Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: HABMWKaDvCfoVtProkRX9nRSbGR/Br24ViX4Szy8Jk4=
Subject key identifier: AF:0D:42:18:26:87:FF:B2:4C:86:B6:13:2A:69:D2:FB:B0:AA:AB:10
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019A4F98E67B1A64962B7D30B07DA8F7EB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:11 +0000
Manifest this update: Tue 04 Nov 2025 16:00:11 +0000
Manifest next update: Wed 05 Nov 2025 16:00:11 +0000
Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: MaOMGR4hjqz4mdAnE2qwdouV+9Z7z0Fi99MKuCRalAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e6:7b:1a:64:96:2b:7d:30:b0:7d:a8:f7:eb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Nov 4 16:00:11 2025 GMT
Not After : Nov 5 16:00:11 2025 GMT
Subject: CN=af0d42182687ffb24c86b6132a69d2fbb0aaab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:c4:2d:3f:5b:56:45:21:b3:68:62:4b:45:
49:8a:f0:40:68:0b:fb:41:9a:1b:c2:2d:6f:e9:89:
81:3c:41:07:e0:57:31:13:17:f1:25:38:8c:16:b1:
8a:af:e7:fe:44:59:27:f5:bd:15:15:d5:66:55:b8:
65:da:7c:7b:77:aa:ce:84:04:7a:ea:43:9d:83:89:
d6:ff:57:a3:1c:4f:0d:c0:b3:72:ea:95:08:69:87:
aa:0e:76:04:ba:40:06:9b:7d:23:a8:66:00:d2:40:
74:c0:fc:86:0c:5e:77:46:da:a4:7f:49:f4:dd:8f:
22:23:55:4d:1c:f5:df:e3:37:39:50:e5:9f:9f:32:
17:92:71:0f:87:56:3b:66:a5:c7:f7:9c:05:be:b2:
56:b3:2d:e2:dd:75:7e:ca:4d:e7:93:0e:aa:6e:42:
eb:f5:db:e2:29:a4:63:87:7a:a6:bf:6c:77:9b:f2:
aa:f5:53:cc:5e:27:4e:90:20:8b:6b:f5:ba:22:7d:
8b:3a:18:b7:b5:4b:e2:c5:38:38:a0:32:30:d4:ff:
0b:0b:59:ab:59:19:98:bb:ca:4e:08:06:46:a3:83:
40:59:fa:06:04:18:77:d3:eb:2f:7a:77:e1:ee:1d:
07:86:d6:af:06:1e:29:ce:38:6c:aa:5a:7a:e8:97:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0D:42:18:26:87:FF:B2:4C:86:B6:13:2A:69:D2:FB:B0:AA:AB:10
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d0:29:ce:7b:4c:cc:11:e7:6d:d9:ee:84:67:18:86:76:94:
bc:af:f2:ff:b1:49:dd:d5:16:f2:e1:84:69:ce:87:a3:40:f4:
21:b6:db:dd:86:7b:e1:8d:e2:34:4c:93:97:ba:5a:d6:08:da:
70:45:88:3f:fb:6c:67:0b:3b:bf:2d:5c:5a:b4:e6:ba:02:7b:
76:25:b7:e3:c8:54:8d:67:7d:0c:70:57:8b:35:36:a6:03:9e:
d3:8e:7e:0f:d6:82:c4:19:15:7d:1d:91:e0:bf:17:69:a6:47:
a3:e4:d9:42:11:25:45:fa:25:5e:98:c4:fe:98:eb:ea:29:27:
1a:62:0f:b3:00:a4:3a:9c:56:32:9d:64:60:b3:53:2f:8f:0a:
7a:f9:9b:74:92:b4:60:05:a2:fb:6f:60:e8:8f:cc:46:1b:4e:
9b:5a:d0:3e:c8:c8:a0:fa:ba:17:c9:7a:c1:83:79:78:32:71:
65:2f:55:96:86:a5:ec:8a:c6:dd:64:01:ea:d4:ee:a5:1b:09:
ac:25:73:d8:ac:a1:50:3c:ea:18:08:b7:91:f5:7b:50:7b:f5:
89:e2:98:89:21:53:a8:b0:49:4e:23:ab:3c:32:6a:a0:7c:28:
56:8e:02:5b:6d:fc:6a:dd:c7:ab:0d:ae:26:43:7d:b8:99:4b:
c7:1d:8b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:54:57 2025 by rpki-client