Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier: 00InzwNfOvhJqjYOQkhIimKUumwyyEfRdLAOENMxnIQ=
Subject key identifier: 09:41:A8:5B:35:D3:89:FD:D3:3E:2E:18:50:5F:A5:95:CD:54:66:10
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 019A4EF43896588BE945CE8464A7F49AC1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: mcCnj0YcjKVWKNRUEHJJ9oCILI8.roa (hash: QCD+FHuTsYXCE9fg4S64GzeBQUQDK650c6oIs3Pqi/Y=)
2: qnmXcL8dUJj7rdFkLv5IIJUwDDY.roa (hash: SbXai8opNHzQzJTVhIMV1eYK9jsCmNmT7MYPyjYeprw=)
3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: K6DNHEfEtW0HiYhF152NU7R/+fQWLm/zgsqmuRotOcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:38:96:58:8b:e9:45:ce:84:64:a7:f4:9a:c1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=0941a85b35d389fdd33e2e18505fa595cd546610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:ae:2a:52:26:e2:ff:24:1f:cc:27:b1:39:
8e:9d:fe:e8:4a:5c:a5:19:f2:c8:ab:58:e8:42:a5:
a4:1c:d6:c9:8c:3e:9a:e4:0f:fe:49:33:9d:90:a1:
37:99:ef:8d:f3:99:52:f8:3f:59:5e:e7:74:34:1f:
1b:87:dc:3d:81:6a:fe:5f:16:8d:6c:e6:eb:69:55:
a6:ca:df:a9:15:1b:0d:0e:8f:70:56:d4:95:fe:ec:
ab:17:20:f2:5c:a0:9d:74:20:38:33:1c:21:bb:f8:
7c:b2:a0:65:b8:ae:8c:ce:0b:0c:8c:f8:16:81:68:
55:17:6d:b5:03:c9:e7:08:a0:44:85:2a:41:bd:fd:
b1:7f:76:42:8d:16:e5:f9:99:7b:fc:ef:b7:6d:ad:
f6:2a:09:7b:07:8f:c0:82:00:7e:f2:79:7b:33:ab:
06:fb:18:78:d3:ed:b9:94:d7:9a:30:da:28:f3:fb:
95:25:fb:5b:9a:26:75:a6:3a:df:b7:bb:9d:c5:5f:
43:3b:f9:18:81:1d:78:05:0f:48:71:d8:e6:2e:9b:
fc:70:72:4b:64:30:c9:e6:df:77:04:5a:69:7a:f2:
27:c8:4d:96:cb:70:02:49:b2:eb:4b:bd:8a:13:74:
fb:a6:68:ca:94:0e:ef:50:82:6f:16:27:1a:d3:a2:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:41:A8:5B:35:D3:89:FD:D3:3E:2E:18:50:5F:A5:95:CD:54:66:10
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a6:49:4f:e7:7f:06:f1:bc:72:cf:9c:14:65:6e:a5:1b:45:
ed:bb:bb:97:f3:19:7f:04:91:52:ad:87:0f:93:46:b0:ca:30:
62:e8:8c:47:59:62:29:72:1c:2a:8d:66:da:01:ed:23:8c:53:
60:bf:db:83:4d:d4:5b:f5:1c:08:27:5c:36:a9:8a:d9:92:ca:
ee:6f:82:1c:e5:e4:d8:03:bb:c8:85:76:93:7f:3a:d8:6e:0b:
85:25:a0:93:e8:f2:5f:1f:fe:08:c7:7f:0d:15:67:bb:2a:7e:
c6:60:ff:b7:b0:6b:8b:96:cb:95:41:f5:71:6f:4e:eb:11:53:
12:a3:1d:64:39:aa:f6:3b:71:76:e2:8b:7f:ef:27:b4:bf:24:
36:0e:af:10:bf:f3:ec:47:37:fe:78:ba:5f:b1:ac:5c:33:f9:
72:0f:d1:65:88:14:20:46:1c:83:28:09:23:6e:3e:e9:b1:43:
a9:5d:0f:01:a9:53:03:49:e4:41:14:6a:5d:a6:cc:18:2d:76:
64:7b:17:69:3c:58:8a:a8:a4:59:e3:11:9c:95:e2:d9:b8:8a:
9d:15:a3:b7:bc:81:8a:67:c8:d1:f8:e6:fd:27:c9:61:fd:18:
b8:c4:53:f9:a2:a1:6d:68:86:c2:b2:33:c6:ca:c6:2d:39:dd:
86:23:f5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:41 2025 by rpki-client