Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: YZVm904ktA/etCiTbjgoNzjLK3iSy76Iux1f2yUICOU=
Subject key identifier: E1:74:56:AC:8D:BD:4B:6F:05:77:92:E7:DA:39:D0:B3:FF:79:77:28
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 019A4EF4C566B9BF75F2A0D192A7E10E3547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0A42
Signing time: Tue 04 Nov 2025 13:00:55 +0000
Manifest this update: Tue 04 Nov 2025 13:00:55 +0000
Manifest next update: Wed 05 Nov 2025 13:00:55 +0000
Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: ehRDmvSayMuIx8miXktmlHKhm02V0yFPIsDAzL4clBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c5:66:b9:bf:75:f2:a0:d1:92:a7:e1:0e:35:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Nov 4 13:00:55 2025 GMT
Not After : Nov 5 13:00:55 2025 GMT
Subject: CN=e17456ac8dbd4b6f057792e7da39d0b3ff797728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:b4:ce:2f:c3:79:01:ba:2d:d8:8a:82:8c:
c6:e0:ea:71:99:0a:a0:75:55:95:da:b2:1e:3e:9c:
6c:9b:bf:58:3c:f4:0f:fe:d3:5b:92:f7:87:87:8f:
92:fd:4b:f3:f2:6f:8e:7f:52:f0:a9:13:f7:72:8c:
2e:61:29:31:98:73:1a:af:85:04:ad:50:b2:6c:e9:
c3:80:6a:41:0f:65:84:1a:21:dc:85:f9:d3:79:37:
e9:b7:fb:2f:47:a3:ae:a5:40:b4:ea:48:ea:14:9b:
fa:6c:bf:68:a9:4b:6b:7d:a7:48:e6:b4:73:cf:1e:
d8:38:97:75:3f:c9:2c:be:62:97:08:1e:da:0f:20:
10:f3:b3:72:c9:63:97:d3:a8:34:83:f6:47:4f:7b:
41:63:54:47:6e:fa:35:b8:99:7d:d7:c2:5a:d7:1c:
cd:d9:46:fc:89:2c:41:37:15:91:db:86:99:27:2d:
0e:df:e4:95:1d:6b:4c:11:55:d8:dd:2a:bd:3f:7c:
7d:11:f5:e0:75:67:a3:ee:58:4c:6b:8d:01:33:f9:
a0:01:72:b0:69:14:42:63:ec:43:04:f8:fb:31:04:
07:65:bc:c6:0a:c0:9e:9b:f2:d8:8f:de:90:89:26:
2d:d3:21:77:7f:ed:a4:86:bd:b7:bd:da:83:b0:c5:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:74:56:AC:8D:BD:4B:6F:05:77:92:E7:DA:39:D0:B3:FF:79:77:28
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:31:d4:be:96:ac:a4:8e:17:8f:56:d1:ba:63:8e:e8:4d:43:
36:4a:ea:27:5e:14:0f:f5:1c:0d:a0:ec:0c:4d:3f:1b:b3:f8:
55:0e:bc:62:03:ba:47:e0:a1:12:4c:0e:74:80:87:8c:75:e9:
2b:75:8e:51:58:37:d3:c5:10:21:bc:a5:22:78:18:c5:cc:2b:
b2:dd:87:d2:52:1d:b4:a9:78:41:61:91:cc:59:e5:99:d4:ae:
e5:9c:d3:3f:f9:4c:0a:a8:1e:20:32:6f:fb:1e:ba:93:9f:58:
f1:77:b9:6e:25:dc:4f:43:0b:f8:bc:c2:92:c5:32:6f:9a:c0:
7f:63:a4:4e:d0:84:bf:70:c1:38:c0:cc:12:29:f6:e1:94:ab:
fe:73:08:1b:7a:6a:9d:26:24:da:5b:a3:b5:34:53:43:e1:26:
56:1e:41:d8:3d:d4:6e:5c:4e:20:3c:f7:11:73:72:63:e5:a9:
10:75:e0:25:01:e9:f0:64:0d:e7:08:b7:1a:98:23:be:9c:d1:
d2:55:7d:0c:bc:71:b6:ac:ed:e7:00:4a:76:d1:09:22:50:69:
0b:a6:78:f5:d9:09:4e:5b:bb:e8:62:3e:9f:ba:e4:6c:32:08:
c0:94:6e:3b:cc:bf:08:a0:ed:74:b5:72:9d:95:4b:c9:43:bc:
b8:52:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:44 2025 by rpki-client