Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier: UNueye/ORm2sNJeYXQrqsiggJ0qAH3cxDDOMYAIIeVQ=
Subject key identifier: BC:31:4C:43:DE:CE:7E:26:E5:30:79:B6:A4:E3:75:2B:44:36:CF:DE
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial: 019A54C097DDA4F017D70F4C773C85BECE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 16:01:39 +0000
Manifest this update: Wed 05 Nov 2025 16:01:39 +0000
Manifest next update: Thu 06 Nov 2025 16:01:39 +0000
Files and hashes: 1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=)
2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: gVF9l6I8ZMXx8vHD1GoEk5ewtGoKpS6B812FM8FeUy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:97:dd:a4:f0:17:d7:0f:4c:77:3c:85:be:ce:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Validity
Not Before: Nov 5 16:01:39 2025 GMT
Not After : Nov 6 16:01:39 2025 GMT
Subject: CN=bc314c43dece7e26e53079b6a4e3752b4436cfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:7b:28:02:79:5b:58:44:fd:01:60:16:d9:
51:a3:fd:b3:2f:9e:51:2d:39:a9:07:a8:b4:18:a1:
21:79:7e:19:83:e9:7e:5f:9b:b7:2a:a5:56:ec:3e:
a4:25:86:b2:13:38:c9:b0:27:01:f2:d8:be:70:c0:
cb:f0:01:6c:69:41:2c:d5:bd:2e:77:98:cb:dc:ba:
17:bc:89:0b:f4:64:e9:9f:b9:4f:72:44:3f:be:d3:
d5:20:ec:57:ae:50:bc:e8:93:1a:15:eb:34:52:f6:
17:9c:33:02:40:74:97:36:73:cb:10:62:39:71:5e:
2f:b3:20:47:0d:82:96:a4:6d:80:32:dc:1c:35:be:
fd:3e:8d:40:03:db:20:bb:c5:05:bc:2a:2b:2b:73:
dc:ae:b6:b9:07:cb:72:5e:d7:b8:73:15:a5:15:57:
43:0e:d5:98:7d:0a:dd:1e:e0:89:53:86:9e:da:1e:
e6:06:01:14:3d:48:81:39:48:00:ea:b4:65:a3:ab:
04:ab:ea:2c:d0:10:94:40:39:ea:01:d4:44:22:ff:
d9:cd:d1:0b:76:11:3a:fb:34:00:f3:f0:09:ae:05:
53:89:95:57:44:6c:b3:43:9b:24:3b:4d:2a:48:d1:
4c:66:86:9b:11:3f:06:5d:f6:f9:02:51:f3:f3:b5:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:4C:43:DE:CE:7E:26:E5:30:79:B6:A4:E3:75:2B:44:36:CF:DE
X509v3 Authority Key Identifier:
keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:08:a1:5f:84:d2:d6:5e:b4:b3:60:9a:76:66:7c:eb:31:67:
72:fc:bb:5a:fe:04:7d:88:7a:5c:0b:33:90:99:71:58:30:0a:
4c:46:d2:fa:00:c7:fa:82:81:a9:40:84:f0:c8:f0:e5:cf:77:
03:2f:f3:1e:a7:73:47:71:da:40:6c:5a:0d:95:a7:a4:7e:5f:
ce:4f:97:55:e3:fe:df:75:15:65:eb:57:91:fb:72:1a:2b:ff:
0e:8a:95:82:db:b9:6a:9e:5c:89:f1:8f:69:73:cb:ff:44:e7:
9d:e1:cd:c1:2c:4c:ca:68:a6:39:c7:b4:98:96:68:ef:9d:63:
69:5f:aa:be:22:63:82:fa:90:7e:5a:ec:44:6c:59:42:d2:8d:
ee:f9:d0:1b:5a:68:4b:73:56:41:45:84:fd:da:e3:e8:2b:59:
4b:1f:65:b3:0b:5f:9d:7d:db:70:12:0b:5f:e8:39:6e:ff:e8:
54:49:d5:f7:b9:7b:ff:31:a6:1d:c8:c6:65:5a:9b:41:d2:b0:
36:bb:88:a9:90:02:bf:7b:37:17:6f:81:85:82:99:45:ec:96:
42:b5:ad:13:c3:42:2c:73:08:e0:ed:cd:5d:ec:f7:4c:87:b8:
ef:84:e2:48:1d:98:d9:55:43:8d:f6:68:dc:3b:8b:2d:0a:cf:
df:fe:85:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:03 2025 by rpki-client