Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier: kNSmj+ZIFn6vSGzPcIQgRoiJGkVtEgbFiYDkaDZfG1s=
Subject key identifier: A4:61:D4:C7:42:3F:0D:7A:CF:A6:F7:C0:64:2E:62:AA:5D:5F:73:50
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 0199FD34651B6CDEA8904AEA08BEC365CB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number: 0BBE
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa (hash: scGqiYOmrM2j/apqj1QvggRupECIf8XpZkFfLXcvrsc=)
2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: 7iGiH8hs1GjUuj6JkVfGTMz4RcreMyqoEYS4q20dgYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:65:1b:6c:de:a8:90:4a:ea:08:be:c3:65:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=a461d4c7423f0d7acfa6f7c0642e62aa5d5f7350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:cc:6a:b8:11:8f:f8:b6:e9:a0:97:b5:2e:
c4:23:72:a3:d8:0f:76:85:ac:10:b4:a0:1c:72:40:
64:0c:62:0a:c8:9d:31:eb:07:fe:3d:53:93:2e:c7:
c0:1f:e9:41:a5:3b:fc:00:f8:40:da:93:18:e7:48:
97:72:90:8d:6b:92:98:15:26:54:d0:6b:17:11:6d:
87:ac:bf:a9:61:0a:3e:32:53:d9:4b:23:a4:35:ae:
23:f3:06:89:7d:34:06:0d:29:e0:5a:3a:b0:93:7e:
71:d4:06:2d:d6:e9:da:9d:0c:cc:55:6f:52:48:9a:
23:ab:f2:83:03:b5:20:40:21:ad:2b:88:e5:58:19:
0b:bf:e4:47:90:4d:43:18:00:a8:15:1f:3c:b7:dd:
05:27:40:b9:09:fb:0a:c0:a9:8c:b1:3d:96:d9:5e:
d8:13:12:1c:cf:ef:94:5a:72:90:2d:86:f5:c3:1d:
7a:4a:3f:32:c6:20:c3:1e:3c:d8:a9:1d:62:27:33:
d5:56:25:17:cf:54:4a:3c:b0:05:bc:52:37:6f:af:
26:89:df:b2:2c:bb:1a:5a:7f:99:a7:73:56:c9:b2:
9b:f3:7e:1c:14:ed:ca:0f:6a:c1:92:1a:fa:61:3a:
f6:c1:98:81:97:b8:9b:d7:b3:0d:30:e5:cf:ce:09:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:D4:C7:42:3F:0D:7A:CF:A6:F7:C0:64:2E:62:AA:5D:5F:73:50
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c3:fa:20:65:db:b0:44:dd:97:3a:df:3a:4d:1b:02:37:35:
12:ff:a1:1a:b8:a0:93:e5:a9:5a:67:07:39:35:6b:86:02:aa:
4e:92:f1:c4:d1:90:ba:10:20:da:bc:27:11:33:ca:a8:d9:2e:
04:d2:04:ee:f7:14:15:9e:34:06:e9:f6:59:30:27:77:06:70:
37:be:d9:f4:d7:df:85:20:d0:5f:c8:99:3d:39:d7:03:17:07:
8c:14:d0:eb:1f:a1:8a:fb:c3:4c:88:83:9d:2e:06:70:c7:07:
bc:e1:fc:e6:5b:49:a3:11:62:57:2d:f3:82:01:03:85:70:43:
56:08:77:2f:87:11:d5:a5:6d:d8:19:cc:62:3c:70:13:bd:7a:
1c:b7:ff:b2:7f:95:2a:b5:fe:db:9f:82:ad:60:c8:4b:2b:49:
1b:12:d0:99:6b:6b:c5:0c:7e:d3:8e:c7:94:df:2b:ab:74:76:
70:25:e1:44:3d:ba:08:6b:07:25:8b:d4:57:5c:b3:2f:b0:d6:
db:58:35:03:b9:e1:3b:ec:6b:a9:92:9c:ff:84:5c:09:b4:4e:
a5:22:c2:81:12:c8:c2:1e:d1:8a:c2:e1:fb:9e:34:6c:9a:5b:
a5:f0:95:2c:37:12:32:16:ed:7c:3c:c6:40:ef:4a:8b:3b:78:
08:8f:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:33 2025 by rpki-client