Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
File: RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft (raw, json)
Hash identifier: j2ZrWqs4TFH6fE3QS4dI2UOoCuERrlmGG2VS/51xPQE=
Subject key identifier: C8:55:1C:94:8D:BA:CD:FF:DA:6B:96:13:33:AA:DA:5E:93:6F:1B:BC
Authority key identifier: 44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
Certificate issuer: /CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Certificate serial: 019A4D7478C9FA511018181217B9DF920E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:01:09 +0000
Manifest this update: Tue 04 Nov 2025 06:01:09 +0000
Manifest next update: Wed 05 Nov 2025 06:01:09 +0000
Files and hashes: 1: RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl (hash: HTr3Vq8hx6kIEemEYlqiqVt4J3/5vnVStqci9GswDMw=)
2: ZmJk3i0UqR_uJ_XLaSjGUe2aH00.roa (hash: BCwdh7j1ZUyJ+mVEfLtfrzwX+n9rg9YN807VJjPHsUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:78:c9:fa:51:10:18:18:12:17:b9:df:92:0e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Validity
Not Before: Nov 4 06:01:09 2025 GMT
Not After : Nov 5 06:01:09 2025 GMT
Subject: CN=c8551c948dbacdffda6b961333aada5e936f1bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:5e:c1:45:8e:28:db:e9:49:27:5c:5d:7e:
c1:e7:5c:e8:29:db:71:61:a0:af:0c:50:d2:37:11:
d3:fe:02:1f:cd:8d:f3:af:48:e7:68:b4:ca:dc:13:
50:05:9e:86:4c:28:15:f2:c6:da:9b:d2:07:5f:c0:
aa:32:38:c6:8d:77:a4:68:9b:16:50:91:f4:74:6c:
d1:cb:de:cd:ad:b5:b3:4b:76:b9:fe:06:c4:67:7e:
e5:b8:87:ee:be:67:6e:f9:4a:7a:24:a4:c0:f3:99:
99:6a:ea:21:95:4a:08:ac:0f:27:20:0b:46:72:b9:
3a:1f:7d:67:53:b9:ab:d5:30:53:d1:dc:c3:a8:79:
ae:fa:a2:1d:d3:6c:b8:ae:a1:34:cf:9a:df:fc:71:
e9:51:ae:2b:b6:7c:42:80:e3:b4:17:fa:ab:c1:74:
5b:2e:dd:e8:c4:1f:b4:97:0d:64:be:75:28:48:4b:
58:55:1b:46:6a:42:df:7d:78:4d:ab:31:7e:49:dc:
e8:3f:19:cd:7f:c8:f4:fe:66:ee:fe:35:ff:94:59:
ba:a1:04:25:9e:7a:1e:df:d5:f0:b5:23:da:be:fa:
1e:9b:f7:0b:ff:e2:e8:90:5e:c4:73:e7:79:aa:89:
6c:ce:d1:47:47:0d:a1:f9:79:d5:d8:85:ee:8e:25:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:55:1C:94:8D:BA:CD:FF:DA:6B:96:13:33:AA:DA:5E:93:6F:1B:BC
X509v3 Authority Key Identifier:
keyid:44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ef:fd:24:0c:6e:43:db:df:fc:e2:b0:02:9d:18:ea:b1:84:
48:eb:9d:8f:dc:6a:0d:af:d4:5d:bd:22:a3:fd:b8:5f:38:55:
f1:3f:a9:6b:79:03:8b:53:d1:0f:32:d6:f8:5d:db:7b:f5:74:
83:da:a5:19:5b:2d:53:61:de:75:9a:23:fd:53:99:78:41:9a:
2f:dc:30:9c:0d:78:1f:7a:e6:2e:54:0e:0a:bd:ef:6f:52:63:
a4:76:44:6c:a9:28:42:3d:ec:eb:95:f6:d4:43:91:e6:2c:41:
cd:42:38:5e:a3:41:aa:9f:ab:81:10:b2:c5:b8:b8:ef:83:53:
08:fd:58:50:1a:dc:2f:b9:b5:95:53:d1:a9:fd:72:c1:e9:31:
32:23:57:30:8a:f0:6e:12:ea:8d:28:a3:4b:3f:0e:17:60:fb:
83:23:33:fb:8c:e9:a5:b8:d0:dd:81:d2:ef:08:75:bc:63:c1:
ec:c2:03:ae:69:53:a3:b9:bd:82:7b:ea:79:19:04:a8:59:2d:
25:2d:c6:ae:d8:69:ab:0d:1f:6a:08:c1:42:10:a8:59:d5:3f:
aa:a4:a4:25:87:e3:69:5e:99:f6:b2:36:53:be:a4:9a:c9:1f:
b7:f6:13:72:43:ef:58:84:8f:e0:b9:fe:92:d7:61:af:69:c9:
51:46:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:08 2025 by rpki-client