Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier: Wz7YCjh+YzKSiCKLOxc6IIgAmjoayHYBYWiUMTrV8jU=
Subject key identifier: B3:C1:2C:74:97:E1:D3:EB:C1:D9:66:85:2D:EC:C5:17:86:F6:27:02
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 019A4DE1AF773887BE0B856CB7675BCC77D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:27 +0000
Manifest this update: Tue 04 Nov 2025 08:00:27 +0000
Manifest next update: Wed 05 Nov 2025 08:00:27 +0000
Files and hashes: 1: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: 2GzRj55bgoCbjxcLG+ywtAYn0zj/Th+XMuRpvXT/KpA=)
2: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (hash: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:af:77:38:87:be:0b:85:6c:b7:67:5b:cc:77:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: Nov 4 08:00:27 2025 GMT
Not After : Nov 5 08:00:27 2025 GMT
Subject: CN=b3c12c7497e1d3ebc1d966852decc51786f62702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:f7:d0:cc:e8:b7:ea:2c:e0:66:3a:1d:b6:
c7:7b:da:45:d6:b6:d6:e9:34:8d:c5:93:c5:93:fa:
2a:e6:9e:2c:3e:86:2e:1d:6d:05:8f:b9:cf:83:37:
b0:8d:f6:51:9e:9b:eb:b7:ec:f1:b5:59:12:f3:47:
c2:63:5e:27:6c:cd:be:93:93:df:a6:f1:ef:97:81:
1e:c0:e3:a1:70:48:35:07:1b:66:f8:c7:b7:d6:e0:
0a:cb:ca:57:b3:42:1a:66:4c:80:13:62:0b:63:57:
7d:f9:c6:01:0d:a0:26:6a:ee:af:be:9b:d6:d2:62:
70:d2:8f:2f:6c:91:24:28:1d:2b:c5:07:0d:93:ce:
93:da:05:9f:62:fb:11:d3:0a:4a:9e:9b:ca:15:44:
bc:eb:a4:f7:a1:29:e3:95:e0:e0:8f:10:9f:f9:98:
42:75:24:98:6f:bb:29:0e:e4:f0:50:32:dc:b5:fe:
4b:39:aa:c1:0c:dd:8d:4f:a5:e6:ba:3a:16:1d:b7:
88:da:c7:35:14:3c:d5:d8:38:75:84:64:f7:98:f3:
5f:72:08:40:13:8f:5e:5a:5a:f9:68:fc:50:51:84:
18:73:09:82:f5:a4:34:a4:7c:d0:43:88:68:bf:c8:
4d:80:c6:e6:fe:9d:9c:bf:80:5f:29:c2:71:fe:09:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:2C:74:97:E1:D3:EB:C1:D9:66:85:2D:EC:C5:17:86:F6:27:02
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0d:b0:58:e9:ae:71:74:ab:22:43:46:f6:c5:fd:73:b8:a1:
8c:f6:fc:1d:04:97:b9:a8:da:63:6f:06:da:9c:50:5b:57:d2:
ba:f1:50:2a:99:2e:97:27:73:e0:32:a1:eb:e0:f3:17:18:4f:
23:50:b9:b5:e1:11:0f:12:e2:b1:42:31:f2:6b:08:f2:b7:b3:
5c:70:4b:84:f2:37:d6:6b:81:8a:88:18:31:c6:28:4f:8a:21:
67:13:49:d0:fd:3a:6a:d5:f1:19:e8:67:37:bc:01:86:93:81:
42:61:e5:78:a0:d5:75:ce:a8:54:45:1d:05:b2:c7:0d:43:30:
5d:96:eb:6c:82:f6:d0:df:d6:cd:ca:9a:2f:c4:f0:62:29:d9:
fd:81:78:b2:75:3e:82:2e:2b:aa:8f:5e:91:60:a3:71:7c:05:
e2:6c:16:7a:0a:de:a8:65:ad:9f:51:a3:c6:b2:6c:f1:d7:7e:
3e:ca:78:da:d9:15:57:9e:58:2f:ff:5c:44:02:cf:e8:d9:06:
82:51:92:61:54:e5:3d:97:f6:5c:c1:f6:40:2a:db:92:e9:f3:
d3:2d:12:9f:05:3c:eb:ca:b6:b4:db:f6:82:b1:22:a6:0d:0e:
14:88:62:b2:71:43:ad:06:17:2d:b6:ec:e6:6f:3d:cb:82:53:
d8:a6:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:02 2025 by rpki-client