Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: mRD41UOyMvlNwSr0U/pov+mI/aTUbp757e04dQYxpWY=
Subject key identifier: EC:72:4D:D5:B7:54:12:2E:7C:86:C3:4E:B1:C5:A1:38:98:94:6A:9E
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 0199FCFDA4F0B4BD567F9978627422CBAE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0DC9
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: 1lQICs7jPcGcs3BPday2VRjauHShpIcR1dHfC0V1kOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a4:f0:b4:bd:56:7f:99:78:62:74:22:cb:ae:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=ec724dd5b754122e7c86c34eb1c5a13898946a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:8c:5e:a1:36:a1:88:73:5e:52:7e:7f:bd:
fe:d5:9f:c9:f0:cb:5d:71:05:22:28:0c:45:ad:d1:
8b:51:b4:2d:8a:59:3c:54:b7:64:6f:52:2f:92:49:
61:0a:05:72:20:d3:e0:52:f5:cc:b6:15:c2:3b:65:
bb:70:5a:96:a6:8e:d3:05:99:e5:f4:6e:c9:11:0c:
7c:d3:20:22:8b:dd:26:5d:96:b9:20:b2:7e:5b:26:
c3:02:c0:eb:d1:c5:5c:53:02:51:c0:5e:bd:cc:32:
4c:4c:5e:58:31:c6:4f:71:d0:45:13:f6:4d:8c:32:
54:f1:77:11:19:b4:84:3f:e6:e9:a6:9f:f9:a4:04:
d3:1c:6e:4a:d2:8e:7e:fb:94:5f:13:99:f7:ed:0b:
12:c0:70:b1:f9:a0:ed:03:ce:cc:de:35:3f:cc:ac:
2e:c4:64:24:46:4e:f0:b7:60:33:7e:ed:56:03:34:
04:76:ea:cf:29:ec:96:cf:34:d5:bc:d5:87:fb:b5:
68:4e:cb:03:c2:93:6a:28:15:8d:11:9f:11:f9:ac:
f1:a9:8c:c1:21:2a:a6:e6:a3:fe:d0:d4:8e:d9:19:
4b:6e:19:90:69:62:c7:31:9a:37:3b:93:80:1e:76:
54:19:e9:d2:9a:69:ef:35:8d:d8:ce:30:9b:58:aa:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:72:4D:D5:B7:54:12:2E:7C:86:C3:4E:B1:C5:A1:38:98:94:6A:9E
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:96:81:81:47:7e:9b:42:02:cd:f8:45:06:c7:6f:2f:d0:69:
ec:08:9b:e0:bb:a4:6b:47:6e:f1:a4:47:05:4b:78:e2:31:fb:
f1:24:17:74:f7:4f:11:28:f7:62:fc:ba:9b:ae:42:ec:d1:c2:
54:cc:5c:4d:95:1e:93:5a:d3:98:92:bd:ee:13:33:46:23:f8:
ba:c8:ef:72:14:c3:d4:03:b2:4b:c0:e9:88:34:15:dd:29:d5:
d1:7f:cf:fb:22:a5:a4:27:e7:f7:f5:de:dd:66:68:3b:90:9a:
65:77:65:46:d2:ca:1a:89:f1:7a:c2:c6:5d:ce:57:d3:a4:9e:
0f:e8:06:33:a1:cd:bd:3c:fe:56:ba:61:81:32:c6:12:bb:99:
39:fe:ec:18:71:25:50:46:2c:50:e9:69:62:ae:4f:d2:fc:a7:
81:80:ad:dc:4c:d9:01:85:95:a0:aa:15:85:14:8b:24:54:07:
dc:13:24:e9:39:97:51:c3:83:92:b6:2d:15:74:02:d1:c9:fd:
5b:ea:17:f6:1c:85:92:64:9a:a4:ca:19:60:56:4c:1a:be:7b:
b8:aa:5d:51:21:e9:41:e0:55:b7:b9:36:f0:1d:86:30:d9:90:
02:ce:c4:d0:06:86:cd:62:40:67:e2:c4:bd:19:1f:57:04:22:
68:59:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:45 2025 by rpki-client