Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: BmMQSfIBdLOBQ3AoqGcsg8g/NZcs7Qv6/ve/okzGAiw=
Subject key identifier: 32:7F:97:5E:87:70:05:43:CB:F6:4E:2B:C8:52:F2:76:D0:6E:7E:B1
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 0199FB45D0FAB002A3F5CAD9378098E8C98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 04B5
Signing time: Sun 19 Oct 2025 07:01:20 +0000
Manifest this update: Sun 19 Oct 2025 07:01:20 +0000
Manifest next update: Mon 20 Oct 2025 07:01:20 +0000
Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: 0DamAV2dvRKq4G4wbiIIhT8XgVsCsy0lsTXDtJ0BPs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d0:fa:b0:02:a3:f5:ca:d9:37:80:98:e8:c9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Oct 19 07:01:20 2025 GMT
Not After : Oct 20 07:01:20 2025 GMT
Subject: CN=327f975e87700543cbf64e2bc852f276d06e7eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:3c:f8:93:ff:0c:5f:81:cf:b0:cb:e6:0e:
21:0e:f9:31:a6:99:39:03:47:0f:d8:94:05:0b:5f:
dd:b1:14:f5:0c:1e:ec:26:31:e7:79:64:f7:af:93:
40:c0:c1:50:78:50:86:c7:27:89:f7:a7:49:27:06:
b4:1d:f5:eb:8b:53:5a:b1:d6:4d:ef:fa:34:ff:d7:
38:c7:2b:c7:81:38:03:9d:2c:95:44:ca:92:6f:37:
9c:ff:d5:b9:0f:70:a9:46:12:d9:36:2a:44:8c:c3:
d9:c2:7c:cb:53:42:25:10:99:43:34:0c:03:2e:5f:
e4:07:9a:ab:fd:c4:3a:2c:71:6a:69:88:85:98:8c:
9e:4e:85:3b:cb:38:b4:8d:f2:2c:bd:95:91:cd:2d:
2a:66:61:56:a9:f6:91:d9:b0:c1:94:ed:4d:bf:b6:
eb:8a:ea:9b:22:bf:62:ae:b2:0d:56:e8:bd:40:4b:
69:48:6a:cc:82:75:06:96:66:3b:c4:a0:10:7b:92:
eb:e2:44:4b:16:02:4d:56:d8:8b:69:22:3f:5a:77:
bb:6e:67:2e:6c:57:6c:25:d0:38:7c:2a:e5:98:95:
67:38:70:27:76:82:15:4c:3d:fb:7c:9d:f0:6d:f7:
ed:50:98:4e:50:b3:62:3e:d5:7e:87:c5:bc:10:32:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7F:97:5E:87:70:05:43:CB:F6:4E:2B:C8:52:F2:76:D0:6E:7E:B1
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:74:79:cb:63:cc:98:67:64:a9:89:71:ef:48:00:80:1f:b8:
2b:7c:4f:a6:45:52:21:bc:de:56:de:0d:56:6d:87:78:f4:3e:
45:89:5c:86:10:75:9b:dd:20:4a:af:44:ae:48:b7:10:d5:c5:
4c:46:dc:e8:0e:d1:91:81:19:f0:fe:ce:1b:98:fc:b0:ba:d6:
2a:e8:4d:2a:39:99:37:13:cb:11:c9:4a:cf:3e:52:94:ad:c6:
ad:6e:9a:dc:f3:61:5f:ca:59:44:70:03:bd:ab:b9:22:22:00:
27:65:4f:86:d5:1e:17:0f:e1:b9:3f:18:18:5e:de:3d:99:4b:
e4:a8:71:0c:dc:88:f4:77:60:8c:c0:a0:e7:f9:f7:1f:c0:bd:
0d:03:d5:22:68:95:03:2f:b9:a2:19:26:99:4e:72:22:b6:08:
09:66:26:fa:3c:69:2d:c8:ef:8d:92:ba:eb:93:32:4c:f5:cb:
45:f5:47:e6:80:c2:25:51:4a:bc:3f:f5:83:72:fb:4a:75:e0:
f9:cb:47:d2:28:85:c1:6f:30:d3:dd:e8:92:d0:b4:df:6d:80:
d5:f1:00:00:38:3b:a6:fc:66:e1:a7:69:3b:38:c6:25:98:f5:
50:38:eb:fd:b2:92:04:71:98:52:c7:94:1d:ae:d7:1b:d1:88:
e9:05:b2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:12 2025 by rpki-client