Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier: 9hoehYPv6gAqOE4FJJGmEqvBmsM5/09kFcYTe+q81K8=
Subject key identifier: 8F:6F:2D:D7:19:9C:C4:10:E3:D8:71:51:42:A7:0E:B1:F0:1A:B1:A4
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 019A4F6290F9C3051D648F0B53BB3BF6E414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:00:50 +0000
Manifest this update: Tue 04 Nov 2025 15:00:50 +0000
Manifest next update: Wed 05 Nov 2025 15:00:50 +0000
Files and hashes: 1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: 2XoYqEEHqyRJRqKF/VFjMHjQpo/5Odp8REkqWMIJEmw=)
2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=)
3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:90:f9:c3:05:1d:64:8f:0b:53:bb:3b:f6:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Nov 4 15:00:50 2025 GMT
Not After : Nov 5 15:00:50 2025 GMT
Subject: CN=8f6f2dd7199cc410e3d8715142a70eb1f01ab1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:5a:eb:76:6e:0b:12:0b:af:2b:d0:ad:00:
f3:f5:1c:9a:d0:21:61:13:a0:e7:c9:ec:6d:b6:7a:
f1:95:fc:88:55:84:02:cd:0d:3a:9a:2a:81:e5:7b:
9a:dd:0b:7a:26:2e:2c:fe:d7:88:27:5c:45:ad:58:
0a:f4:c5:1a:e7:0e:c6:06:f7:21:86:1b:20:45:cb:
9f:3a:0a:62:31:9a:ee:52:6e:5d:cb:5e:89:81:fc:
9f:c5:2a:be:bd:60:ba:43:fc:f5:2f:8e:a8:d2:4f:
28:0a:cf:f6:3b:85:20:af:10:ee:55:67:2b:29:14:
dc:37:b2:82:56:f7:0d:95:e7:a7:e3:a5:a4:62:2c:
80:7a:73:2a:28:ea:e7:2c:7d:0a:f7:5c:d4:4c:7a:
1f:fa:b7:26:07:3f:1d:df:f0:21:44:15:18:fe:24:
1f:d3:87:9e:b1:b2:76:23:0b:03:c8:20:2d:f1:e5:
aa:9d:7d:2f:4a:fe:c9:1a:a4:a0:e7:45:55:16:01:
88:32:a6:a4:9c:03:95:1e:5b:bf:a0:a5:b4:17:7b:
e3:dc:b6:af:90:2d:44:74:80:1a:ce:46:08:b8:0a:
3c:25:ef:cf:a4:62:82:9a:c8:0c:96:aa:04:a7:f9:
0f:c9:91:0a:95:21:84:11:c5:76:c8:90:3d:52:f6:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:2D:D7:19:9C:C4:10:E3:D8:71:51:42:A7:0E:B1:F0:1A:B1:A4
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e3:60:93:92:c6:f0:d4:3f:dc:1d:b1:d4:0e:fb:69:08:ef:
39:a3:8e:9c:28:36:49:8d:96:45:7e:6b:43:13:3b:dc:15:e0:
b2:9f:7e:ab:29:73:3d:20:08:fc:b7:80:97:9b:96:10:e6:26:
05:6f:3b:94:bb:67:94:f9:ab:02:50:3b:7d:78:15:91:31:9c:
5d:4f:2b:fb:5a:87:da:fa:1c:d8:90:58:af:d8:11:5a:eb:33:
e2:08:05:d6:e7:44:34:ec:20:c8:a8:89:13:59:d7:fd:a6:23:
d2:db:9a:e9:ca:89:a2:53:4f:17:8a:cf:4a:88:64:d0:21:0f:
7b:20:35:81:1f:86:57:ab:64:22:ef:ad:ac:e6:7c:0e:fc:ff:
15:3b:b9:fa:1a:eb:18:9e:e4:ab:f8:e5:53:15:c2:1c:2f:3e:
1e:0c:de:6a:c2:72:aa:1d:7f:fd:a3:d3:02:73:ed:25:b4:37:
72:4c:64:7c:a4:19:77:7b:38:30:16:71:75:94:2d:00:f4:b6:
92:de:6b:04:a2:86:86:08:90:14:87:7c:9f:7f:e4:af:3b:da:
1a:45:cd:d8:c1:3f:5b:71:af:b8:08:65:f7:58:08:d0:5e:0c:
eb:88:69:f9:b2:6c:85:e2:3d:66:21:78:e4:1b:e8:66:df:05:
b6:92:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:20 2025 by rpki-client