Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: ppVuTX6B9zhgG+OM8rp5rP8GAu+x+QKq0do2P3WVZ7Q=
Subject key identifier: 20:68:94:15:23:04:16:6F:13:D1:1B:2D:E1:72:76:8F:BB:6F:7F:72
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 019A4DE1F62A4CB5E7792F82FBB0CF6335AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: 7+07FS4QIGQibE7tuTMIYN6AJ19MEaLuMNFbh2kjPDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f6:2a:4c:b5:e7:79:2f:82:fb:b0:cf:63:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=206894152304166f13d11b2de172768fbb6f7f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:8e:37:01:9c:d1:ce:ee:c8:55:2b:3b:c0:
b3:85:d1:d1:d4:8a:d3:a8:f1:41:77:9d:66:a3:b4:
44:29:ab:17:29:6f:d5:b3:b8:91:7e:6c:e0:be:c0:
95:d2:2c:2a:78:2e:cb:d2:7b:f7:3d:49:4e:11:54:
52:db:2c:0e:9a:17:c2:a7:fb:e1:03:59:40:74:dc:
61:b9:64:44:9a:06:5c:31:df:bd:0f:21:b0:17:5c:
05:c0:55:ec:f2:19:ca:33:2a:18:82:12:54:00:a9:
92:44:ba:77:3d:cc:79:b3:b2:cd:b6:70:5d:4a:15:
02:f7:8c:41:2e:51:ed:78:01:56:7b:cb:51:8f:34:
3c:69:88:58:77:f3:e7:3d:f1:30:63:47:b1:52:65:
b0:d8:97:61:cd:e6:ae:57:7b:59:57:a8:72:fc:3e:
bd:b6:f6:07:aa:68:10:3f:f5:c0:a6:87:a2:7f:73:
da:33:36:28:1e:48:2b:05:39:6f:db:83:1f:d0:fe:
ca:54:d6:5c:89:c7:c8:7c:fb:59:b8:1f:2b:6a:37:
6e:a2:aa:07:e7:ad:fe:ba:9a:ad:53:29:c9:d5:8a:
e5:db:68:38:ee:d1:56:81:c1:60:4e:19:70:fc:fb:
3a:c5:cb:ad:92:6c:2e:14:02:27:9b:4d:4e:09:05:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:68:94:15:23:04:16:6F:13:D1:1B:2D:E1:72:76:8F:BB:6F:7F:72
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:40:70:c3:a8:19:97:2f:f8:37:03:35:3b:41:d5:60:38:8f:
63:e4:dc:93:14:1e:02:fc:cc:f1:fc:4f:95:b4:89:95:dc:b7:
cf:42:17:84:3e:53:c2:86:6c:fe:e5:9d:65:09:1f:bc:f7:a8:
e5:81:d1:34:cb:4e:a4:85:0c:20:06:ca:0d:85:77:1d:65:15:
47:be:f3:b6:cb:5e:b4:c8:48:c9:40:25:01:35:50:82:a8:02:
93:4a:4e:85:fb:8f:8e:65:ba:a3:81:f2:c0:09:9c:4a:a8:00:
22:81:35:3e:76:47:de:70:62:40:4b:6c:5c:e5:3b:d0:db:ec:
e4:f7:d6:c1:4d:26:45:e5:1b:02:3d:3d:18:5b:be:4a:0b:67:
dd:75:23:0b:9e:9e:9a:2f:39:12:63:9f:6e:c4:bc:49:8e:81:
af:3f:b5:de:38:a8:ee:32:7d:a8:ba:25:7d:1a:87:a5:d5:58:
1a:71:7e:56:60:d3:ab:b8:2a:a6:91:04:24:eb:e5:69:36:8b:
ad:a3:12:3b:4f:05:12:27:d6:67:21:ff:7e:e3:76:c8:db:e0:
55:1f:20:86:3d:16:91:f3:52:93:36:b7:97:ce:c9:52:73:a3:
6e:62:34:83:ea:18:ea:0f:0b:61:15:00:d3:8a:33:77:ae:73:
86:e7:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:05 2025 by rpki-client