Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: YzzP22f9vFsWK5m1jXo5T3X5o+8y6sUpMbiHXLJKOXM=
Subject key identifier: A8:06:B0:08:B3:C2:07:53:B3:4A:77:DE:82:36:F7:F1:26:7E:C7:0B
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 0199FC5877576F0D290A2B5E9337915D37D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 0678
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: GmFlbEC9FD/VE2/yj9s2hqIJSVI2+FDTjbKQpUN6Nmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:77:57:6f:0d:29:0a:2b:5e:93:37:91:5d:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=a806b008b3c20753b34a77de8236f7f1267ec70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:2b:a0:f8:0a:bc:1e:c7:fa:c9:50:d1:92:
08:7a:bd:4a:cb:f9:e8:ad:65:23:df:7c:1b:b5:de:
3f:5b:14:39:5d:b4:5c:99:42:79:eb:b9:ff:66:9d:
bd:32:37:56:0f:99:3e:d6:f3:06:57:8e:cf:d6:27:
21:7a:06:1b:85:b7:bc:76:ae:86:83:32:d4:90:eb:
95:ef:bc:a9:f3:85:3a:c0:34:bf:1e:0c:74:88:ea:
c4:55:a3:2d:08:9a:96:2e:ee:55:46:39:68:0d:11:
0e:e4:11:72:c4:49:6b:1c:b9:c0:10:e7:aa:77:9e:
f2:9c:0a:3b:05:42:a0:9a:cb:ea:43:26:97:5c:e6:
3f:72:5a:b7:c3:17:66:eb:03:28:cd:5d:de:a3:b3:
d8:0f:fb:be:2c:a6:f3:d8:0d:e4:fa:62:3e:99:6a:
4b:e1:3f:2d:fb:ce:95:72:64:33:65:b5:59:3f:0e:
4b:8c:ae:65:3e:55:48:19:12:1b:b3:07:dc:7e:dd:
dc:10:8e:16:f6:e9:48:95:4b:26:78:1a:8a:13:2a:
99:4c:94:75:a6:9c:aa:12:9e:6f:6a:ad:2f:3b:2a:
3e:7f:f3:cf:a8:6a:08:5d:a8:e9:03:50:bb:d2:24:
cb:f5:fd:c8:27:e8:d0:dd:c2:0f:cc:e3:82:57:4c:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:B0:08:B3:C2:07:53:B3:4A:77:DE:82:36:F7:F1:26:7E:C7:0B
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a3:64:13:85:23:65:a9:98:b1:f0:10:78:c5:a9:ce:a6:7e:
e0:3c:68:e5:02:84:85:42:1b:6c:4d:25:91:a7:c3:dd:bf:71:
6e:8a:f2:93:03:7e:55:c2:c6:4b:29:9a:5a:bc:ad:e7:f6:0c:
a3:ab:c3:50:b4:d2:da:ab:e2:e8:64:0e:60:7b:de:c3:3b:d3:
c8:b0:6f:34:37:92:34:55:08:92:21:a4:32:8b:0c:13:45:d1:
6d:dd:96:dd:92:4a:7f:75:a9:13:70:fd:0b:c6:90:ff:3c:54:
c9:32:e4:7a:4a:c3:17:6b:4b:7b:9d:44:29:9f:88:a9:f1:f0:
06:3d:9e:4c:64:7a:24:05:89:8a:8c:31:6a:89:13:24:6f:37:
2e:42:8e:64:85:fd:1a:01:af:c0:cf:f9:76:0e:b9:a7:fa:06:
db:5d:96:5f:45:03:12:84:be:ed:22:09:39:9f:b2:d6:ad:ef:
04:31:b8:c0:a9:e3:5c:69:18:3d:b4:32:11:52:24:58:0d:49:
ae:fc:13:b2:37:6a:73:b4:22:c8:77:b1:a1:7d:d4:c2:9c:43:
5f:5b:75:03:e4:26:9f:d7:eb:dc:f2:8e:0f:89:c5:e5:b5:ea:
b8:dd:bb:51:57:0a:e8:17:60:a3:22:d3:b6:55:2c:ae:b1:1d:
1f:b7:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:16 2025 by rpki-client