Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft (raw, json)
Hash identifier: 5ssqa9xLD0vnZ6Qyud/un1DWBp88NbB6HqtwVc6I8TM=
Subject key identifier: 34:A6:7D:26:AD:55:7A:06:08:AF:89:E1:6B:6A:6B:29:9C:E1:D5:11
Authority key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
Certificate issuer: /CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Certificate serial: 0199FFC899EE468E8377CD498D46F28546F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
Manifest number: 1646
Signing time: Mon 20 Oct 2025 04:02:40 +0000
Manifest this update: Mon 20 Oct 2025 04:02:40 +0000
Manifest next update: Tue 21 Oct 2025 04:02:40 +0000
Files and hashes: 1: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl (hash: bbnEmwJfpAqdzfrGJsnOBQd8HrjKrPIwh3T3bN98gIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:99:ee:46:8e:83:77:cd:49:8d:46:f2:85:46:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Validity
Not Before: Oct 20 04:02:40 2025 GMT
Not After : Oct 21 04:02:40 2025 GMT
Subject: CN=34a67d26ad557a0608af89e16b6a6b299ce1d511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:20:15:0b:ef:fe:be:9a:81:72:1f:92:ba:
e7:84:f8:39:15:84:1f:08:49:02:e6:5d:aa:fd:d0:
e0:84:b6:ec:10:bc:a0:44:ef:ed:3d:33:a8:fa:25:
36:cc:bd:34:d5:43:ed:00:52:81:2a:64:2e:76:a8:
4c:ca:49:5b:47:d8:f9:16:75:88:da:ad:1e:13:83:
91:17:4d:6c:f0:c1:52:0d:9b:fc:70:4a:27:f3:f5:
81:a7:94:6d:ff:29:5d:c0:3e:18:9d:6f:89:65:a2:
25:7f:a3:e9:ad:e5:2f:8f:d4:86:74:14:b7:39:c1:
57:2b:3d:66:18:bc:c9:42:8f:fe:bc:59:25:5a:21:
dd:0a:1d:0f:17:3a:17:37:18:d1:a8:6a:d9:69:93:
01:9d:24:2a:52:b0:7f:f9:40:7f:90:a0:5a:42:31:
83:de:f0:a8:db:23:1a:72:73:e9:14:52:d3:bd:9e:
25:3b:60:7c:80:c9:86:5b:8f:82:59:97:05:1f:e0:
c7:ae:a2:e3:2d:cb:d4:4b:b1:dc:6d:f1:74:76:a7:
38:db:89:d3:8a:d2:2f:3c:97:a3:4a:ed:05:75:4e:
59:09:7d:9f:0a:e0:b4:7d:59:33:a9:d6:ca:3f:62:
08:cd:8d:79:b3:14:ca:de:5b:84:e1:97:4d:e6:50:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A6:7D:26:AD:55:7A:06:08:AF:89:E1:6B:6A:6B:29:9C:E1:D5:11
X509v3 Authority Key Identifier:
keyid:CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:31:00:e2:91:55:db:ea:43:13:41:39:fa:b3:38:98:6c:82:
ca:31:b9:e4:ea:0f:f2:80:0d:01:dd:80:da:13:d5:52:35:32:
2b:4a:44:ca:68:8d:04:bd:a6:64:c7:23:ca:14:85:1c:20:34:
9d:a0:71:12:b6:9b:61:26:4e:5f:e6:48:de:28:51:39:14:cc:
3e:9f:2d:e6:89:3e:6a:29:65:53:2a:39:d3:9c:84:e5:38:b0:
1d:2a:70:e1:cf:5f:10:fe:cc:23:46:63:38:26:d5:3f:2c:3f:
fb:56:94:3f:83:2e:98:53:57:1e:fa:d0:b9:06:fa:1f:f0:5b:
a2:7b:32:bd:fb:82:00:ec:c9:98:24:1c:74:35:10:22:05:e2:
17:69:9c:a6:d2:8a:dd:ad:87:e2:6b:66:07:1b:cc:5b:d2:c3:
a0:2c:61:c7:18:25:1d:a5:0d:ba:87:c8:6b:75:62:c0:a9:73:
90:fa:c0:e2:6d:7b:76:11:d4:36:50:53:51:1b:79:01:b2:1c:
a6:df:e6:2f:9a:09:9d:41:c0:0f:e9:8c:c0:b5:10:32:6b:b8:
0b:c1:6b:13:a1:43:7a:ab:d6:66:7c:5d:e5:12:f1:7c:a3:5e:
5e:a6:96:91:89:76:60:91:9f:bf:5b:5f:76:05:0d:30:de:24:
5a:a0:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:43 2025 by rpki-client