Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: 14gpLy8SD1Xq6z000ehFqEqkxRJn/QeQSM+e4syONFY=
Subject key identifier: CF:6F:71:CF:75:36:99:21:55:EC:0E:C1:B3:56:89:46:2B:51:77:6F
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019A4DE229E13EDB2F297753C53B9136EE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:58 +0000
Manifest this update: Tue 04 Nov 2025 08:00:58 +0000
Manifest next update: Wed 05 Nov 2025 08:00:58 +0000
Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=)
2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: 1G+O7JNa5Rxhfmpj+Gevb3TkIKo5wrh0C8FYX3V8zTk=)
3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:29:e1:3e:db:2f:29:77:53:c5:3b:91:36:ee:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Nov 4 08:00:58 2025 GMT
Not After : Nov 5 08:00:58 2025 GMT
Subject: CN=cf6f71cf7536992155ec0ec1b35689462b51776f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:90:85:33:92:3f:d7:d6:f3:6d:c7:06:ce:
13:ea:37:7d:ce:18:f3:fe:d0:68:ff:84:b9:da:09:
e0:47:d5:6e:f0:34:dd:7f:c8:0b:ec:40:24:06:77:
71:b3:b5:7e:95:46:1f:2b:82:70:bd:1e:13:3e:05:
e7:d2:86:43:6c:a9:93:4d:d4:3a:72:c1:be:12:ab:
12:2f:73:d3:9b:65:fa:2f:58:06:2d:cc:83:aa:a2:
79:d7:35:c9:48:28:4b:9c:1e:52:7d:76:fe:bd:b6:
63:1f:73:9c:ab:72:37:8e:d5:15:35:5b:fe:b8:61:
85:5f:e4:26:da:44:b4:aa:85:28:6b:0f:5f:76:ea:
80:8c:24:30:93:e6:81:17:49:f7:59:ed:ed:d4:0f:
53:ba:e6:24:0f:1b:c7:81:e0:64:f8:fa:94:e7:d1:
08:d5:08:75:06:7d:de:a0:32:ed:3c:c6:0d:3d:da:
16:2e:a5:87:ee:ea:bb:43:ee:46:87:e9:19:e6:fd:
9a:3f:8c:80:76:66:1a:70:52:58:d6:8b:c5:d8:57:
db:63:65:64:e2:59:6f:5e:84:c3:b8:43:c0:33:e8:
32:ce:53:5b:c8:25:74:5c:c4:ec:fa:50:b8:12:de:
ce:2e:b0:69:ec:73:7e:50:b5:c5:1c:5b:68:da:23:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6F:71:CF:75:36:99:21:55:EC:0E:C1:B3:56:89:46:2B:51:77:6F
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6d:e9:ba:10:7c:7b:ea:87:ce:0a:4d:88:3b:83:bb:95:74:
84:c7:a2:40:44:87:2d:a1:44:01:ed:0d:9a:14:2c:a6:3a:53:
45:d2:d3:44:40:19:e2:10:3f:95:7b:50:60:3d:d1:f0:09:6a:
94:f4:4c:e1:6a:ec:84:c5:5d:be:bf:3d:6f:a8:48:0e:ea:31:
12:5c:de:39:94:dc:ff:61:70:e4:de:54:10:b9:ac:31:e5:8a:
a8:13:82:83:98:2c:64:2e:b8:63:32:01:a3:cc:e7:a9:fc:1d:
12:2e:05:eb:c1:34:ea:a8:ae:aa:a1:6d:48:1c:27:a8:2b:e1:
2f:11:b0:8f:ef:40:8b:e5:45:14:7c:80:3c:84:7c:86:00:43:
d5:a8:e1:0d:43:01:9d:c6:19:8f:95:65:96:90:07:68:59:75:
a4:6d:ad:4c:91:1e:78:c6:eb:aa:01:df:e5:3a:03:76:dd:9c:
db:eb:3a:7e:fd:d0:8e:d0:a9:80:b7:21:87:cd:cc:c9:60:96:
8d:63:62:d2:b5:be:ac:b1:09:56:2a:63:8a:8b:fa:45:f7:22:
5b:34:1e:24:fd:eb:0a:de:0b:c0:20:11:e7:fc:05:f9:eb:71:
b9:6e:a5:e1:11:bd:f6:1a:e0:48:6d:85:06:bd:59:92:bd:9c:
af:73:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:01 2025 by rpki-client