Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier: MfO8qCuXAPP7WD2kxLmSIMUWYFuMayHWLX2VK1xGqes=
Subject key identifier: 17:32:A5:5F:48:13:20:28:E3:B2:A4:BD:E2:F9:58:AF:BF:D6:17:86
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 019A4F9910889653B5C29ED28964A3A765AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 16:00:22 +0000
Manifest this update: Tue 04 Nov 2025 16:00:22 +0000
Manifest next update: Wed 05 Nov 2025 16:00:22 +0000
Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: t55Ol15Qi/8ZOh0pZou2XWf/biQt8+86icmdUx38TjA=)
2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=)
3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=)
4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:10:88:96:53:b5:c2:9e:d2:89:64:a3:a7:65:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Nov 4 16:00:22 2025 GMT
Not After : Nov 5 16:00:22 2025 GMT
Subject: CN=1732a55f48132028e3b2a4bde2f958afbfd61786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:02:14:f7:73:89:25:6a:48:15:4d:50:6c:
1f:86:ef:f6:c4:ab:67:9b:3d:0e:dd:f5:bf:72:c7:
03:5d:a3:37:55:1f:6d:a3:bc:79:bc:b7:f0:60:41:
2d:c2:e4:a6:2c:11:b4:c0:3b:dc:57:8c:8f:41:c8:
6d:7c:92:ef:af:70:9c:da:a1:76:c2:e5:42:cc:2b:
21:19:f1:ea:70:88:4c:d5:2d:35:0f:2a:7b:ed:10:
8d:90:7a:1b:41:03:d2:11:37:78:bf:57:30:7b:5e:
8b:33:e0:ac:d8:f6:10:84:d3:bd:96:7d:57:03:82:
a2:b1:88:e3:75:14:4a:88:7c:2c:22:16:36:d2:8a:
db:5f:c3:b4:21:d9:66:21:65:ba:61:9d:33:36:e2:
3b:85:8b:3f:a8:ab:01:9c:1d:d4:05:80:eb:20:68:
c0:18:52:ae:8f:02:01:c3:7b:8d:db:6f:65:c9:03:
ef:39:eb:40:8c:b6:52:46:1f:fd:90:ff:16:c7:a6:
98:f6:f9:81:f3:4e:ae:9f:d8:cb:35:62:be:66:c0:
e4:eb:4f:95:8f:85:67:ec:52:48:90:92:2c:dd:b5:
ff:fc:93:dd:e4:1b:56:56:70:d2:f8:1a:c5:fe:6d:
d6:5a:b6:01:99:ec:c5:68:a2:fa:65:2b:f2:99:7b:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:A5:5F:48:13:20:28:E3:B2:A4:BD:E2:F9:58:AF:BF:D6:17:86
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5f:0f:b5:15:de:0f:59:e0:60:d2:c4:38:85:ae:bf:3d:c5:
24:4d:0d:e5:fc:26:50:6e:73:47:c2:4c:c3:f9:b2:f3:2a:ab:
0b:32:da:8e:6a:ff:b2:59:f1:58:8f:13:ad:2d:74:c2:d6:ef:
68:f2:2f:14:c3:d2:08:eb:8a:82:bb:c5:f2:7b:d1:3e:8e:11:
ce:f1:54:c8:43:05:b9:1c:d4:5a:98:e6:3c:f6:1f:7e:3c:4e:
aa:92:2e:f3:b1:0f:64:eb:22:ce:d5:e4:ec:df:fb:c3:f8:0e:
4f:17:b7:e1:59:0c:2d:83:0f:93:03:39:6e:c6:02:01:c2:65:
61:e1:64:db:7d:37:98:d9:12:06:76:6a:fb:12:84:13:bb:e3:
05:d6:05:e2:18:8f:51:53:a5:2c:b5:5a:43:6d:a5:f3:9a:75:
74:eb:fd:aa:de:b4:6b:01:67:d7:40:26:c7:06:0f:44:21:e9:
e6:c9:24:75:5e:31:c4:81:7d:0b:62:d0:51:1a:6d:f7:26:45:
91:90:a9:58:92:e8:f1:04:54:2f:93:a6:60:f5:36:9a:9e:3d:
da:aa:a1:06:b0:10:a0:e3:67:61:ce:d1:80:0b:c7:d4:3c:19:
81:4a:0e:f0:2a:f9:20:1a:a1:5a:70:c4:e4:ad:96:47:30:90:
b6:80:c4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:18 2025 by rpki-client