Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: HatxYRAPjVjfLMwJnExrSupJgGtAA9K6n27Mx8RGop0=
Subject key identifier: 5E:40:61:54:8E:C4:EF:8D:BB:9E:9C:12:A8:79:E5:27:AF:79:24:9C
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 019A4F992204680C2E8EFC23BE09B5DD69D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:27 +0000
Manifest this update: Tue 04 Nov 2025 16:00:27 +0000
Manifest next update: Wed 05 Nov 2025 16:00:27 +0000
Files and hashes: 1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: QfS7YsyRYl65qrdJlKyhC/VVPpbrHeQX9ENBf1ZQIu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:22:04:68:0c:2e:8e:fc:23:be:09:b5:dd:69:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Nov 4 16:00:27 2025 GMT
Not After : Nov 5 16:00:27 2025 GMT
Subject: CN=5e4061548ec4ef8dbb9e9c12a879e527af79249c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:4e:d6:ff:79:5c:de:02:ca:74:fe:af:db:
fa:ff:ba:b6:83:54:d4:a9:7d:ef:1f:b4:d1:e9:b3:
a1:9c:91:a0:da:c9:d4:e5:63:65:aa:02:7b:e1:c2:
5a:47:22:69:d9:e4:3e:72:99:8a:dd:09:8d:90:3d:
60:a2:b0:ee:be:89:43:c9:f8:ab:16:59:53:e1:28:
d8:83:5e:5a:62:03:50:74:b8:50:98:31:09:d7:79:
1c:a9:19:36:8a:b5:52:ab:8f:f8:e8:e9:c0:da:bc:
f4:21:b7:be:13:fc:82:35:f7:c1:b1:7f:eb:56:04:
ec:12:42:9f:7a:c3:0c:dc:62:88:21:a6:21:05:b3:
1b:b5:70:c9:69:89:cd:cf:86:ca:43:52:2c:ff:6d:
d0:43:02:e9:54:5e:da:41:06:f0:eb:e0:79:47:38:
a5:3e:3b:98:41:54:bd:09:6e:e8:e6:0d:bd:a3:15:
38:c1:a3:02:7d:32:35:fc:e5:1c:6c:ef:95:65:02:
13:2f:c0:85:c5:34:f6:31:ce:02:fc:c0:74:7f:f1:
58:7c:5f:1e:22:db:8a:d2:93:e5:79:cb:c9:93:fe:
d9:56:75:48:c2:31:9e:ee:47:c6:c9:69:cd:60:2b:
6a:7f:22:d9:c4:a2:9d:76:d6:42:ad:8c:d6:02:b0:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:61:54:8E:C4:EF:8D:BB:9E:9C:12:A8:79:E5:27:AF:79:24:9C
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0f:4b:c5:36:ac:9f:d9:21:74:2d:31:6c:c5:c0:57:86:52:
38:58:90:ce:13:7b:fd:e4:30:03:40:7c:fb:c8:ec:da:29:7a:
1d:97:ab:9f:14:5c:91:86:3f:e0:33:2b:e2:78:58:92:54:c1:
fe:5e:28:56:92:6e:ce:ab:af:9d:48:ed:71:9e:80:5d:bc:34:
4a:7a:c9:f3:73:45:1f:3e:02:e6:5c:70:3e:8e:a9:22:3e:59:
f7:07:05:f1:e2:f4:70:21:75:43:9d:4e:42:3a:de:f2:03:1b:
c9:24:67:57:25:0c:0a:98:c1:75:61:69:34:84:05:13:23:1c:
d3:32:98:d3:04:8e:23:8f:19:5b:8c:65:85:42:c3:6f:cb:54:
c2:8e:9b:78:a5:92:0c:ba:cd:8d:56:0b:9a:31:3e:17:8e:d2:
ed:40:67:b1:00:f0:da:ed:28:a5:7e:a2:7e:5d:3c:02:b3:36:
1d:45:bd:39:1c:4e:71:f1:21:f6:eb:0a:86:40:01:24:77:a0:
44:5a:a1:ec:aa:ac:43:55:04:70:88:27:39:95:9e:2d:57:ce:
2b:86:7e:d1:61:11:be:e4:28:68:35:62:03:d3:f6:da:bb:27:
5e:a4:c9:a3:b2:02:f0:1a:e6:cd:76:83:19:0b:b1:8a:bb:92:
34:f1:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:38:45 2025 by rpki-client