Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: U3fFVj1fx/tPYflSD4QL3WBiQ6flig/htwgvNztHU4Y=
Subject key identifier: 45:20:63:95:46:E6:5B:A1:42:94:FC:48:84:96:6F:69:3D:7E:96:0B
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019A4EF5722332F8165E2BA964FA4554E89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: tKGs1Kr9u2pTNRQaoWLmSakWh6+ifVAUpWNk6UtHFaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:72:23:32:f8:16:5e:2b:a9:64:fa:45:54:e8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=4520639546e65ba14294fc4884966f693d7e960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:14:b8:9a:8a:74:6b:84:a6:ef:23:4d:4f:
43:a2:ec:59:66:a6:84:e6:1b:62:01:46:b4:84:f5:
a5:13:25:d7:2d:b1:78:ed:d5:50:ec:63:b3:f4:95:
39:1b:8c:0c:05:95:58:c7:63:0e:a5:ef:39:3c:48:
b9:68:ef:d5:73:3a:45:24:db:e5:2d:81:cf:cc:49:
f9:55:d1:b7:4e:12:7b:e6:b7:8f:41:cb:80:3d:2b:
61:58:74:4d:9a:c9:70:15:88:6c:7c:14:20:07:0c:
c2:d0:83:66:76:9f:80:b9:c7:5f:84:0c:c2:e0:c3:
6e:0c:86:f9:13:e5:c8:65:66:e7:87:2e:5f:07:6b:
da:48:21:df:0a:80:a9:d9:bb:64:80:c0:39:d6:2e:
23:59:42:71:13:88:6c:4f:28:e6:c3:7a:65:cb:55:
60:8a:76:40:dc:11:d7:96:d1:e2:54:e2:e9:85:27:
bd:81:49:11:d3:70:b8:a9:2f:8d:44:85:fa:d0:f9:
1e:82:8b:64:a3:85:58:32:40:06:6d:3b:51:16:66:
76:78:be:ab:05:07:99:e2:d1:3a:6b:d5:b9:6d:1c:
50:ac:e6:66:cf:f4:89:0d:e3:a4:0b:f1:18:1b:8e:
23:b7:d4:15:76:79:fd:7b:52:9e:a5:a1:5b:1c:5c:
18:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:20:63:95:46:E6:5B:A1:42:94:FC:48:84:96:6F:69:3D:7E:96:0B
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:76:b0:da:98:7b:15:19:b5:ef:43:06:ba:e5:84:5f:d8:c2:
0c:3e:8c:7b:b9:98:5a:e9:17:29:3f:0a:21:10:e9:88:e7:16:
bd:31:96:eb:eb:6a:a4:6c:fa:f4:0d:e2:cf:50:7f:72:0a:cc:
98:ae:7b:ae:0e:2d:ca:4e:21:de:ba:cc:c0:23:54:f1:52:ab:
84:97:fb:f2:d6:da:67:97:55:ff:10:b3:66:75:8b:f4:21:92:
ed:cf:e1:59:c0:91:ed:a3:17:74:f9:06:9a:7a:29:39:21:59:
bf:c9:59:ce:e3:18:53:de:7e:c5:a1:97:b5:43:f8:f0:b0:df:
f5:75:d2:55:d4:2d:43:22:cb:8f:8c:dc:5b:b5:db:51:f1:94:
78:ef:cd:d5:94:7c:64:b8:f9:a5:d4:e9:67:41:c6:2a:26:13:
15:66:21:dc:3f:25:56:fc:c9:9c:b1:2b:ef:b3:5f:6f:6f:49:
9a:76:e1:0f:4e:cf:54:ab:f4:31:fc:b9:22:bb:6f:6f:e8:fc:
52:75:ff:45:e5:ed:81:d5:fa:57:c6:aa:19:7c:84:ad:db:df:
f1:c7:bd:0c:3c:a2:bb:94:b2:6b:b1:75:3d:46:a6:8e:59:79:
92:ea:d2:e4:bd:08:d7:ca:84:83:a9:45:61:f4:41:56:5b:48:
a2:3f:dd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:51 2025 by rpki-client