Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File: i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier: XhK1CHrGnm/epEK3PkidsxVLr4znFWJGEPxktAfh908=
Subject key identifier: 7B:BB:D5:FB:01:43:E6:D8:6F:71:C2:7B:29:1B:A0:EF:9B:06:2C:0D
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 019A51BEA79DA42AC1D0E2360B60AE09F1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 02:00:40 +0000
Manifest this update: Wed 05 Nov 2025 02:00:40 +0000
Manifest next update: Thu 06 Nov 2025 02:00:40 +0000
Files and hashes: 1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=)
2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=)
3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=)
4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=)
5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: a/+dD3XmljwbKxdSsQq16/dFOVfgrZ6JYrvBfXREnPk=)
6: kgtXMGVq_yiG6jbCmetTa_cdZEI.roa (hash: 6jOU2wUAoyQfpjSCtb3mycfBqwA3lOt9bOnarXx4iMo=)
7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a7:9d:a4:2a:c1:d0:e2:36:0b:60:ae:09:f1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Nov 5 02:00:40 2025 GMT
Not After : Nov 6 02:00:40 2025 GMT
Subject: CN=7bbbd5fb0143e6d86f71c27b291ba0ef9b062c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:d0:1a:78:47:1e:03:46:df:56:72:8b:98:
6a:9b:b5:03:d5:c6:4d:79:5d:c6:5c:70:79:4a:cc:
24:58:29:46:17:d2:c6:7d:1d:f6:86:97:8b:8a:9d:
2c:81:53:55:8a:e4:74:e1:7c:35:ad:8f:93:c3:74:
9c:ec:d4:45:73:37:77:53:28:a0:cb:23:93:46:bf:
49:de:f9:88:cd:9e:dd:84:4c:8f:53:7c:1f:2a:fe:
5d:5f:f0:04:ed:59:15:c9:2c:ad:23:e6:26:4e:61:
4e:e3:72:c3:c8:0b:6e:c4:1f:02:2a:1d:ef:30:b0:
35:66:0e:a5:ce:4b:59:59:6e:3c:3a:41:54:14:b7:
08:f5:f2:75:0e:85:9e:27:49:e3:f9:bb:3f:a3:3b:
34:a8:19:70:9c:fe:9e:76:55:1c:18:1f:9f:d5:81:
fc:40:74:fc:72:f8:31:84:b8:aa:31:ef:64:15:b4:
50:d3:54:fe:59:ec:c9:d9:2d:29:5b:98:58:83:fc:
cb:e2:a9:4c:0c:e2:ac:e2:af:d0:8c:a5:68:f1:3b:
5b:c1:35:bf:3e:93:11:ad:ff:aa:f9:12:66:1d:41:
df:c0:08:ee:d5:7c:27:93:47:bb:dd:c8:19:27:5f:
3c:4d:53:32:85:4b:e9:1f:06:21:54:a5:08:e5:90:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BB:D5:FB:01:43:E6:D8:6F:71:C2:7B:29:1B:A0:EF:9B:06:2C:0D
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2a:06:3d:e9:c8:4c:df:e3:2e:7f:eb:79:52:c8:c8:a9:e1:
98:68:b6:46:73:2e:49:09:f5:a7:0f:21:f5:0e:5f:29:f2:3e:
b7:e0:32:d4:86:ad:7f:43:ed:2f:d8:c3:27:50:ef:e9:6c:74:
78:73:e5:c1:84:70:2e:6f:f5:20:57:a6:20:36:a1:83:fc:02:
8b:8d:f7:12:3c:ea:1c:bc:bf:55:31:eb:a4:7f:f0:67:7d:67:
da:c7:ff:fa:6e:fc:e9:35:df:32:ba:06:1b:05:be:71:4c:49:
cd:58:bd:5c:6d:7b:cc:96:d5:9d:fc:26:84:a6:f5:09:48:d7:
a4:29:f7:53:89:76:90:1d:f4:76:96:d4:56:ea:a3:16:42:7b:
2d:b1:92:cb:b3:54:ec:2c:5b:c0:fd:32:cd:19:05:ce:f7:62:
ae:64:fd:ab:13:4a:0a:95:25:6c:f1:1f:2b:5b:41:76:a1:1f:
97:4f:46:8d:25:ef:df:e6:39:2d:5b:12:25:8f:4b:7c:17:04:
31:ed:da:04:19:75:95:bb:f6:d2:90:ca:2e:77:56:53:ea:76:
1a:3a:87:02:7f:1b:b2:b2:32:e6:09:89:b8:81:4a:8c:1a:e6:
a3:56:31:80:cd:99:6a:3e:97:a8:a0:ba:06:88:8a:8b:b5:b2:
c9:39:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:02:56 2025 by rpki-client