Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: 5Y8Y4agOw0WIztqYVcxfdTuZvcc8xgu7CFXhuOQHZgo=
Subject key identifier: 7A:EE:58:6D:17:7D:A5:E0:E0:33:3E:72:05:5E:33:D5:05:0A:4D:6E
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 019A4DAAD977931B53F831279FC067B8EB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 07:00:33 +0000
Manifest this update: Tue 04 Nov 2025 07:00:33 +0000
Manifest next update: Wed 05 Nov 2025 07:00:33 +0000
Files and hashes: 1: Z406JsldDq5gjN_1Lio77tcegQc.roa (hash: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: 8qYj3+L3DykOMv2fP/Ja3GamN+OtMO2PXDLqyL6jFOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d9:77:93:1b:53:f8:31:27:9f:c0:67:b8:eb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Nov 4 07:00:33 2025 GMT
Not After : Nov 5 07:00:33 2025 GMT
Subject: CN=7aee586d177da5e0e0333e72055e33d5050a4d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:2f:a2:03:c6:a5:fa:cb:e7:25:1b:b7:74:
ad:53:b6:81:a0:84:a1:69:3a:cc:17:04:a9:f5:c1:
d9:92:63:19:5a:d1:ac:a8:2c:43:50:e8:6a:a3:6c:
a9:8e:ba:68:1e:eb:87:d5:ff:4b:7b:0f:48:46:bc:
e5:62:31:0e:29:bf:a6:d6:f1:8e:87:88:f9:e8:8b:
2b:77:e1:c1:18:d8:e9:53:e1:e5:1e:48:94:46:15:
a9:86:3c:01:c8:3b:e1:ea:fa:97:82:01:1f:48:ab:
b7:a0:4a:a6:ac:1e:ab:25:ac:1d:be:71:60:8b:a6:
6e:cb:f1:a7:74:2d:12:7e:11:73:5a:39:80:49:d2:
fb:66:87:bd:f5:a2:ac:6e:fc:27:a1:78:3a:7c:12:
ec:d6:7a:2f:00:70:0e:d4:99:4c:07:7c:45:db:66:
c2:11:47:5b:0c:32:1e:8a:29:c9:6e:b6:14:02:59:
de:f7:08:24:17:df:e9:6a:32:03:be:85:d3:58:27:
cd:37:39:d5:42:df:26:07:b7:df:13:33:ee:d7:73:
dd:1d:05:d5:68:99:d8:2d:a8:72:2e:bc:01:ba:11:
1c:56:11:4a:ad:4c:b7:91:50:82:c0:49:38:4f:18:
bd:28:cf:55:2a:82:a0:55:55:44:70:6d:10:77:df:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:58:6D:17:7D:A5:E0:E0:33:3E:72:05:5E:33:D5:05:0A:4D:6E
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d2:ee:af:3e:3f:03:ab:0c:bc:fd:01:8f:00:cb:64:07:58:
a3:55:ec:20:d1:4f:62:0d:1e:74:29:81:c7:6d:d6:3c:4c:ee:
b5:b0:48:81:a7:6e:ff:ab:c6:90:fb:c5:1b:5c:30:be:3c:76:
6d:25:e6:12:1d:8d:31:46:42:8e:d4:7d:59:2d:1a:9e:bf:f0:
ac:f5:d5:83:9a:f2:cf:4b:76:93:0e:8a:f9:d6:d1:77:b0:81:
eb:98:6a:7d:87:bd:c3:99:96:61:c6:fe:03:66:0c:72:b5:58:
5d:e1:66:ee:83:71:96:ba:11:fc:f8:ee:c1:15:8e:ee:ff:90:
97:7b:c7:85:cd:53:79:1c:1e:ef:6e:46:61:ba:33:75:d8:2c:
e4:b6:9c:19:7a:33:4f:1b:ef:0f:dd:6f:93:94:46:45:7e:38:
1a:6b:f7:a7:5a:77:c6:ab:08:e9:63:b0:a6:73:f1:0e:d0:db:
61:9c:45:9d:5c:e8:05:74:42:29:1f:eb:26:43:56:6d:cf:a2:
8d:09:a1:b6:c4:fd:59:39:99:fc:49:0b:ae:66:8e:84:d5:7b:
f5:23:c7:82:2d:5a:77:f7:39:20:6c:4c:be:1c:78:ac:93:81:
ce:1d:dd:dc:bd:b7:e3:69:1e:24:a8:bc:e8:c6:4f:46:0f:52:
5c:3c:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:45 2025 by rpki-client