Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
File: Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json)
Hash identifier: vfrjY9YiLnSehZzfa4XuhlwV8O21qZ6pxE2yv4E734Q=
Subject key identifier: F8:2E:0A:0C:FF:4F:E1:37:DF:B7:06:79:8B:2F:CC:94:08:40:C8:EF
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Certificate issuer: /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial: 019A4DE17FA35020C42093B5D3405A8C9717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:15 +0000
Manifest this update: Tue 04 Nov 2025 08:00:15 +0000
Manifest next update: Wed 05 Nov 2025 08:00:15 +0000
Files and hashes: 1: BLUnMEvzOCDdig3vAOJNkanKcVQ.roa (hash: FOxz1hyJdKlYisYef78m6hR6cwVT1BQH7/wecUVrCqc=)
2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: bRM4zkpkp9qMm/7G+0nVgRDoBojSjKdDJzrrYQBEw5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7f:a3:50:20:c4:20:93:b5:d3:40:5a:8c:97:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Validity
Not Before: Nov 4 08:00:15 2025 GMT
Not After : Nov 5 08:00:15 2025 GMT
Subject: CN=f82e0a0cff4fe137dfb706798b2fcc940840c8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:87:55:e3:fa:e3:2f:b4:c6:53:53:fe:1b:
cb:06:7d:51:7c:51:4f:6c:f7:86:86:5a:01:2b:45:
02:3c:d7:e4:34:57:74:ca:4e:c9:17:ce:12:fe:3c:
9b:11:c5:15:a5:4f:0f:3a:b7:32:3a:e6:80:4e:ee:
9f:76:d3:c6:61:ef:2a:b5:3d:3a:57:c9:11:12:e9:
54:1b:51:3a:83:95:39:9d:4c:c0:4c:df:3e:f5:f9:
ca:08:28:85:f8:5c:7c:c5:df:a9:1c:57:1b:fc:69:
1e:0c:6e:05:63:5d:7f:44:39:55:5b:a0:87:9e:5c:
52:60:41:18:75:84:f5:4c:13:88:6b:a4:39:3a:0e:
86:09:75:fa:c6:e7:1f:8f:ec:4f:12:7a:bb:68:27:
2f:da:b9:83:fe:75:da:24:ad:7a:fd:6d:aa:96:5a:
94:32:5e:07:f1:f8:97:31:49:60:8f:b9:d9:1a:f1:
68:7b:5e:f0:cc:bd:58:3d:14:d3:ea:eb:6e:6c:4c:
9f:e8:f2:b0:fa:e5:cc:76:51:b1:4f:0c:15:40:d8:
f9:9a:f1:6c:09:f7:81:c4:32:ce:94:76:06:2c:d4:
a4:4d:7c:d5:b9:e6:e0:a4:93:6b:53:bf:a3:42:e0:
3b:b8:ff:13:5e:c8:5d:9a:05:ee:16:1b:e4:72:41:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2E:0A:0C:FF:4F:E1:37:DF:B7:06:79:8B:2F:CC:94:08:40:C8:EF
X509v3 Authority Key Identifier:
keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f1:35:98:b6:b8:21:da:61:7c:88:2d:b0:4a:2d:bc:75:e7:
d5:e9:15:00:79:86:ae:e1:24:18:f7:a8:24:31:a6:2f:b6:03:
d9:28:66:6c:26:44:29:c2:6f:78:2d:d8:71:02:a1:ee:40:3f:
6a:64:61:57:f2:29:90:90:fa:f7:dc:56:9f:bb:db:57:df:42:
4d:1e:b6:4a:92:2d:ca:8e:26:73:7a:d0:8a:e1:2a:fd:3b:14:
3d:b1:2f:b9:47:c9:2c:98:a9:cb:e5:1e:08:1d:b6:82:3f:2e:
86:8b:85:a7:1b:4e:27:60:f5:f3:6b:84:3a:a8:38:e6:da:f4:
91:98:9a:c9:df:ed:78:95:d5:21:38:30:2f:b9:46:89:06:42:
5f:0a:bd:28:09:bd:5c:f5:d5:d9:5d:b1:1c:d3:a3:e3:03:d4:
96:d8:70:8b:c4:66:3c:4c:90:f0:8e:db:7c:7f:5b:d1:5f:ce:
ff:06:42:ae:f9:3d:e1:fb:ba:42:c7:68:02:e1:5b:3f:1e:37:
eb:e0:a0:cc:c8:64:45:7a:fe:15:2f:8b:20:f1:09:b1:1b:78:
3a:83:e4:33:77:60:c5:83:5a:17:93:3b:b7:c7:7f:01:1e:c0:
de:65:14:36:fe:4e:ee:57:d3:0b:76:13:73:ee:a1:38:89:cb:
fb:fb:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:50 2025 by rpki-client