Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: Zyb1KJDTO52S0BCU7seuHVbrnopPJeW09ejXD4QS96M=
Subject key identifier: B5:5B:E3:D4:DC:FF:3E:8D:7F:02:4D:1A:60:16:EE:1A:F9:52:7E:E8
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 019A5074CE53E376A6488F7BFAF26ECCFDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 20:00:23 +0000
Manifest this update: Tue 04 Nov 2025 20:00:23 +0000
Manifest next update: Wed 05 Nov 2025 20:00:23 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: +Tbs4GscPZmL3zLHUBYJfJYWMeOmneBzmEp9vuDtRI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:ce:53:e3:76:a6:48:8f:7b:fa:f2:6e:cc:fd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Nov 4 20:00:23 2025 GMT
Not After : Nov 5 20:00:23 2025 GMT
Subject: CN=b55be3d4dcff3e8d7f024d1a6016ee1af9527ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:8a:5d:eb:70:f9:20:b3:67:0a:2b:62:11:
4c:8b:25:db:18:89:69:1d:5c:4c:a3:bd:73:5b:fc:
12:83:51:cf:e7:f6:e7:31:01:db:8b:02:cc:e6:11:
0a:57:2a:f1:25:29:5c:08:f5:67:2e:91:95:51:87:
73:a3:3b:3c:2d:b9:0d:0f:7b:03:0b:79:4f:24:79:
1e:1c:62:3e:8f:94:00:fe:62:de:9e:53:a8:01:a7:
88:82:e7:3a:f4:63:a4:7d:21:b6:d3:ba:00:f0:97:
e4:30:6b:81:fb:72:8a:24:8a:29:a3:9d:95:a5:88:
53:fc:a5:f3:10:ff:6a:08:d4:56:28:4e:ec:a2:39:
44:86:00:d9:8e:26:1f:60:0a:2b:0d:64:52:ea:1c:
1a:a9:20:2c:39:59:ed:08:35:19:05:5f:f0:b4:68:
93:2b:4e:b2:16:e5:ba:5f:c0:94:d4:ae:c5:4d:16:
3e:b9:d5:4b:b0:34:e2:73:ba:de:b9:a6:c5:61:66:
09:88:d1:fd:58:39:ea:3d:5a:34:a5:e3:a9:62:2d:
79:e4:a9:2d:db:15:e4:44:d6:bd:25:96:6e:e3:4c:
e0:fa:3e:27:1b:0b:b8:da:d1:46:22:51:7a:08:8b:
58:07:43:87:8a:90:59:88:c4:75:8d:ef:0d:a5:7f:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5B:E3:D4:DC:FF:3E:8D:7F:02:4D:1A:60:16:EE:1A:F9:52:7E:E8
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:95:a1:60:20:fa:43:bf:fa:c9:17:ad:00:6d:14:85:2c:9f:
b3:b0:45:cb:86:34:be:27:c7:ce:2d:2d:c5:f0:1b:38:bc:aa:
29:9b:d9:06:ca:6c:06:d4:fc:8d:dd:5f:7c:8b:d0:2f:4e:e9:
f7:4d:37:36:d0:ed:96:c8:bc:42:78:e8:fb:3f:16:9c:65:14:
3f:b6:08:b3:59:17:f3:ea:5a:cf:51:1a:92:69:d5:2e:da:54:
1f:4a:19:4c:7c:b4:e6:fd:fc:d1:3c:30:1f:ab:dd:fd:42:71:
23:14:21:73:dc:15:ad:99:dc:a5:ea:b3:ba:ee:ca:32:7c:2e:
e3:e4:e0:c3:4b:f0:b5:3d:19:77:1e:4c:7a:fc:32:e3:5a:3c:
8f:b0:5f:58:51:28:01:a0:14:ab:d4:45:48:98:c8:7a:13:d6:
48:10:e5:87:a1:c4:63:3e:25:74:24:c4:7b:71:03:e5:e3:90:
8a:0c:dd:2e:20:05:5d:03:ea:1b:fa:ad:2a:6e:24:f7:7a:69:
75:9e:c9:c3:ee:fa:51:cc:f0:a3:f0:53:d0:37:ab:ef:58:f2:
c2:a0:50:1e:0e:a1:ef:2f:09:33:38:fe:7a:f2:8d:cc:5e:ad:
03:d9:ef:ff:e5:02:44:e1:57:bc:c7:df:06:60:87:4e:38:22:
4a:bf:96:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:34:49 2025 by rpki-client