Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: 8ulbItX+0Xh050C977vGFJo3VjgwgEQJLW277/gstDs=
Subject key identifier: C8:D2:75:A8:CD:A4:06:BE:EF:62:F3:C6:B0:A5:47:E5:AC:72:56:AE
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 019A4D3CE2CE7FC40239130FAA112CC961AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:27 +0000
Manifest this update: Tue 04 Nov 2025 05:00:27 +0000
Manifest next update: Wed 05 Nov 2025 05:00:27 +0000
Files and hashes: 1: 1-4YCAM0PPWpbsIo98h9fkDFWnfg.roa (hash: 3vMBuIr7SB4QB0M6+bNSVLgKbzy+afGhB2NFcCi6J/M=)
2: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: AaguacAd+I72yVbEurbUpLcDSClgjXMPY+YHVzshDSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e2:ce:7f:c4:02:39:13:0f:aa:11:2c:c9:61:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Nov 4 05:00:27 2025 GMT
Not After : Nov 5 05:00:27 2025 GMT
Subject: CN=c8d275a8cda406beef62f3c6b0a547e5ac7256ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:00:7a:15:09:ab:b3:be:a6:75:50:94:7b:
70:52:33:36:27:2c:6d:7f:7f:b9:d2:5f:9f:f7:47:
99:d0:31:be:46:87:a3:47:35:8c:0a:c9:b5:eb:e2:
3f:2a:b1:1f:e1:c7:0b:7a:1a:9f:80:7e:7d:0c:bd:
48:de:39:3b:fa:89:d6:7a:36:50:90:1b:4c:d5:16:
92:b5:d6:a1:1d:e2:fa:f4:f2:0d:23:17:bb:af:c3:
9c:cb:67:6a:b9:8f:50:c3:7d:b9:06:8a:76:80:67:
42:fc:42:70:1d:83:b5:71:68:17:3f:c4:88:aa:7d:
44:16:56:dd:0c:93:97:cd:03:93:7e:5f:cf:30:1a:
e7:44:19:4b:df:2a:19:59:86:c0:61:6a:f5:2e:7b:
3b:2f:41:d5:e0:64:6f:4c:1f:e2:87:13:b8:4e:6e:
14:fa:ac:18:55:20:83:76:e3:fa:73:8a:2f:42:15:
a8:e8:08:75:14:40:46:ea:64:76:d8:79:11:00:01:
c7:da:91:fe:e6:cc:fa:01:35:5e:cb:3a:ee:c7:b3:
1b:96:33:58:fa:6d:19:5d:56:02:75:f6:38:fb:88:
4c:ad:d0:00:da:34:4d:7d:c0:d2:04:25:05:56:28:
c9:f2:b5:84:b5:80:cd:b4:80:62:42:5c:e5:51:84:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D2:75:A8:CD:A4:06:BE:EF:62:F3:C6:B0:A5:47:E5:AC:72:56:AE
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e3:ec:45:fc:a9:d7:38:d2:8e:0f:7a:00:87:24:d7:6b:08:
16:19:bc:e4:00:ee:b4:fc:a4:56:db:4a:da:9e:7d:97:6d:e1:
68:1a:0e:45:a8:db:ff:1b:23:b8:93:e4:0d:fc:99:e1:08:1d:
e6:94:6f:60:b6:36:2f:c1:39:e9:05:81:a2:9d:6c:de:15:9b:
b0:a0:63:d0:8c:65:46:05:42:a7:a8:5d:59:43:38:d9:e6:2a:
a3:98:c6:66:02:8d:e6:94:96:5b:ff:34:58:2e:62:fb:df:37:
aa:d9:d3:03:d4:98:4e:28:87:b1:be:eb:d6:c2:2d:72:17:e3:
1f:45:0c:32:a0:6e:42:2f:ba:38:3c:96:22:70:54:14:b0:d5:
55:de:51:13:58:82:31:61:04:91:32:2f:09:10:14:2c:f9:8b:
b1:fe:7a:41:30:b4:da:b4:80:c1:4a:c5:c2:0f:f4:5c:12:44:
4c:b8:0f:47:8a:b4:53:ee:90:45:fd:d6:37:81:8f:ef:ba:97:
30:b1:37:a3:8b:92:87:79:6d:1f:b0:8f:1f:c9:31:83:fa:16:
69:3a:d4:b8:d1:9c:fc:2e:00:5e:53:19:dc:76:44:58:a6:52:
36:9f:b7:1c:0f:38:12:7f:4f:62:20:d4:1a:d0:5e:a2:46:2b:
0f:5e:cf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:19 2025 by rpki-client