Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: RTZIDTryLYqC5aiMEDPP0CWc6+jpAT3pUztLlHMCpik=
Subject key identifier: B8:71:7F:11:8A:DF:93:04:17:FB:1F:9C:4A:C1:B5:57:34:02:03:C6
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019A4DE21D0145A5BDD41C63FCDC05E25E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:55 +0000
Manifest this update: Tue 04 Nov 2025 08:00:55 +0000
Manifest next update: Wed 05 Nov 2025 08:00:55 +0000
Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: /RI2t6eQsK8FS2Lmr7U/WVRinkKrwUBi72mjewg6lXM=)
2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1d:01:45:a5:bd:d4:1c:63:fc:dc:05:e2:5e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Nov 4 08:00:55 2025 GMT
Not After : Nov 5 08:00:55 2025 GMT
Subject: CN=b8717f118adf930417fb1f9c4ac1b557340203c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:5b:41:0f:ad:55:c0:ef:80:7f:c2:f0:68:
37:4f:00:f1:81:62:42:50:63:1c:36:82:7a:2b:ce:
e7:b9:9c:d0:f9:f2:15:ab:18:de:c0:18:9f:04:16:
b2:59:83:08:c1:9b:75:e9:9b:0a:c1:89:36:f2:97:
49:6f:35:8a:1a:3f:b2:c1:34:e1:ac:3e:ad:15:21:
45:f5:8d:50:f6:82:f2:f5:74:4c:b9:a9:1d:67:8f:
f6:4b:fd:1c:e9:e0:fa:dd:84:fa:a4:79:3c:c0:cf:
de:66:b7:40:52:62:92:73:11:e1:2a:39:23:55:f4:
ee:5f:84:7e:f4:10:7f:5a:ee:c4:e4:ae:7f:20:e2:
d1:6c:f4:3e:d2:c0:30:04:a2:5c:06:4d:fa:d2:4d:
84:c8:45:a1:62:20:f6:a5:d3:3a:41:91:5d:3d:0f:
fb:d3:7a:ac:3b:06:12:f2:d6:24:9b:84:ac:86:4a:
28:e4:19:1d:11:d5:a8:7e:a8:4a:2f:b0:18:74:a0:
59:69:a1:0f:9f:ef:29:b5:8f:4a:4b:63:6a:f6:dd:
98:24:b2:88:24:ba:11:ac:40:a0:cb:55:36:f3:27:
40:65:c4:68:ab:7d:bc:c4:bb:1e:26:49:16:61:16:
2c:d6:df:ec:44:c3:fe:cc:eb:be:56:a3:d3:89:47:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:71:7F:11:8A:DF:93:04:17:FB:1F:9C:4A:C1:B5:57:34:02:03:C6
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c0:c2:45:0f:6a:ae:b0:f6:2d:50:46:ed:da:bb:cc:e9:bd:
87:e1:d7:d6:11:c2:bc:29:f3:51:cc:fb:97:ae:6e:f7:0d:59:
0d:15:c6:0a:83:14:35:e5:26:30:d2:3c:8f:0d:a9:48:23:37:
0f:32:d4:f1:70:09:8b:8f:c6:64:7c:9d:d0:fa:d8:b9:eb:70:
ba:31:0d:16:f2:28:13:4d:0a:47:7e:bb:d5:8f:6c:62:41:a5:
38:5f:08:21:d5:bb:54:6d:e0:38:dc:a0:f2:4b:af:cc:89:6d:
9b:aa:df:13:26:4b:3e:db:19:8f:a1:69:76:5b:05:d8:24:0b:
21:d7:1b:02:26:41:0c:c3:1b:31:d8:15:1d:ef:da:23:01:ef:
46:68:0d:1a:c3:bf:a3:b3:3f:ef:3a:79:01:37:c5:ac:1d:fa:
22:38:f4:4f:fe:07:27:e2:d5:13:de:2b:09:b6:b1:48:09:a9:
4f:2d:6f:6f:6b:33:91:46:cf:45:89:06:4a:96:e3:81:79:36:
4d:8c:f6:09:83:50:9a:51:7e:90:2d:6b:12:ec:80:52:1e:8a:
1a:96:b1:d9:4e:98:52:2e:43:29:02:40:bf:01:38:bc:da:5a:
22:bf:fa:ab:44:f5:5d:66:46:0f:fa:99:b5:21:b8:fc:55:80:
88:01:19:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:09 2025 by rpki-client