Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: tzs5KLU+/Ym37UJy0lpfG/OTOk/dKyOXgZOFIpsmeVg=
Subject key identifier: 49:0D:68:04:93:69:DC:A8:BC:56:B0:B4:D2:F7:59:78:7F:8A:B9:1A
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 019A4DAAD94AC458FE58514FA9B1228E8C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:33 +0000
Manifest this update: Tue 04 Nov 2025 07:00:33 +0000
Manifest next update: Wed 05 Nov 2025 07:00:33 +0000
Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: IhInAeay2v6u37nijmgzsrEkSRnxTq4z2qinAiXvEB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d9:4a:c4:58:fe:58:51:4f:a9:b1:22:8e:8c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Nov 4 07:00:33 2025 GMT
Not After : Nov 5 07:00:33 2025 GMT
Subject: CN=490d68049369dca8bc56b0b4d2f759787f8ab91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:4e:0a:80:04:86:24:06:c9:8c:dd:df:2d:
b5:49:be:95:dc:6a:d9:4a:3f:b0:25:a9:4b:77:ea:
76:36:cc:24:33:bf:97:44:8b:7c:e6:91:35:a2:01:
75:ab:f7:ec:13:77:e5:13:45:9b:fe:67:a5:33:35:
56:5d:05:66:2e:25:b9:1c:02:e5:22:97:36:de:55:
11:58:b4:17:92:eb:57:d1:a4:71:a3:48:60:5b:de:
96:f1:7d:0f:ae:7b:89:e9:6f:6a:c1:98:1a:4b:98:
82:b1:ce:bf:6a:2b:ab:90:bc:86:de:08:ed:f8:57:
b5:14:34:26:34:f3:e3:c5:eb:51:71:6c:ca:82:23:
06:dc:94:8a:3e:28:26:9e:c4:32:2e:bc:cd:48:4f:
79:22:b2:de:9a:37:ec:67:2f:4f:1f:92:ba:54:a5:
65:7c:02:07:f8:43:b5:d9:21:91:e0:d7:34:96:0d:
3a:25:2c:2c:cb:55:1c:4a:0c:4e:35:98:e0:dc:c2:
06:1f:61:17:ee:e4:94:48:63:70:5f:36:8d:66:5e:
2d:5e:c5:44:3d:f5:e6:5a:df:6e:a8:a3:76:3f:fc:
96:3b:9e:85:63:40:b9:55:fa:fc:9d:bb:ae:1a:17:
7e:43:71:bc:c7:bf:02:4e:b4:e8:2f:2a:7a:ea:71:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:68:04:93:69:DC:A8:BC:56:B0:B4:D2:F7:59:78:7F:8A:B9:1A
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:39:a5:89:d7:80:07:50:24:30:b0:35:5d:48:d8:9a:54:c9:
71:8c:72:7a:b1:a7:52:4d:e3:a2:6d:66:a0:25:b7:7b:7e:9a:
f0:5b:c5:b0:52:ad:a2:ce:67:3a:be:e5:83:d9:e3:5e:36:9c:
74:28:83:a5:1f:37:ee:6f:49:13:10:9b:7f:88:00:9d:ef:0b:
53:64:7c:44:48:5f:b4:ad:97:87:ad:9c:81:f4:1d:3b:ad:04:
94:43:5c:65:11:dd:fd:6c:d0:58:c5:58:97:c3:78:58:f1:ba:
f5:1a:65:c8:73:25:fc:0f:a4:fa:63:54:15:1c:2f:93:fb:78:
3d:9e:57:3c:93:1e:8d:66:c3:76:fe:18:54:ce:65:36:32:b8:
15:c0:6e:37:45:d4:55:b8:28:6d:71:8b:67:98:9b:03:1a:38:
12:6f:01:a0:45:8d:78:74:ab:05:30:4a:58:13:9e:ef:76:b8:
23:77:38:0c:a6:0c:f4:78:6d:a6:36:85:13:25:bd:3b:b4:8d:
5b:97:53:68:43:08:79:7c:14:ab:35:6c:a9:4a:05:12:ac:5c:
46:26:b5:a5:1b:0a:3f:ec:dc:b8:9f:c3:43:0f:1b:ad:ef:9b:
45:90:88:54:b2:84:87:37:7d:85:04:df:05:2a:d3:7f:a5:24:
c7:3b:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:41 2025 by rpki-client