Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: 6wrPDxFeguigspUYaLYYsGPPjkZT3tALjTGutMgSELo=
Subject key identifier: 4B:37:03:1F:E0:89:FB:93:CD:24:22:B6:1E:2B:1A:FD:4E:DF:3D:6E
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 019A4DAAA0A3EC1E7663AC54BFE8E682E155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 16F5
Signing time: Tue 04 Nov 2025 07:00:19 +0000
Manifest this update: Tue 04 Nov 2025 07:00:19 +0000
Manifest next update: Wed 05 Nov 2025 07:00:19 +0000
Files and hashes: 1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: AoOAWV67FU5/6fzIkyV3CZAtZ8PdfWSHXiQeE4cTgFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a0:a3:ec:1e:76:63:ac:54:bf:e8:e6:82:e1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Nov 4 07:00:19 2025 GMT
Not After : Nov 5 07:00:19 2025 GMT
Subject: CN=4b37031fe089fb93cd2422b61e2b1afd4edf3d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:e2:ed:74:0a:06:97:68:69:00:8e:89:7f:
51:fc:b2:a8:ae:27:6d:fe:31:8d:72:d7:20:e2:66:
14:7c:3d:d4:c3:43:1d:59:58:b2:95:19:47:d1:a1:
c5:3c:16:3e:ec:15:cb:6f:e9:99:19:55:0a:e1:16:
fd:0b:68:91:f5:63:52:33:69:d2:a3:20:ea:a9:7f:
24:5e:d7:8a:17:7e:12:c5:ed:68:21:d9:78:93:fc:
2c:4a:39:6c:93:98:ac:e9:fb:9f:c3:d7:af:7c:37:
2c:fa:a5:54:37:04:b7:d2:bf:fb:99:3e:95:56:92:
45:3c:75:95:b5:4b:ac:e7:18:21:1d:68:71:32:b0:
51:2e:f7:03:31:6c:bc:45:97:3c:66:c3:c4:ac:7a:
41:b2:a6:fc:db:95:83:5e:82:8d:69:d4:22:fe:6e:
04:1c:c5:41:c5:35:2a:a3:31:3f:ee:e1:a0:43:fa:
06:74:e7:23:3c:0e:b3:ff:6b:2b:86:8f:4b:fc:44:
7d:d1:81:ed:1e:f1:a0:b7:06:69:34:20:26:1b:11:
2c:81:6e:3b:43:36:79:d1:7d:89:7a:ef:64:46:32:
01:7e:a6:56:f8:9d:dd:9a:5e:a6:0d:31:dd:ad:99:
25:ff:48:d6:55:fe:eb:90:a9:1f:73:21:d2:65:59:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:37:03:1F:E0:89:FB:93:CD:24:22:B6:1E:2B:1A:FD:4E:DF:3D:6E
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d3:ca:d5:d0:fc:ea:7a:0b:59:55:72:ea:0c:82:55:98:ae:
fc:6f:53:b2:50:4d:d8:bd:fa:e1:d8:2f:33:53:f7:84:55:ea:
14:cd:fd:49:a6:62:07:fb:18:42:1f:14:c9:bc:cb:d0:af:64:
7a:e7:9d:91:37:18:da:c4:97:65:06:58:e5:a7:1b:40:29:6a:
27:db:23:fd:37:fd:68:24:74:c4:b9:cb:b6:c0:49:f5:5e:68:
5c:37:40:20:80:29:97:a7:06:07:24:f0:f5:78:d8:9a:3a:7b:
13:e5:fb:18:2e:dc:90:49:8c:b4:74:2f:6f:60:5d:9c:e5:05:
d0:de:27:56:47:b0:04:35:62:6c:04:90:92:a7:30:2f:ff:3e:
e0:0e:79:87:2d:c2:8e:6d:44:d5:c7:73:43:4f:cd:8c:90:33:
6d:87:a6:d5:be:15:20:bf:41:5d:79:a8:eb:0e:e2:0e:02:94:
26:4b:91:a7:a1:9b:da:1b:d7:a3:2e:cc:ce:a5:62:1d:4e:d7:
b8:de:99:2f:e6:0b:96:7a:5b:d7:3a:09:20:98:23:b0:cb:5d:
27:22:8d:51:50:fd:19:b7:56:f9:cf:15:62:c5:4e:9b:39:06:
da:e0:86:a2:c1:c7:ee:11:8c:6b:59:6c:ea:8e:72:b5:11:31:
26:51:28:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:25 2025 by rpki-client