Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: 0Lp+nMH9CU1BUP6hGFVWT1APq7iJGE/4gMpwwjcBzYE=
Subject key identifier: 62:06:06:D8:D5:9B:C1:92:6F:16:90:94:19:CB:AE:79:14:80:B5:E5
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 019A52639C1C73EAC1D8DEE99DB450825464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 1174
Signing time: Wed 05 Nov 2025 05:00:50 +0000
Manifest this update: Wed 05 Nov 2025 05:00:50 +0000
Manifest next update: Thu 06 Nov 2025 05:00:50 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: 6P45y4AZekqs0WDSYjHnH1aVrNIfSMRIoCQnTxV21pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:9c:1c:73:ea:c1:d8:de:e9:9d:b4:50:82:54:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Nov 5 05:00:50 2025 GMT
Not After : Nov 6 05:00:50 2025 GMT
Subject: CN=620606d8d59bc1926f16909419cbae791480b5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:67:a2:cb:a8:bf:b6:85:35:f7:ec:04:5a:
ce:31:5e:a8:af:6f:d8:7e:a6:1f:b2:b0:15:cd:fa:
a5:5e:b7:14:9c:0c:7b:18:45:95:fb:74:9a:f8:8d:
bd:13:3e:28:7d:08:a4:47:37:51:06:a0:32:b9:47:
55:9a:0d:6b:61:5a:e7:3a:89:6a:63:ee:f9:f8:17:
8b:f4:3d:20:1d:0b:bb:ea:95:01:66:f2:60:a6:ee:
0b:4f:82:97:e2:2a:c9:6c:c8:9b:e8:8e:a9:2e:2a:
ae:2f:94:70:c7:46:34:8e:29:30:b7:a3:0f:18:a7:
0b:52:59:a2:72:14:4f:c4:93:5e:bd:3f:ef:80:0d:
52:26:90:f4:30:57:39:cc:b9:88:19:00:e3:66:2c:
ad:8d:6d:52:a6:1f:c4:8a:b8:8d:50:d6:22:0d:31:
67:4d:41:19:62:08:13:db:4f:ab:6f:89:d3:88:55:
08:8a:40:f6:56:2d:d1:31:1b:18:a8:59:f8:d4:0a:
6c:87:2f:54:b7:46:98:3c:fa:fc:c6:99:87:55:ba:
e9:67:8a:52:65:d9:3f:57:f5:fa:2a:c4:c4:a6:f3:
33:64:10:81:f3:84:55:f0:da:3e:ff:56:d4:45:52:
32:95:3e:64:03:eb:83:e4:13:4d:4f:15:e7:5f:de:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:06:D8:D5:9B:C1:92:6F:16:90:94:19:CB:AE:79:14:80:B5:E5
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b0:70:13:72:4a:57:f2:12:07:0f:fc:bf:c1:da:50:f2:b2:
b9:e1:43:31:b9:05:7d:cd:f8:d9:ff:e6:42:ba:b7:49:83:51:
5a:11:cc:6b:46:0e:06:53:76:b7:66:fe:17:e7:49:21:de:a7:
6a:87:67:1a:d4:0c:71:5b:f9:80:e4:30:89:c6:4a:15:5a:fb:
f7:3f:6f:f9:a8:f6:97:45:72:8c:c4:45:d0:1f:2e:25:13:83:
ca:60:b6:34:d1:44:a3:c4:a3:81:5b:84:0d:4a:4e:cf:36:a2:
32:cc:4d:e4:8f:f2:cb:82:bf:44:0c:99:0a:e5:e9:29:f6:c3:
93:6d:00:14:12:1a:fb:46:66:2b:69:61:5d:ac:45:d2:48:0e:
b9:61:04:ab:7e:27:e6:ea:53:f6:b8:d4:e0:2c:fe:00:c1:70:
cd:f3:ea:aa:15:6e:31:2f:bb:66:5d:54:0d:64:b7:5a:35:b5:
0a:d1:5d:eb:85:14:5f:ad:56:ad:c1:de:0b:31:15:04:77:66:
7a:8b:02:90:28:19:bf:4d:3e:a7:75:13:bd:c0:1d:b3:48:46:
ae:aa:bf:62:a6:de:2d:d5:c0:49:e4:00:82:8e:05:c4:e9:27:
3e:a1:8a:52:01:2c:c2:6f:f2:8d:ea:e2:e6:2a:ee:77:7d:e8:
b1:5c:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:54:42 2025 by rpki-client