Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
File: _0ywnegmUO5MxDJ-q2dwt6sUfvs.mft (raw, json)
Hash identifier: /rxF2Iq3sBldxCo1jjBJcdWil6NgNvb0rsy3TntTDy8=
Subject key identifier: 16:4D:D8:F1:5F:DD:CE:B6:6C:37:5A:F5:74:B5:1C:A3:D6:1A:CF:EA
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial: 019A4FCFD3C0ED02E6C997ABE392FB1DF173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:11 +0000
Manifest this update: Tue 04 Nov 2025 17:00:11 +0000
Manifest next update: Wed 05 Nov 2025 17:00:11 +0000
Files and hashes: 1: RcUeax2IJNxx-VLzmeCKMxA0SJU.roa (hash: vene8siI5AmwNR1jjMXzcgVgONNVdoSDnnxQWvu3CqU=)
2: _0ywnegmUO5MxDJ-q2dwt6sUfvs.crl (hash: pcBeUYu1az34ZCB0Obiu+m7OfH4gmBb4bnMZGZMiT20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d3:c0:ed:02:e6:c9:97:ab:e3:92:fb:1d:f1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Validity
Not Before: Nov 4 17:00:11 2025 GMT
Not After : Nov 5 17:00:11 2025 GMT
Subject: CN=164dd8f15fddceb66c375af574b51ca3d61acfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:d9:21:73:59:1f:2d:dc:92:bd:4c:14:b4:
3f:19:70:44:35:82:89:92:f1:9c:f6:68:db:b0:42:
84:fb:71:fb:48:cb:f0:61:f0:56:20:bc:10:2b:52:
c7:7b:98:0a:49:55:2d:c0:f5:64:ed:1a:0e:e5:83:
ea:8a:d4:da:1f:ad:db:4b:84:9e:07:9d:f6:6f:b4:
f3:79:ba:d2:32:fb:0a:a5:9f:6a:cf:b5:f0:e4:ca:
82:0b:1e:e5:6b:65:b5:71:7b:88:df:30:02:82:ec:
39:d8:6b:44:70:34:6e:5d:fc:e5:75:4e:b8:f0:74:
b9:72:47:23:70:fc:ba:46:77:1d:3f:33:99:56:6d:
54:f4:6a:c5:2b:12:b6:21:50:53:89:16:cf:2d:9e:
d2:36:28:e5:9a:ef:de:d2:e5:8d:d5:40:a7:ac:b9:
ec:8d:73:3e:47:b4:45:d0:ab:75:de:07:d9:ac:72:
f7:c1:79:de:73:99:44:90:56:ad:b1:60:db:51:11:
0e:a7:ec:da:58:80:45:4e:e3:fe:0b:3c:62:16:e2:
39:d9:1d:64:dc:b0:02:9c:78:0d:1d:6a:38:5d:15:
06:90:6e:d3:33:5b:33:19:b3:ca:d7:01:35:0d:a7:
3b:6b:ef:e9:27:16:7d:66:40:d8:13:d1:54:8f:36:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4D:D8:F1:5F:DD:CE:B6:6C:37:5A:F5:74:B5:1C:A3:D6:1A:CF:EA
X509v3 Authority Key Identifier:
keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6a:fc:fc:84:fb:ea:24:c6:e4:02:60:c2:12:5d:da:70:d1:
d3:6a:fe:26:93:5e:77:96:5f:cc:f2:fd:8e:b9:13:3b:fc:2c:
37:9a:b7:50:19:d6:74:3d:16:60:2f:6a:65:9b:43:1b:fe:24:
e9:16:bb:76:af:de:f1:38:15:4c:c2:13:86:f5:f7:2b:da:95:
74:d9:e1:fe:cc:0d:3b:6f:15:2e:a3:ca:47:06:73:8a:db:2a:
2c:54:9d:98:25:ff:40:9d:f1:fa:75:6f:34:7b:72:99:35:41:
20:fa:4e:dc:d8:13:bc:99:4b:d3:1a:ef:a1:d2:79:55:86:23:
d1:5d:a6:c2:89:f8:32:59:c9:55:a8:73:04:f5:93:9b:53:b3:
75:7c:9b:a2:c5:60:e0:22:fe:aa:56:ac:86:6d:2d:df:91:3d:
86:4f:27:2b:ef:28:99:a7:64:69:08:f9:d7:20:10:80:d0:9c:
a2:43:63:f2:2a:50:72:43:e0:1b:ed:23:23:e5:44:29:6c:d9:
2d:bb:50:52:81:45:f8:aa:b6:7d:bd:72:bc:f9:72:47:dd:44:
c6:04:9d:db:12:a3:a4:2b:63:38:3f:86:a7:7f:50:95:d7:e4:
2c:13:e5:72:2b:35:ad:cf:44:78:13:f1:f6:e8:d8:50:66:6a:
7b:5c:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:58 2025 by rpki-client