Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: Vwlx6qMNjBORhzb9CYo6a/93KDwYGfkBv9q7V7uU9uo=
Subject key identifier: 9D:7F:8A:66:34:D0:36:8A:C5:26:B2:04:7E:C5:7A:48:7D:38:0D:0D
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019A50E2D72E9075A6C2336414A5E8F9EEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 01F8
Signing time: Tue 04 Nov 2025 22:00:34 +0000
Manifest this update: Tue 04 Nov 2025 22:00:34 +0000
Manifest next update: Wed 05 Nov 2025 22:00:34 +0000
Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: WVt2lNwI7AfL7JI+UxSOGDIratxwN7BvqXPvmEyHLbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:d7:2e:90:75:a6:c2:33:64:14:a5:e8:f9:ee:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Nov 4 22:00:34 2025 GMT
Not After : Nov 5 22:00:34 2025 GMT
Subject: CN=9d7f8a6634d0368ac526b2047ec57a487d380d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:24:6a:8a:5a:ab:66:be:73:0f:13:8f:20:bd:
b6:82:b0:1f:16:50:d6:aa:07:58:98:0f:3a:8a:be:
0d:a1:eb:bc:47:fa:0b:bb:41:ab:db:71:b9:9a:93:
06:a9:41:51:86:9d:fd:0c:55:e4:8a:42:f4:dc:b7:
85:ce:f4:43:b1:4f:c1:03:92:db:5b:f7:1a:d8:30:
d0:49:6c:95:27:00:70:c6:1b:cf:02:5b:13:17:7c:
a0:8a:47:07:dc:43:d7:7d:20:2d:89:08:45:f9:e4:
60:2e:17:40:1d:93:3f:b9:55:a7:6b:2b:21:f0:72:
10:97:bb:dd:17:39:4f:1b:37:e3:99:ec:a6:20:e0:
94:b8:07:e3:c1:8e:2b:f6:91:0e:c7:4e:81:76:35:
7a:77:1a:5b:77:e1:c8:dd:df:04:6b:18:d4:b0:f1:
f5:0d:f5:83:6b:5e:1d:2e:ef:59:d9:e8:ac:29:0f:
d2:36:16:de:88:5b:4e:58:b5:bb:40:64:55:77:4b:
b0:41:02:82:6d:e4:d2:0a:26:4f:37:a7:d5:f6:fc:
51:bb:b9:33:2e:16:20:19:a0:14:df:b3:3e:d7:73:
f0:28:e2:bb:a5:1d:bb:d3:24:3e:0e:2e:ca:fc:7a:
33:71:58:9a:da:54:22:3a:4d:98:8d:c5:45:ff:e5:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:8A:66:34:D0:36:8A:C5:26:B2:04:7E:C5:7A:48:7D:38:0D:0D
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b3:c6:c7:42:ff:8b:99:32:b5:70:ba:71:90:2c:b7:75:38:
0b:9c:99:40:21:da:14:09:fe:9c:c8:57:64:0a:69:aa:ae:7c:
ee:e6:7e:e2:14:27:8e:66:80:8d:d1:5d:99:dd:90:db:54:0e:
cb:f2:01:17:d5:e7:f9:f7:36:1d:68:4a:df:7e:f7:37:c4:c8:
6a:37:ad:7e:8a:b6:ea:c5:88:e0:72:fe:00:56:91:e3:e5:b2:
f6:34:8f:88:76:39:90:d0:3a:e3:2a:52:84:ba:f0:ee:cd:a8:
57:ec:cf:65:d1:31:80:fe:9b:cc:3d:e6:08:fd:49:d8:70:34:
25:16:b7:42:fa:96:ee:9a:ce:9c:5a:1a:ad:57:4e:2d:ec:96:
c0:bc:c6:cf:40:64:7c:c7:43:db:76:f3:d5:09:03:03:0c:74:
c8:58:e1:df:67:b5:22:04:7f:be:c0:22:cd:b2:32:5f:92:f2:
9c:9c:0f:01:de:11:3d:5e:65:d8:38:41:e0:48:74:c2:2e:a6:
c5:b2:ad:44:42:ae:f2:fd:01:66:27:7a:58:de:b8:b7:aa:22:
47:43:f7:35:04:0a:d1:c8:96:fa:da:b3:56:1d:c8:fa:38:97:
9c:cb:72:ed:72:2c:94:88:a6:a7:ed:67:4b:bc:40:2f:ed:c2:
9b:14:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:15:24 2025 by rpki-client