Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
File: ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json)
Hash identifier: 5+Karp2O93MoOHVx336k6KDOIuXmviPOw3rvdCED2e4=
Subject key identifier: 02:04:EA:F0:8A:96:D4:04:24:76:7B:61:88:87:5E:3E:56:76:FD:3E
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial: 019A4D05E0DC1527FBAF57CB88587F249F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 04:00:21 +0000
Manifest this update: Tue 04 Nov 2025 04:00:21 +0000
Manifest next update: Wed 05 Nov 2025 04:00:21 +0000
Files and hashes: 1: u2ztrN64ny4t-5qedlgZVwCCd-I.roa (hash: L/fv9+pcl735U5hA8Uy57NEou3lVd9gt0o2oOToLmgY=)
2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: 7RGk+jx+iHaCAaaBmVgS4VDSIMMMRDp7i2j+YHs9E30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:e0:dc:15:27:fb:af:57:cb:88:58:7f:24:9f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Validity
Not Before: Nov 4 04:00:21 2025 GMT
Not After : Nov 5 04:00:21 2025 GMT
Subject: CN=0204eaf08a96d40424767b6188875e3e5676fd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b1:07:83:f5:67:86:5b:41:64:3e:d5:2a:19:
5c:d9:0d:1d:70:f3:bb:5d:ca:a8:96:fe:e1:09:47:
81:e7:b6:8a:ec:35:95:76:a9:2d:28:bf:92:b1:78:
61:01:77:e0:3f:24:1f:81:7c:25:ee:a3:6c:03:39:
3d:cc:6b:25:11:93:0a:00:a4:f2:98:ec:9f:54:72:
b9:3a:6e:d4:db:ca:4b:86:69:bb:8d:54:87:c8:22:
2f:ba:48:18:0d:2c:8f:e6:0a:e4:ba:0a:5b:de:59:
85:ba:97:1a:a7:0c:08:2f:21:35:18:4c:3f:4b:9d:
4f:a6:60:66:71:33:b8:57:1a:12:94:7a:df:1f:d9:
1e:18:e7:d1:9e:06:af:a7:b2:42:87:00:ae:7d:64:
7f:8f:bf:48:00:65:de:6e:c3:00:76:44:2d:ef:de:
e5:5a:06:14:56:9b:d4:20:dd:ea:bd:ee:6b:37:42:
d4:4c:4d:ab:10:47:cf:00:54:51:60:e7:d3:c7:27:
23:6a:db:39:cb:b7:a4:a0:f3:aa:fe:3d:93:00:4f:
ad:6a:05:94:36:f7:98:e0:44:51:9a:41:bc:86:20:
76:02:b7:be:39:5a:c0:d6:da:8d:77:ef:b4:fa:f9:
8f:e5:bd:ac:91:44:7b:34:fa:9a:56:9d:d7:5e:30:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:EA:F0:8A:96:D4:04:24:76:7B:61:88:87:5E:3E:56:76:FD:3E
X509v3 Authority Key Identifier:
keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:df:2f:ae:5e:45:57:a4:6f:fb:89:d6:ab:b5:1c:9d:4c:f1:
76:19:da:a2:ca:d6:33:be:a6:44:63:01:e6:8b:91:32:4a:6b:
83:b7:d2:8c:01:13:51:2e:d1:80:8a:0f:bb:9e:fd:cc:87:7b:
7f:ca:a4:df:54:d5:a9:cc:d5:03:33:20:b5:80:a9:e7:f7:e7:
e0:64:f5:92:a0:f2:b4:0d:26:70:1b:94:e4:5e:53:93:66:8f:
21:14:75:30:fa:71:50:f2:df:5f:ef:c4:e9:bd:bf:e4:30:01:
6f:f1:f0:01:5e:16:a5:c2:0d:ef:80:1a:d2:2b:7c:b4:9a:58:
f3:a8:d2:dd:40:08:c8:88:8d:f6:46:17:55:7f:72:4c:6f:5b:
9c:ca:79:76:83:72:9d:97:4a:5b:12:51:a6:a6:18:aa:69:cd:
e7:9d:06:67:07:10:03:2f:d4:d1:d5:5b:bc:7d:69:00:ec:bb:
96:1c:2c:07:c0:de:dc:3a:bf:b4:2c:81:62:c9:19:5c:de:74:
4a:59:8d:56:b9:84:e4:02:c3:a5:6a:2c:ca:0b:3e:38:eb:c5:
09:d4:29:8a:2f:5e:af:f1:73:29:86:83:ff:8f:17:a0:9f:ce:
a9:bf:20:cf:3f:93:6c:a6:47:c4:fa:0c:85:5b:f7:2d:f9:60:
62:8a:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:36 2025 by rpki-client