Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
File: yXKq7Icz1F96AANRAYC0ri1Lvo4.mft (raw, json)
Hash identifier: Wav1x9O1z5Y6H+2017E78g9mZzBTPP8WjwPPLzxCdIE=
Subject key identifier: F3:D8:00:F8:DE:58:8E:D8:C1:E8:77:37:D9:8A:DA:2F:45:34:CA:BD
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Certificate issuer: /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial: 019A4D3CAE7FAD860FFFB2A942273121D98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:13 +0000
Manifest this update: Tue 04 Nov 2025 05:00:13 +0000
Manifest next update: Wed 05 Nov 2025 05:00:13 +0000
Files and hashes: 1: iEYRoHL_x--Q-PC_QmRkLatna0w.roa (hash: 5s1E+tOqSuT9Il26pYgrASE0LBQS+wYadwRdpb6ASa8=)
2: yXKq7Icz1F96AANRAYC0ri1Lvo4.crl (hash: 7CUeKCrt8u5Vnc7igIYsOZQ2Q5ziK4E2JA7BAt97Cr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ae:7f:ad:86:0f:ff:b2:a9:42:27:31:21:d9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Validity
Not Before: Nov 4 05:00:13 2025 GMT
Not After : Nov 5 05:00:13 2025 GMT
Subject: CN=f3d800f8de588ed8c1e87737d98ada2f4534cabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:03:a0:67:5c:5e:6c:4c:54:e8:92:5b:ca:82:
4a:00:65:5b:96:b4:2e:3b:ff:b7:95:8b:9e:d9:42:
b5:d3:1b:7a:94:98:cd:bc:da:00:f8:77:aa:4f:9e:
8d:37:b7:5a:43:a7:61:d9:35:3e:26:b9:03:86:44:
5e:62:ac:b2:3a:4d:5f:cb:0e:c8:a5:b6:06:59:1e:
34:a5:de:23:db:c3:85:ae:3e:67:5f:57:3a:33:1c:
97:34:0e:5d:85:4b:fb:aa:0c:35:ee:f8:e6:04:15:
ca:6a:43:2b:e0:9b:0a:e2:04:4d:f1:d0:6a:e3:23:
03:24:01:e3:a2:f5:cb:25:e4:5a:dc:0e:ab:30:69:
d2:09:5c:44:b1:8e:98:f0:84:00:e7:e5:46:4d:0c:
d4:83:b1:c0:66:b1:da:fd:a2:47:29:ef:3e:f5:cf:
69:68:dd:1f:09:44:3c:19:04:38:a3:a7:09:1e:4c:
37:03:d9:56:3f:3d:00:0e:33:53:80:5e:c6:36:76:
e4:73:e4:11:9d:b1:0f:68:d0:e0:45:60:cf:e3:a3:
1f:4c:b3:56:ed:50:f8:87:40:fd:ce:4c:4b:a1:b6:
21:fd:c8:ae:a2:7f:29:9e:d0:d0:67:61:c9:15:2b:
55:4c:cf:7d:10:62:40:44:d9:dc:b2:77:da:92:0c:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:00:F8:DE:58:8E:D8:C1:E8:77:37:D9:8A:DA:2F:45:34:CA:BD
X509v3 Authority Key Identifier:
keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:56:41:4a:51:e5:d5:2d:93:cf:bb:bb:32:b9:5a:8d:20:dc:
f3:ab:13:c4:79:9c:fe:69:37:38:27:b0:25:df:12:46:1e:29:
08:86:31:21:f6:7c:49:4a:b5:79:7c:b5:11:96:99:b3:49:5f:
63:da:a4:f1:56:a1:3a:49:26:18:fa:05:65:31:09:97:af:2e:
8e:44:01:54:71:0e:cc:1b:fc:30:b1:89:8a:fb:19:bd:24:61:
52:b1:5e:cc:c1:d6:55:65:68:96:7c:0f:26:ef:92:b3:22:47:
b5:53:4f:fd:94:38:5a:91:29:e0:68:5f:02:6f:88:d0:21:42:
b2:27:0d:ce:a8:45:1e:64:49:2b:84:99:fd:0a:8c:9f:1a:e8:
6a:37:f2:87:8c:3d:70:5e:0d:63:5d:54:c1:0a:53:e9:24:2e:
0c:7c:fc:a0:58:ac:ac:a1:72:fd:10:8d:6e:d6:3a:b9:18:13:
e0:1b:75:30:f9:02:83:e7:d5:9b:fe:95:17:00:e5:2b:d3:74:
ec:f8:cb:36:10:6b:22:7e:cd:41:2b:41:7e:04:a9:02:4a:20:
62:e3:6b:1e:96:10:82:df:c1:3c:94:8a:ea:e1:b2:e9:b6:c2:
b0:cb:75:9d:f2:0f:a7:bb:cf:e9:e5:e4:fe:e5:d2:9b:cc:c2:
49:d7:fd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:39 2025 by rpki-client