Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
File: y968bG1L0_xlGov0ILHtIs7pMq4.mft (raw, json)
Hash identifier: zsQJ2j4QLpJ2zC7uiDTne9u4l226YIcN+BUWeMY/liM=
Subject key identifier: F4:F0:EE:09:1C:AA:DB:1B:A7:C3:F0:92:0F:6B:AE:40:D1:37:0F:00
Authority key identifier: CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
Certificate issuer: /CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Certificate serial: 019A4EF405E4A74702F6717C2C5A4D9ECE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:06 +0000
Manifest this update: Tue 04 Nov 2025 13:00:06 +0000
Manifest next update: Wed 05 Nov 2025 13:00:06 +0000
Files and hashes: 1: y968bG1L0_xlGov0ILHtIs7pMq4.crl (hash: mw25avGyB3kgpTkr8fugnaoj+9zSUoPpHpuvXN0y2ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:05:e4:a7:47:02:f6:71:7c:2c:5a:4d:9e:ce:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Validity
Not Before: Nov 4 13:00:06 2025 GMT
Not After : Nov 5 13:00:06 2025 GMT
Subject: CN=f4f0ee091caadb1ba7c3f0920f6bae40d1370f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:07:ef:2d:5b:1b:33:58:a7:9c:be:39:75:
54:11:e9:db:59:73:cf:4b:77:3d:f2:da:b0:e9:e4:
99:df:41:cb:aa:16:46:41:28:13:40:5d:36:d4:4e:
60:21:50:e3:bc:31:57:90:e1:30:6d:9e:f4:65:69:
b3:0a:57:36:df:f2:41:d6:5a:a4:53:19:5f:63:42:
86:b7:b2:8c:6e:13:54:2b:19:a4:f7:25:77:c3:5e:
b5:43:44:7f:43:c7:e3:5f:42:1d:94:15:5b:3a:d2:
c9:8c:1f:16:82:81:eb:63:41:66:6b:02:8d:13:6d:
c9:c7:74:f3:23:39:29:c8:cd:c2:3d:46:39:f6:58:
43:aa:3e:61:59:30:a2:c8:b6:07:69:62:3d:eb:fb:
97:ce:ee:b5:6c:ae:b9:dc:15:a7:af:f4:86:bf:87:
5b:48:1e:e5:06:a5:94:68:bd:42:9a:b4:87:dc:e9:
f5:df:e0:bd:17:9c:9b:f7:13:10:54:4d:16:bf:22:
cf:4f:db:fa:60:b3:8d:32:cc:46:8e:0b:60:db:4e:
97:d4:20:1a:16:25:f0:9b:db:51:20:d4:52:e8:a6:
1f:4a:6a:4b:c5:1a:23:47:c0:bc:c0:58:ac:89:75:
d2:2f:aa:f4:61:df:27:d3:b0:f6:24:87:35:4f:b9:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:EE:09:1C:AA:DB:1B:A7:C3:F0:92:0F:6B:AE:40:D1:37:0F:00
X509v3 Authority Key Identifier:
keyid:CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:79:7c:c7:bb:91:9d:27:8f:4a:57:bf:43:43:bf:56:93:bc:
e9:f9:ef:2e:8a:b1:5f:36:3e:54:fc:6e:c0:04:0c:25:2c:2e:
d1:37:64:a3:99:51:79:97:e7:73:44:6d:ae:b9:f5:ce:66:a2:
7e:55:f3:e9:c6:2f:87:82:b0:76:aa:74:70:d8:6e:e4:55:5d:
47:22:6a:e3:78:00:70:7c:54:c2:e6:d9:81:86:21:a0:ce:28:
2d:e0:aa:67:23:66:21:08:63:27:0b:32:7b:b0:c6:0f:63:94:
dc:c4:f8:d5:66:2f:15:55:46:80:8c:78:9c:06:ca:0f:c2:73:
a2:b8:7b:3a:d4:c6:c0:86:cf:37:0b:36:6f:42:d2:10:7f:da:
60:26:c4:75:45:e2:58:7d:2c:c7:95:19:97:cb:6f:62:6a:42:
d5:89:0f:ca:bb:38:58:d8:4a:7b:53:b0:05:a6:b3:60:54:1f:
c1:3a:f7:88:57:85:02:30:fd:44:bb:af:78:f7:84:3b:78:1e:
01:67:10:d5:94:06:a7:9f:9a:a4:d8:13:e5:3b:12:fa:43:6a:
3c:a1:59:6d:10:eb:83:ba:3c:16:da:47:ef:f8:74:9c:ea:42:
dd:73:cd:72:9f:f6:68:d2:62:ac:a0:1d:71:74:53:71:5e:11:
ec:74:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:22 2025 by rpki-client