Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier: X5dLUbbm8WB9a/FxCm8DL+LohMqWesz9/qZNkbo84Aw=
Subject key identifier: C4:25:E0:1A:DA:16:C3:3C:1E:11:CF:30:7F:6D:99:1B:0C:98:6A:39
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 0199FC215455E75853C282D3967A5FEA871B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number: 0C0B
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: d43Bbm-jTlxIEQu_UfTFZQFzBcE.roa (hash: UkexUnRIJprjhWor4Jilgkay/bVJfFqJkF7dBPx8pH8=)
2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: DIigYA/DqxkelBH0wJjinilpDILjVAnr27rxdUPHW+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:54:55:e7:58:53:c2:82:d3:96:7a:5f:ea:87:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=c425e01ada16c33c1e11cf307f6d991b0c986a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9d:6e:99:be:36:38:58:0e:ba:5a:c5:77:8c:
07:e1:5c:4d:a2:1b:68:97:9e:39:40:9b:17:d3:79:
b8:1b:29:66:30:c8:2a:54:bf:ac:4a:d1:73:30:80:
b3:47:f4:c8:8c:b1:22:83:a5:86:4d:98:e0:e6:49:
45:ed:3b:18:74:c6:00:57:df:08:34:19:d8:69:eb:
06:cb:9e:b9:c5:3a:64:5a:0b:ee:8a:97:c1:3b:92:
8e:15:f4:2a:07:24:aa:93:e4:a4:6f:c1:40:c4:fe:
21:53:c8:be:e4:8c:bd:d0:1f:ee:b6:23:58:d2:3d:
ca:6b:be:fd:3a:61:b6:3c:98:a3:03:15:82:9e:0f:
bc:b9:7f:55:78:fc:1d:23:79:21:64:10:d2:a7:ab:
48:cd:0d:09:1f:3b:85:63:0e:15:33:85:6c:a4:56:
af:36:e2:67:f1:e7:70:9c:8d:8b:cd:75:85:7a:66:
f6:16:54:bc:e0:9c:22:d1:e4:01:9e:c9:87:3e:11:
b0:ef:4e:7a:36:be:a9:42:30:af:0b:57:13:1e:72:
60:cb:2a:8d:70:77:1e:ca:25:16:54:6b:00:e9:98:
95:01:c9:4d:88:e1:d5:17:ac:d7:aa:73:82:e6:e0:
f6:de:39:a9:c3:7e:4b:ff:ac:f0:ef:26:ad:84:fa:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:E0:1A:DA:16:C3:3C:1E:11:CF:30:7F:6D:99:1B:0C:98:6A:39
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a1:f1:b4:e2:4d:ba:f2:08:22:38:cd:1e:8d:3a:2f:44:5a:
1f:66:93:01:56:c9:51:09:ce:5d:81:d2:88:d6:9c:ed:c0:e7:
23:4e:72:9c:6c:f3:1c:a6:8d:4a:aa:7f:6c:86:28:dc:ac:af:
c2:76:4a:db:97:ba:f3:b2:47:96:7b:69:47:30:f4:99:db:d3:
37:69:0b:5a:0a:3b:eb:d3:f4:64:d6:bf:1e:d3:35:0a:a3:64:
52:ba:e2:90:a2:19:c9:ad:7d:4c:79:31:3f:77:27:9b:c1:7b:
6d:88:cd:ee:66:ff:30:eb:e9:d9:99:05:e2:3e:e4:67:ad:32:
a9:90:40:33:9c:af:a1:3c:11:06:be:78:45:86:4b:d2:ab:e2:
23:f9:25:db:82:9f:12:e3:10:8c:32:72:84:95:57:d5:c0:2d:
20:23:cb:c6:ba:97:c3:87:5d:85:13:58:6a:52:5b:e9:71:fc:
43:15:03:17:6f:9e:e1:f1:a0:f5:e3:af:89:4b:9f:18:03:bb:
2a:a2:7f:0d:95:04:f1:f8:bb:30:f2:1f:38:8b:d3:90:15:75:
52:c3:84:00:eb:58:16:fb:db:7e:8c:24:39:90:6c:58:e6:23:
cb:0a:cf:37:03:0c:40:fe:75:73:67:6c:e3:d7:7b:07:f4:bc:
2d:bd:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:49 2025 by rpki-client