest next update: Mon 20 Oct 2025 17:01:03 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: zAAloatxxdTeODVgzcx8rCyBQyQvUutgGWu0UHfOPkU=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e0:1a:7c:cf:af:4d:fa:8d:d4:a8:a2:32:19:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Oct 19 17:01:03 2025 GMT
Not After : Oct 20 17:01:03 2025 GMT
Subject: CN=4a2db3e58cad3700dcc77a6fa868112015cdc32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:4b:8f:df:de:9b:31:b6:1e:d7:ce:c7:ea:
43:b6:53:c2:9f:78:ab:82:19:70:b1:04:c7:60:8a:
54:8a:d3:4e:c7:af:9d:8c:c4:2f:ed:7b:54:f4:e6:
68:ac:7e:21:d3:66:f8:1c:fa:75:3b:e7:76:2b:c5:
b9:51:52:79:7e:f8:1a:0f:c7:94:86:19:6e:b1:64:
bc:98:e8:95:a6:b7:af:7e:cb:85:78:7b:f5:0a:5b:
30:41:54:72:16:cc:b0:63:4e:9e:f6:dc:08:42:63:
07:e4:4f:fd:31:be:a7:98:fe:26:80:b3:46:11:91:
67:83:f8:6f:c0:71:c6:56:ba:10:c3:ee:e7:a0:66:
a8:73:7d:31:b6:15:60:40:d8:fa:59:78:1a:fa:d8:
5b:f1:33:c0:a3:89:49:1d:1f:3f:92:23:1d:89:ac:
16:dc:e3:15:cd:73:3c:d0:e2:13:2f:4b:98:aa:1d:
53:e8:11:16:d8:65:e2:a5:fd:8a:f9:cb:25:5a:69:
3e:52:be:38:77:a8:68:d8:95:bc:69:08:e0:e9:b3:
82:cd:08:7b:ab:c3:3d:f3:a1:99:e5:8c:98:f8:20:
03:43:8b:f8:ee:3a:3f:db:7c:b9:1d:40:86:04:ed:
58:08:b7:46:ee:19:d3:c8:da:43:e8:66:b2:bf:2d:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2D:B3:E5:8C:AD:37:00:DC:C7:7A:6F:A8:68:11:20:15:CD:C3:2C
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:df:86:6d:45:3d:42:78:57:6d:46:1c:d9:d6:c2:0e:18:8a:
c8:f5:45:4b:1e:1c:d9:0f:17:8a:9a:0f:55:7d:80:d0:b0:d7:
22:10:39:86:be:a1:a3:f2:2d:42:30:70:c4:8b:39:53:c8:5f:
82:d7:b4:6c:3c:c6:8d:36:cd:6a:b1:1e:ba:6d:5d:2b:7f:95:
22:39:39:7d:6d:f0:ce:9b:80:2c:90:e8:87:03:2d:cb:2a:2f:
09:d0:6d:16:88:62:85:13:36:85:95:67:be:ad:5d:02:56:f2:
da:f3:1f:f6:cb:ba:73:69:c9:6f:26:0e:85:02:e3:a3:21:1f:
6e:97:e4:95:e1:b5:46:aa:a8:d0:8c:0b:72:52:d6:95:b6:75:
44:1c:f2:71:aa:28:67:79:bc:88:78:11:ee:1d:f9:76:20:44:
9e:40:9f:61:7d:eb:7a:36:31:1f:34:41:32:b7:88:35:57:aa:
87:88:4c:bd:80:a2:4d:20:d5:b2:89:d7:6d:49:af:3d:65:c5:
90:70:4a:e9:f1:eb:bf:a1:9e:5a:8c:8a:3f:a4:e2:dc:48:63:
a5:9f:bb:ac:8a:f2:1c:4c:37:b4:3a:df:47:77:81:52:c6:40:
b5:70:2c:73:70:c6:54:b7:2a:f2:69:02:17:2a:db:bf:96:7c:
cb:41:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:34 2025 by rpki-client