Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json)
Hash identifier: Bq9y+uCatc/Z2nGDnp+SaFIZd/Py1siF0rIMSbOw/1M=
Subject key identifier: 1B:EE:CE:B1:47:93:F1:6E:BF:C2:2C:42:61:5E:6C:3D:BA:E2:8A:16
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial: 019A4FD01A29CB435BA329093730C56B7806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
Manifest number: 0806
Signing time: Tue 04 Nov 2025 17:00:29 +0000
Manifest this update: Tue 04 Nov 2025 17:00:29 +0000
Manifest next update: Wed 05 Nov 2025 17:00:29 +0000
Files and hashes: 1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: QzzLA7cgIjdZY5m/XWsO04CgS4mawMH5ukxEw1NTVKk=)
2: sJgvME5bJ6yVOF59D9xKTp2vpfs.roa (hash: RFFMtoYHpJBnhJPcD6pM/r00V/xv6R7sQSuEQXzi4Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1a:29:cb:43:5b:a3:29:09:37:30:c5:6b:78:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Validity
Not Before: Nov 4 17:00:29 2025 GMT
Not After : Nov 5 17:00:29 2025 GMT
Subject: CN=1beeceb14793f16ebfc22c42615e6c3dbae28a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:72:27:5a:20:96:9d:20:08:68:a6:be:e8:
17:f2:7f:6b:cc:0e:83:74:72:3a:50:e5:c0:07:eb:
a9:3b:bf:a5:80:f8:3d:fd:35:1a:ff:e1:33:56:d9:
f4:5a:a2:9f:90:ec:c9:52:25:45:b6:ec:86:60:52:
a5:07:67:d3:ae:e7:de:d1:44:0f:0c:48:8d:47:98:
86:b4:bc:81:a6:81:20:b4:cf:92:7b:77:50:00:f7:
7e:68:e0:d1:e6:15:be:bd:9e:4d:9d:5e:42:dd:02:
e7:01:37:bf:3f:83:2d:69:5e:a4:24:fb:89:b2:4a:
6f:cc:33:35:7c:ae:85:c3:a7:15:87:76:7b:3e:71:
24:fd:44:51:e1:6c:cd:d7:43:00:92:b4:28:28:77:
66:1d:7e:17:c9:b7:7d:95:f0:1e:3b:80:7f:5d:c3:
21:cf:9e:dc:e6:c4:18:82:60:87:5e:d7:21:dd:ab:
61:d5:af:97:9c:7b:63:ab:f7:37:5a:ad:c3:1a:b9:
d3:9c:2d:dd:68:e6:c4:cd:de:ff:73:4c:dd:5d:34:
67:b2:ba:8f:08:08:0f:8e:93:45:f1:18:a7:b2:6b:
6d:a0:ad:19:c4:ad:85:d4:c8:ca:e6:68:8f:c6:d1:
45:a4:7b:db:d4:fd:4b:21:da:02:ad:02:64:2f:33:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:CE:B1:47:93:F1:6E:BF:C2:2C:42:61:5E:6C:3D:BA:E2:8A:16
X509v3 Authority Key Identifier:
keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8e:f4:ad:50:cb:3f:50:bb:a4:7f:64:07:b4:54:e1:f8:21:
ef:54:7b:0c:c2:fb:47:a6:7e:9a:c5:02:17:21:74:74:fa:71:
8e:08:c2:cb:ba:1e:ea:74:9c:87:21:c8:3a:3b:0c:28:a6:3e:
5d:24:3e:4b:a9:fc:6d:3c:63:94:67:e7:44:21:27:17:0f:66:
ed:20:99:37:63:e9:5b:b3:7e:2d:b3:c7:9c:6f:53:95:74:ca:
41:79:1f:f1:30:1d:c0:be:b0:e0:a6:0c:47:45:a2:57:79:23:
4d:e1:fc:95:67:08:95:95:d1:f4:fd:94:70:d6:16:d4:ea:0f:
74:9c:2f:67:a5:02:47:23:56:40:1e:51:24:d3:d8:7b:a4:79:
b7:9d:d6:4c:b7:4f:44:6d:64:eb:1a:b2:8b:54:36:d7:11:c1:
41:cd:52:c5:da:6d:ac:ae:ab:16:0b:b4:33:55:71:90:07:96:
2b:cb:cf:a2:19:c5:0b:1c:b9:72:e9:ab:4e:bd:d5:72:38:ee:
15:9c:f6:4f:68:26:0f:a8:5a:60:71:dd:1d:31:60:c6:be:16:
7a:4e:a3:94:10:1f:31:36:0d:d5:64:e5:5c:15:86:6e:10:3d:
d9:50:6d:2b:b3:db:17:55:70:a9:14:9d:c0:e2:18:a0:f3:76:
19:8d:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:42 2025 by rpki-client