Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: mEXcsGarmmeecW49FyCb3NobeIXLIYqcU89f6x292NE=
Subject key identifier: 30:A2:6D:3B:74:A5:52:E8:37:1F:33:B8:A4:34:16:03:9E:77:7F:F9
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 019A4DE1EFEECDF25F3606B1F987D9076BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:43 +0000
Manifest this update: Tue 04 Nov 2025 08:00:43 +0000
Manifest next update: Wed 05 Nov 2025 08:00:43 +0000
Files and hashes: 1: T_e8rESGCEo93LhSN21hTfmrTUk.roa (hash: atiJpHuf3SkNFx9qJY7AqgXkIGShTie6KIKrkLdR6O0=)
2: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: 0lDBRHL4cniSyFo/0m0gA+yn/r7Wmh6ip19kHUAuWHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ef:ee:cd:f2:5f:36:06:b1:f9:87:d9:07:6b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Nov 4 08:00:43 2025 GMT
Not After : Nov 5 08:00:43 2025 GMT
Subject: CN=30a26d3b74a552e8371f33b8a43416039e777ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:e5:99:9c:e5:1e:4e:39:b1:14:bc:3c:63:
33:d4:04:49:2f:7b:f2:9b:3b:b0:1b:ce:65:cf:01:
6d:4a:2c:51:24:f4:a2:5e:12:80:38:e1:0c:ce:fc:
95:22:fd:19:5d:83:33:ac:09:97:0d:ed:32:6d:12:
63:41:10:ce:15:4d:8e:c5:35:b5:bc:f2:96:46:a0:
06:e3:7f:94:8c:f9:72:a0:84:76:ff:ae:cf:15:ee:
8c:d5:97:7f:b1:2b:e0:88:6c:01:16:e1:f7:57:5b:
53:12:c6:86:a8:90:8e:74:20:77:bf:e0:aa:e6:85:
97:7e:b4:a4:6c:84:85:ef:7f:64:4e:e7:9e:ef:d1:
40:c9:42:4b:9c:7c:1d:93:1e:78:69:63:88:b2:ef:
a5:f5:d1:8d:2a:73:fa:25:55:1c:d6:cf:59:6e:28:
52:30:6e:1e:47:77:15:74:55:14:1f:8b:be:c2:36:
1c:c2:e2:0e:e8:09:2c:b1:c2:17:f0:5e:cf:f1:d0:
3d:07:f5:3f:89:e5:aa:bf:a0:b7:16:25:6b:9f:2a:
fe:90:ec:89:61:72:d6:a2:05:98:3f:de:b2:74:e8:
39:1e:4b:69:c6:17:b2:63:e4:bf:64:aa:52:2d:88:
6a:1e:94:f5:5c:02:7c:32:15:5a:0f:b1:8b:5a:f7:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:6D:3B:74:A5:52:E8:37:1F:33:B8:A4:34:16:03:9E:77:7F:F9
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ed:68:33:4e:c6:f9:0c:29:32:e5:50:f7:a0:b0:90:35:b4:
a6:9b:dc:91:73:85:30:7a:b9:a6:1f:80:3b:b1:95:87:71:ce:
43:9b:fc:08:b0:4a:7c:6f:a0:64:45:8a:6c:1c:84:72:fa:69:
f1:bb:c7:99:c8:bb:ec:2b:b2:a5:c1:be:64:0d:17:56:4c:89:
ce:77:ea:86:ba:3e:91:02:bc:44:1c:41:fc:9c:0b:00:c4:be:
ba:32:b5:73:f5:32:d1:7a:95:96:75:79:c1:72:a6:ed:b5:ad:
6c:b0:90:bf:c4:d9:43:b4:27:04:57:11:6c:40:80:ce:06:df:
b2:61:9a:59:61:c2:bb:53:9f:81:13:17:ca:4d:d4:a3:4d:9b:
bf:96:24:31:50:72:56:87:1a:3d:39:30:5a:3e:0c:ce:85:c8:
6b:a5:5c:20:e6:32:4d:2b:a0:a2:b8:dc:07:e0:c0:28:94:b8:
8f:ce:9c:14:35:11:46:12:9b:d5:46:91:63:ff:66:f2:85:a6:
ff:79:ab:80:87:d3:ad:24:6d:a0:f6:67:ff:36:01:8d:01:bf:
ef:d2:d8:a5:55:b7:14:0d:86:f5:5b:01:74:24:85:94:ea:b0:
7f:f7:52:7b:d7:89:ec:94:ac:8d:db:56:e6:44:14:5b:fc:42:
84:25:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:35 2025 by rpki-client