Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: cFoyolHafU+0i9JN5m+6NTzOpal7By+hh2deAjlK5nE=
Subject key identifier: 8E:C9:46:9E:2E:8F:35:E7:85:1E:98:B3:36:D4:2D:03:74:32:97:39
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 0199FC214A92AEE71725D9D472F33E1E8777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: AF
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: IjHqWxuNpJU8DaK_lff-VC_PVWQ.roa (hash: kBcWX1ntdL3bghAjxPsE3h6Q1xLnJksKwhAqQ4KHWmw=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: jw9QvbKB83KufX/KucoDWrgi0cytBk4ThoDiCfEQEcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4a:92:ae:e7:17:25:d9:d4:72:f3:3e:1e:87:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=8ec9469e2e8f35e7851e98b336d42d0374329739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:a9:6a:17:75:5a:97:77:8e:f9:0e:c1:08:
4d:cd:79:3c:6a:90:2e:41:58:6e:7a:dd:aa:b0:fc:
87:08:2c:89:f1:67:08:a8:8e:30:6d:9d:86:7c:33:
27:38:61:60:b9:65:4c:70:5e:d0:45:2a:4d:e3:a1:
5e:68:71:92:77:8c:12:16:fd:e5:c0:da:5c:a0:36:
98:79:31:a7:a4:56:9f:c4:78:59:28:12:95:6a:c5:
be:84:cb:66:b3:ed:55:ad:64:5d:d3:42:73:02:11:
9f:41:86:10:2a:49:9b:a6:d7:93:27:0d:2e:b0:a4:
98:b7:b0:2e:d3:4f:cb:05:4e:3d:09:21:19:6b:fd:
5d:62:0d:29:b6:70:98:e6:71:44:34:4e:bb:47:e1:
e8:a2:35:b5:04:28:2c:8a:38:83:ed:ad:2b:67:93:
4c:1a:ba:83:67:6a:63:e9:47:f0:c8:ee:9c:8b:d9:
0c:6b:cc:56:fa:02:6e:0e:6e:4d:13:d5:ac:53:d0:
57:99:02:06:dd:14:f2:9c:a2:01:2c:fd:0c:d6:cd:
79:f4:11:3f:4b:55:36:70:b4:33:f0:fa:57:0f:dc:
e3:2e:22:cd:2c:91:25:46:07:f9:b1:24:c3:ff:10:
3b:88:ff:e6:7a:80:f8:19:cd:da:4c:15:47:88:8b:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:46:9E:2E:8F:35:E7:85:1E:98:B3:36:D4:2D:03:74:32:97:39
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:88:a1:6f:eb:8a:96:8c:ba:16:51:6a:4b:5e:f1:f8:cf:aa:
18:56:93:d2:df:5a:94:62:36:4e:8d:0b:91:15:dd:3e:d6:bf:
79:a5:68:9c:32:a7:a3:17:53:dc:dc:86:d9:6f:92:53:42:5b:
4c:aa:44:26:79:36:78:48:c6:a6:3c:40:48:3b:7d:04:b6:85:
8d:9e:72:8b:99:d9:9d:d8:1f:32:57:8e:e1:4d:56:61:c6:7d:
31:9d:48:a3:88:ad:b8:51:a2:42:88:ea:9f:53:50:6f:c2:68:
40:d5:7f:93:88:29:c6:7f:25:2a:9a:ad:09:93:79:a4:6a:33:
27:15:fa:1a:43:a9:bf:70:2f:19:a0:23:63:11:c5:84:f2:72:
5e:bc:41:bc:d9:e8:fc:e1:ad:df:3d:a8:e2:96:74:44:c6:78:
fa:c9:d1:f5:d6:b1:72:20:97:12:a3:c4:9d:80:84:5f:b5:6b:
f7:40:41:fa:72:46:54:73:2b:0d:2d:4e:15:5e:95:21:b4:74:
37:41:e2:97:a2:e2:1f:c6:58:a8:76:9e:c6:13:43:54:44:2c:
b4:18:2f:40:4b:60:62:22:99:81:be:d8:69:87:59:6e:4a:6e:
7f:bd:dd:87:9b:49:97:67:dc:aa:0e:7d:de:2d:9c:0e:b9:31:
c3:60:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:29 2025 by rpki-client