Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: nUz58IURcnzZQJmOscO6L2O5FH6ey1S4SzuINoBEwAY=
Subject key identifier: 65:54:8E:77:55:EA:7D:59:A3:A1:BC:DE:EE:B7:E3:9F:7B:51:C5:9C
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 0199FC216F068903D7D1D4BF79C4EB4C5343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 173B
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: d0oBGnp5k7LMn0UBlmo+tECN4kXBGb9OZsgYsu8zCWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6f:06:89:03:d7:d1:d4:bf:79:c4:eb:4c:53:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=65548e7755ea7d59a3a1bcdeeeb7e39f7b51c59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:b4:e0:7d:f2:51:eb:1f:39:46:dd:73:d1:
5c:4c:6d:61:93:26:26:72:ab:ea:6b:57:27:d5:56:
e2:e2:e9:6e:3e:db:f2:3e:ef:42:c1:d5:16:2c:f5:
7e:1b:18:62:1d:f3:d7:2b:42:54:cc:b1:dc:35:5f:
e7:44:92:0f:ff:17:9a:0a:fc:e7:ef:46:00:83:3b:
1a:20:98:f0:c1:ba:57:a9:3c:ca:65:44:58:ee:9f:
9f:12:51:9d:22:44:f0:bc:8e:60:69:60:ed:86:d5:
41:11:2d:67:cb:0d:44:cb:95:07:86:91:f8:5e:d1:
28:01:f9:f6:f4:46:60:13:d0:94:15:52:f8:8c:78:
2b:e3:01:af:c8:74:98:9e:4c:41:5d:b5:34:db:bc:
20:2b:46:e5:41:85:d4:5b:c7:79:b6:a8:ee:68:4c:
e9:80:1c:bf:b8:ea:d7:4a:d4:15:ed:0e:99:a9:e7:
46:8a:ba:34:e9:6b:65:2e:57:c8:a2:95:1c:db:cb:
c1:0c:71:fd:3e:5e:27:1c:78:54:c8:f0:b7:81:d9:
9b:a4:00:15:cf:56:09:01:8d:3b:ad:36:0a:63:e5:
19:06:5f:16:35:a0:6d:b1:1b:be:9d:ed:29:70:3c:
26:6a:a9:e4:46:ad:75:d0:33:7b:95:df:90:78:6a:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:54:8E:77:55:EA:7D:59:A3:A1:BC:DE:EE:B7:E3:9F:7B:51:C5:9C
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:51:5d:d3:af:3a:57:9d:f2:93:31:c1:33:1b:01:83:44:bf:
8d:89:b3:bb:39:c7:b3:2d:d7:a2:80:2a:40:b8:63:00:11:db:
f5:4e:7e:eb:34:d6:cc:5a:fd:0e:89:b2:08:15:34:5f:3d:05:
38:64:c0:98:a8:e0:3c:71:65:cc:13:e7:31:3a:ed:a9:6f:75:
22:80:5f:f3:57:41:b0:b6:24:e5:7a:16:be:15:b5:9e:70:0c:
57:5b:14:66:34:b7:42:a8:55:be:d4:de:93:89:7c:5b:99:ce:
92:51:4d:66:18:3b:ab:6b:2e:2a:b9:0b:ad:d8:b2:db:38:b9:
a2:5b:5f:a1:4f:de:84:48:dc:b6:58:70:da:1d:02:46:b9:73:
86:16:a7:fd:a7:f6:9a:b0:26:e4:33:ea:45:47:f9:05:92:6a:
d2:fb:14:8e:ea:6d:f8:ca:05:06:70:e0:d4:22:9a:4e:4a:b7:
2b:da:1d:63:5f:14:1e:75:34:c2:a9:cc:ff:60:fc:f8:a1:80:
e2:09:24:21:4d:6c:39:14:b6:be:1f:4a:6c:f5:c6:60:49:fe:
4a:d8:c5:7f:ac:06:d4:69:0e:88:3b:b3:6b:ee:98:ec:f9:2e:
d1:a8:e4:8b:55:59:5c:8c:73:f8:15:34:17:c7:5a:5b:85:a2:
fe:fd:ff:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:50 2025 by rpki-client