Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: cX2uMysl+DYv2tLMIKGc43rInu156IQGVJN+y66ky98=
Subject key identifier: 42:19:22:2E:6E:E5:4F:60:94:92:74:D0:1E:D2:63:99:69:86:54:8A
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019A503DAB44CD93C6CCDA88406708D0C66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:10 +0000
Manifest this update: Tue 04 Nov 2025 19:00:10 +0000
Manifest next update: Wed 05 Nov 2025 19:00:10 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: 56TFuYOpU8pmyASY7354Myy4qj4oFaZ4+P41S8beruw=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ab:44:cd:93:c6:cc:da:88:40:67:08:d0:c6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Nov 4 19:00:10 2025 GMT
Not After : Nov 5 19:00:10 2025 GMT
Subject: CN=4219222e6ee54f60949274d01ed263996986548a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:bf:73:9b:a3:bb:ef:71:05:17:90:fc:77:
8b:88:7d:9d:ef:e4:93:0e:6d:c4:94:03:1d:3d:58:
43:b2:6c:3f:8c:de:cd:ba:29:9a:49:ab:c1:fa:82:
91:87:1d:9a:2d:4e:79:5c:c9:92:c3:70:6e:3d:b5:
db:44:80:3b:c2:c1:9e:ba:02:3a:f5:31:4e:7b:8c:
ba:d1:b4:d8:d1:bb:5b:1f:57:a3:bf:0f:c1:f9:1b:
61:b7:5a:80:e9:fc:42:58:58:f5:1f:6c:10:e3:43:
13:da:8b:3f:07:3e:4f:89:1b:8e:e8:89:bd:05:68:
89:55:42:3a:1b:4e:1e:7f:51:b7:26:96:b3:c4:f2:
78:37:af:f4:49:d2:d4:f3:39:25:1d:e6:0f:bd:bb:
e2:3b:97:52:e4:e3:9f:c7:36:54:4f:1f:fe:f7:df:
90:50:02:f2:16:3e:d5:29:b8:9b:dd:ca:e9:b2:b3:
32:8a:47:5b:cb:d5:74:ad:cc:e8:e8:dc:bc:a0:bb:
04:18:a7:f3:88:0f:55:dd:b1:b1:9e:62:05:41:9d:
f0:91:20:30:e2:9e:c3:d6:b2:c1:25:24:99:45:46:
ee:75:f2:5f:7b:6a:2e:cc:38:d5:39:ca:0d:85:a2:
25:c7:66:6b:97:bf:6a:16:42:17:54:dd:78:61:ac:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:19:22:2E:6E:E5:4F:60:94:92:74:D0:1E:D2:63:99:69:86:54:8A
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a7:54:61:9c:6e:a0:38:4e:79:2e:81:1d:bc:09:43:37:60:
90:0d:1b:72:b4:ad:bb:d4:12:8e:d6:ee:46:d8:1f:97:1f:6d:
06:df:82:7b:88:57:0a:3b:ca:ae:82:4d:5c:4e:b8:ed:dd:d9:
24:35:43:31:25:26:c6:db:76:30:0c:b6:b0:87:f7:cb:c0:88:
66:14:ac:d9:16:5a:7b:f1:b0:af:af:72:34:ca:28:40:9c:37:
aa:de:90:a0:0a:9b:a8:9b:3d:f8:b2:d7:4a:cf:17:d4:38:20:
0d:ae:43:17:43:ee:23:bb:e9:4a:72:05:e8:63:ef:8f:5e:ca:
ac:cf:71:5d:8f:7e:7e:f1:75:26:3d:da:25:01:d9:8c:21:7c:
33:4a:4c:b2:bf:3f:83:59:0b:9b:a5:19:4c:e1:06:bf:04:1b:
83:55:3f:bd:35:b7:67:97:8e:e7:a2:ba:61:7f:5c:19:75:2d:
a9:5a:c7:c0:75:81:4b:10:5a:f9:5d:5b:23:56:39:4b:19:75:
11:b9:44:39:59:6c:af:b1:ac:b0:6e:3b:ba:71:a2:15:20:5c:
33:df:aa:d3:e0:c9:13:8d:c5:9e:52:ff:97:1e:4d:74:ea:d9:
4c:c9:78:ad:44:c7:e8:6f:cb:aa:14:d6:d1:f5:8d:df:5a:28:
ee:b7:c3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:20:06 2025 by rpki-client