Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: +tI1i1OgVETz+m7oU8gDcuMEmFVxmB6tl05wkO0rsrc=
Subject key identifier: 7E:BB:25:BA:0A:A6:37:3A:04:A6:72:91:D7:AD:01:5A:E6:44:50:D8
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019A52D28963B674BF958DC8919E5B6D3187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:02:00 +0000
Manifest this update: Wed 05 Nov 2025 07:02:00 +0000
Manifest next update: Thu 06 Nov 2025 07:02:00 +0000
Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=)
2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: 6KZIRpQY887BqQlcVrVkcS7hCZk9vsU6GpAnKBNB8e0=)
3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:89:63:b6:74:bf:95:8d:c8:91:9e:5b:6d:31:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Nov 5 07:02:00 2025 GMT
Not After : Nov 6 07:02:00 2025 GMT
Subject: CN=7ebb25ba0aa6373a04a67291d7ad015ae64450d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:de:c7:cd:d1:62:3b:bf:f5:ed:ac:b5:7b:
97:ff:e0:67:ac:be:61:51:34:4f:21:c2:77:25:d9:
7d:36:6b:6b:aa:62:54:e4:6d:17:b6:ac:16:72:9e:
71:36:d8:cf:2d:c2:27:67:14:99:b6:ca:c3:c1:5c:
a2:b7:af:b6:c1:7b:32:37:7f:9b:a6:37:97:11:a2:
de:58:f5:cd:73:5b:30:54:4a:86:63:fa:0b:5a:62:
3a:51:87:b7:cf:a7:5b:89:73:23:27:aa:0f:c1:b3:
09:c4:db:db:51:de:dd:2e:cf:47:33:92:b4:99:09:
aa:b3:4d:3a:53:3d:36:0a:1c:ed:41:d6:82:54:ad:
63:61:07:6b:fe:35:71:1f:7d:96:76:cd:82:a8:fc:
06:fa:39:c8:b6:39:36:61:ce:18:31:bd:5b:36:64:
f1:97:1c:ca:60:e3:a8:1e:28:4d:35:d9:be:41:c2:
7c:89:94:2f:1f:70:f6:13:aa:0b:fe:f0:bf:43:51:
41:47:3a:30:61:70:c5:37:cf:3e:05:b1:d5:7b:4c:
df:a3:33:d7:74:17:27:85:67:03:99:60:ce:61:9e:
0f:f8:27:0c:c3:ac:6b:ad:db:dd:43:c3:4c:db:a4:
f8:a5:c2:d2:3a:7b:29:b2:cf:09:42:f9:f7:14:85:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BB:25:BA:0A:A6:37:3A:04:A6:72:91:D7:AD:01:5A:E6:44:50:D8
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fd:94:a9:d7:7a:92:cf:ca:01:09:8c:d0:b7:e5:05:3c:11:
4a:fc:13:aa:e2:af:4d:d4:10:bf:14:7d:9b:01:c6:c0:32:fc:
9f:92:06:7f:80:24:ad:68:62:0a:43:10:13:b2:80:83:4c:8e:
30:55:7b:22:0b:09:43:c7:e5:ec:a9:31:2a:3a:1c:21:19:68:
f3:78:1e:8f:dc:d9:13:aa:84:17:1f:4f:a5:58:e5:bf:5c:c0:
94:eb:4e:c6:51:f5:d6:03:e1:21:96:4e:9f:77:59:23:b2:e6:
a0:be:29:03:cf:84:11:a5:c2:41:d1:b9:67:49:a4:78:37:08:
4f:b1:b7:ce:99:7d:e1:cf:e1:f3:f9:43:60:9e:78:a8:cc:b7:
8b:60:03:e3:d0:ee:51:be:b5:6d:06:be:86:d0:92:e6:32:18:
55:bb:c5:7f:b2:cb:6d:02:10:c9:ba:13:7f:95:4f:b3:d5:e3:
f6:89:c1:20:b7:37:83:2d:0a:dd:eb:28:51:71:20:9e:41:d8:
e1:40:67:3a:2c:bc:2e:3c:ed:59:36:49:0e:73:d9:35:4a:ab:
49:bc:92:f3:de:df:2c:0a:c5:c6:87:20:df:1a:44:95:eb:35:
65:4f:80:88:40:d0:4b:e8:6e:c2:f1:65:8c:26:49:60:f0:68:
5c:99:99:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0oljtnS/lY3IkZ5bbTGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm
ZjQ5YjQwHhcNMjUxMTA1MDcwMjAwWhcNMjUxMTA2MDcwMjAwWjAzMTEwLwYDVQQD
Eyg3ZWJiMjViYTBhYTYzNzNhMDRhNjcyOTFkN2FkMDE1YWU2NDQ1MGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKXex83RYju/9e2stXuX/+BnrL5h
UTRPIcJ3Jdl9NmtrqmJU5G0XtqwWcp5xNtjPLcInZxSZtsrDwVyit6+2wXsyN3+b
pjeXEaLeWPXNc1swVEqGY/oLWmI6UYe3z6dbiXMjJ6oPwbMJxNvbUd7dLs9HM5K0
mQmqs006Uz02ChztQdaCVK1jYQdr/jVxH32Wds2CqPwG+jnItjk2Yc4YMb1bNmTx
lxzKYOOoHihNNdm+QcJ8iZQvH3D2E6oL/vC/Q1FBRzowYXDFN88+BbHVe0zfozPX
dBcnhWcDmWDOYZ4P+CcMw6xrrdvdQ8NM26T4pcLSOnspss8JQvn3FIUnCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH67JboKpjc6BKZykdetAVrmRFDYMB8GA1UdIwQY
MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It
MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk
LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv2Uqdd6
ks/KAQmM0LflBTwRSvwTquKvTdQQvxR9mwHGwDL8n5IGf4AkrWhiCkMQE7KAg0yO
MFV7IgsJQ8fl7KkxKjocIRlo83gej9zZE6qEFx9PpVjlv1zAlOtOxlH11gPhIZZO
n3dZI7LmoL4pA8+EEaXCQdG5Z0mkeDcIT7G3zpl94c/h8/lDYJ54qMy3i2AD49Du
Ub61bQa+htCS5jIYVbvFf7LLbQIQyboTf5VPs9Xj9onBILc3gy0K3esoUXEgnkHY
4UBnOiy8LjztWTZJDnPZNUqrSbyS897fLArFxocg3xpEles1ZU+AiEDQS+huwvFl
jCZJYPBoXJmZEA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:43 2025 by rpki-client