Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: lrz49BMzLPIf+aQyg9i3j/iKximy/pxvYzPCqoknHow=
Subject key identifier: 1D:51:25:A3:4C:E6:40:FE:D0:56:24:28:F1:B3:AA:62:7D:1A:E4:22
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 019A4F996EAE3F0791C95185C70E21A29D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 16:00:46 +0000
Manifest this update: Tue 04 Nov 2025 16:00:46 +0000
Manifest next update: Wed 05 Nov 2025 16:00:46 +0000
Files and hashes: 1: 4mIaRiVfusRCW_nZ919kue73VcU.roa (hash: KAlnZdYdnEt6W3Qh7SxuikxG/eJq1ZmaN4m/5vXa+us=)
2: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: AM0IsJeXTOBa7IiB7WwkPmr7m6cFBojXksdu5i7AkYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:6e:ae:3f:07:91:c9:51:85:c7:0e:21:a2:9d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: Nov 4 16:00:46 2025 GMT
Not After : Nov 5 16:00:46 2025 GMT
Subject: CN=1d5125a34ce640fed0562428f1b3aa627d1ae422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:d7:f0:d9:77:c9:bb:0b:8e:ff:43:7e:b7:
2e:f0:1b:a6:e7:7b:8f:9f:1e:9e:97:af:02:41:f1:
ff:b3:86:e5:50:7c:d2:39:4c:98:b4:bd:59:7d:7e:
fa:ea:7c:0f:5b:ba:22:ca:b9:16:f6:a2:48:4d:7a:
b7:dd:60:55:53:73:62:e1:e4:4e:79:24:3f:41:46:
4c:0c:75:11:58:52:d3:c1:a4:6e:e4:24:d8:f3:84:
36:46:b7:a0:f1:f2:92:7b:e4:bc:de:0f:90:07:ba:
3a:b9:45:de:3f:2b:37:bc:ce:06:0b:4e:c3:33:73:
bc:c8:69:98:3c:cd:1c:a4:b7:9f:55:a5:78:41:05:
bb:c8:80:48:3a:76:3e:c2:67:7e:03:df:55:52:e5:
59:5c:cc:fa:9a:cf:42:90:f9:da:4f:2e:77:f4:b9:
73:35:5c:53:f9:2b:48:25:48:95:25:06:b4:17:c0:
4c:db:2a:a6:d0:78:da:b7:92:5b:59:27:ec:62:81:
6d:61:a7:34:d4:e0:07:54:b5:28:dd:ba:9a:0b:1b:
b5:eb:83:d3:fa:c4:bb:46:1d:2f:99:f1:bb:61:2b:
82:ab:10:49:45:14:39:cd:2e:6b:19:1e:19:2f:f1:
32:ad:16:12:ca:a3:76:c7:a7:2b:1b:f8:25:03:69:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:51:25:A3:4C:E6:40:FE:D0:56:24:28:F1:B3:AA:62:7D:1A:E4:22
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:d5:57:60:90:37:f2:88:43:10:5c:d5:bc:11:e7:e9:92:
69:28:6a:cb:fe:ab:08:72:0e:7c:9b:0e:19:9b:ab:79:6f:8e:
6c:d2:d7:93:71:d4:cf:18:48:b4:ca:50:d4:b7:2a:c7:a0:23:
05:a9:2e:b1:cd:1e:c3:0a:76:2b:46:fb:8e:1e:a7:38:42:c1:
d2:ad:99:63:4d:29:e1:3b:f2:23:96:0f:0e:c7:ee:e8:5c:ca:
b8:e4:de:d5:3e:fb:38:f4:21:99:3d:52:e6:df:28:d0:05:bf:
9e:81:0c:b2:e4:59:a8:8b:3f:bb:e5:f3:9b:60:d8:8f:50:65:
52:40:f7:27:4c:e2:ae:c2:5c:6a:bb:0d:da:92:cb:01:b5:1f:
4c:86:87:12:2f:97:64:53:c8:e7:7b:38:4c:fd:90:db:e0:b6:
44:ab:41:cf:7f:10:a0:45:ed:9f:c4:99:c6:cb:6e:c4:bd:09:
0d:3a:b8:a1:b6:23:b9:db:cf:be:f7:96:e7:40:d1:48:5f:38:
82:bb:09:ce:ec:2f:e1:50:11:f9:0a:cf:9f:3c:e0:1a:f7:03:
a9:bf:c6:79:63:5e:f8:c7:6a:5e:77:0e:f0:89:03:89:68:77:
92:a1:22:13:f2:bd:2d:75:21:6a:10:18:16:9c:e1:5b:e8:82:
42:ec:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:09 2025 by rpki-client