Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: M9dHFSeHEvpMoU3CtNOkkZMW88L0UJCv5yCdL+ZBrbQ=
Subject key identifier: 2F:3E:44:BE:AD:E3:86:D3:89:31:F3:93:75:71:85:14:F7:13:C9:76
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 019A4EF4D33FC94CD2F6CF354B6A1BE2D47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:58 +0000
Manifest this update: Tue 04 Nov 2025 13:00:58 +0000
Manifest next update: Wed 05 Nov 2025 13:00:58 +0000
Files and hashes: 1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: 2vPxH+2BMqKPfyRMRmONZYAfTfZuoTGd/Mpa6yvp3s8=)
3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d3:3f:c9:4c:d2:f6:cf:35:4b:6a:1b:e2:d4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Nov 4 13:00:58 2025 GMT
Not After : Nov 5 13:00:58 2025 GMT
Subject: CN=2f3e44beade386d38931f39375718514f713c976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:cc:ea:c8:71:6e:e5:9b:ba:73:76:97:7e:
39:d0:55:5e:29:40:a4:ae:25:52:6d:b8:4f:79:c8:
34:ab:d7:1d:f1:43:35:6b:cf:b6:c4:42:c8:8f:a2:
da:24:8a:e6:4a:c6:11:79:af:48:c1:24:5c:d7:44:
2e:a2:83:fd:90:c5:bf:97:d1:e4:31:1a:6a:1f:4b:
33:53:07:ba:30:ed:ef:04:23:72:7c:ca:87:9e:1a:
c2:1b:32:83:f4:fb:12:07:7d:2c:ee:1a:57:8f:12:
ed:32:17:98:56:aa:eb:a8:03:63:e0:ce:cf:e1:7f:
56:96:33:1a:be:26:10:35:e1:24:db:a7:86:7b:fd:
97:a2:bc:7a:51:9e:5d:f8:4f:0d:47:8d:95:fd:cf:
00:c6:4e:a9:ed:5d:25:cb:3e:0a:c9:8b:af:00:e3:
11:1e:dd:93:3e:76:38:85:19:32:69:de:74:13:7a:
ec:d7:6b:3a:94:bd:76:e0:9d:a8:4c:a8:ec:25:86:
3f:90:d9:45:86:16:32:22:d6:87:e8:9c:87:2d:32:
c5:a3:44:f6:30:db:0c:33:4f:24:73:1c:6d:8d:37:
0d:7b:66:86:5e:b5:ec:b9:8e:01:42:ef:c2:32:e7:
60:ba:17:a4:1f:d5:47:f5:1b:50:f8:fd:fc:6e:13:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3E:44:BE:AD:E3:86:D3:89:31:F3:93:75:71:85:14:F7:13:C9:76
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d5:a8:3b:9b:fa:0e:03:38:74:17:45:5c:6c:57:15:66:d2:
2d:0f:20:25:09:55:50:65:14:7e:48:eb:93:43:53:2d:06:70:
d6:52:61:b8:7e:08:cc:7c:3a:ed:85:ae:2d:57:27:cc:c3:a2:
8a:6b:5a:ec:14:1e:df:4a:10:3c:fa:0d:d9:44:0e:4f:e4:e6:
3c:58:dc:4f:aa:63:0a:71:f9:42:7c:1f:00:18:7a:1a:6e:20:
cc:14:0b:69:57:e9:9a:b2:5c:5e:ee:01:f2:36:27:57:82:9d:
0a:db:1e:a8:38:ca:33:5a:32:8c:79:23:1a:48:9e:95:16:cc:
72:5a:26:aa:b9:74:17:3f:6e:96:94:b4:b7:b5:7c:57:36:cb:
7c:7a:94:39:d2:7d:1a:2a:85:19:85:81:c1:20:7b:42:02:10:
2f:40:f7:f6:4e:6d:20:e9:d6:13:58:bc:1b:12:a0:1f:b3:e5:
9c:12:2b:26:d7:0d:04:f7:93:dd:06:cd:7d:01:44:55:02:85:
fe:a3:54:29:83:cd:47:df:6c:b8:f8:eb:44:4e:07:98:83:59:
ed:44:da:63:b7:5e:78:0f:2e:e9:e0:9b:a4:f8:4c:62:cc:ce:
5f:99:3b:7d:6c:8f:c3:54:91:30:e2:4c:f7:ce:b3:da:46:23:
aa:44:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:21 2025 by rpki-client