Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: NlQZXkD1AZakN1dX3KthW88cyprKhGBdBDH36IRenko=
Subject key identifier: 22:65:5E:68:CA:41:A1:6B:02:8B:C6:02:1A:39:59:AD:FD:35:2D:95
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 019A4D0711F38797CB6D65BEEB52CB96F1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 04:01:40 +0000
Manifest this update: Tue 04 Nov 2025 04:01:40 +0000
Manifest next update: Wed 05 Nov 2025 04:01:40 +0000
Files and hashes: 1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: L3d5rt3CaTv6WbEu3TprUngdGwx3QTD5Wa0JIHMMU3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:11:f3:87:97:cb:6d:65:be:eb:52:cb:96:f1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Nov 4 04:01:40 2025 GMT
Not After : Nov 5 04:01:40 2025 GMT
Subject: CN=22655e68ca41a16b028bc6021a3959adfd352d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:26:d4:ce:ae:09:54:cf:19:42:4f:c8:27:
22:aa:19:1e:ef:3e:77:a3:aa:13:c1:9e:57:0b:62:
ce:06:7d:28:1e:2d:eb:65:2d:8e:94:64:ac:da:62:
c3:60:9e:fe:8b:bf:03:97:22:e8:16:f6:c1:05:e9:
21:f5:ca:b4:81:5f:9e:63:6c:85:4b:15:65:a3:d4:
66:f1:cc:75:89:7b:59:b7:13:33:69:a5:f0:7f:c1:
66:2b:64:2b:8d:88:3a:05:84:c9:a6:9e:57:48:48:
8d:09:e8:66:2c:81:2b:59:3f:55:e8:04:15:c1:74:
81:51:cc:cd:43:cb:96:77:54:5a:17:2f:a5:c0:16:
33:3a:6c:97:cf:82:29:03:d1:14:18:a2:98:be:eb:
e3:59:e1:d9:07:e6:47:e5:19:58:8d:a6:2b:d6:cc:
6e:14:bd:4f:b4:67:50:cd:18:e8:4e:01:c0:3a:f0:
55:d7:21:1a:d9:93:e2:1f:f8:64:01:a8:78:39:c9:
12:a7:21:48:0f:70:75:a1:e2:70:ed:6e:04:18:fe:
67:7a:c5:d6:6b:98:ca:66:b8:93:a5:90:95:07:94:
ce:65:6e:04:c3:6e:0e:cf:9d:9e:f2:e8:b6:a5:a3:
42:25:a7:5f:21:5b:9c:e7:23:cb:f2:c7:4c:74:f5:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:5E:68:CA:41:A1:6B:02:8B:C6:02:1A:39:59:AD:FD:35:2D:95
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:98:38:d7:b0:0d:1d:75:00:28:16:c2:87:b1:43:0a:3f:40:
03:6d:69:fd:7f:6d:bf:f1:08:db:c8:2e:5a:19:b6:83:fb:66:
b4:25:c8:92:da:e9:ab:25:e3:62:de:56:fc:27:fe:eb:51:80:
25:ce:3c:09:a9:67:d6:ef:62:3a:8a:03:81:58:b5:01:8c:f1:
26:15:6c:ac:94:92:bc:b0:ad:5c:84:19:90:47:40:5a:a8:1e:
51:6b:c7:ae:05:17:50:08:ed:11:e7:d7:07:52:d4:63:02:19:
c8:00:94:98:2d:3d:14:fa:24:ca:cd:22:9d:cd:53:3d:b0:87:
0f:36:51:53:ae:63:23:6f:5e:e8:2f:a6:09:92:df:72:ca:9e:
e3:c8:d1:70:13:ec:26:fc:1c:da:b7:ba:e8:56:0e:39:f6:f8:
bb:52:57:0a:3c:41:c3:e5:1d:f4:a2:c8:07:25:aa:b5:34:2e:
a1:58:bd:70:14:b1:86:fa:82:31:dd:54:2f:8e:c0:22:7b:d5:
92:65:0b:a7:d1:26:1b:ed:d2:5a:ce:3c:e6:9a:86:1e:61:d0:
2b:f5:61:62:4c:5e:99:01:f8:4d:ee:0e:c0:10:4c:17:9f:c8:
b4:38:6c:62:51:56:d3:3f:0e:d6:4a:17:93:01:0a:e6:4d:13:
fb:cd:0d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:41 2025 by rpki-client