Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: 5Oxi1m4BYvO+NAWKakoWyXKkcebAeeo+bHSxCOTs2Cw=
Subject key identifier: 49:54:32:C3:51:75:9F:DE:68:46:FE:CF:50:97:97:D5:5A:91:8D:BB
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019A522C1461DAB70B7873AD69A4AF32C74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 04:00:11 +0000
Manifest this update: Wed 05 Nov 2025 04:00:11 +0000
Manifest next update: Thu 06 Nov 2025 04:00:11 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: KmHXZMRbooxHAziODzddun8c1O0GO045BFCrMOWxr3c=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:14:61:da:b7:0b:78:73:ad:69:a4:af:32:c7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Nov 5 04:00:11 2025 GMT
Not After : Nov 6 04:00:11 2025 GMT
Subject: CN=495432c351759fde6846fecf509797d55a918dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:56:08:db:9a:be:db:e3:db:35:79:b5:0c:
4e:49:5b:01:5f:2e:01:f2:de:88:ef:3d:ec:ff:26:
99:6e:cb:8d:92:9c:1e:51:cc:a2:69:43:07:04:07:
ed:49:6b:9a:b4:0f:32:0e:49:9b:db:cc:e1:6a:98:
8e:fa:8a:07:a2:52:31:4f:d6:31:c8:89:1e:15:82:
98:21:f0:b8:1e:b4:03:1d:7c:8a:bf:0e:82:46:69:
73:71:3f:71:95:a0:70:ee:98:a0:da:ee:b4:fd:b8:
b1:f3:93:59:02:80:a0:53:13:84:16:1f:6e:e8:ff:
5f:75:1b:b5:e5:18:3d:19:13:70:27:b1:43:10:84:
2b:e3:d9:97:88:83:af:c5:92:c6:dc:52:8f:f5:51:
05:80:97:37:7f:98:9b:66:db:b7:79:b3:5e:2c:e5:
e4:27:2e:7c:4c:b5:32:25:9a:25:92:17:44:75:7c:
b9:5d:3f:fa:b6:6f:4a:34:aa:60:1c:41:62:85:01:
c0:ed:20:da:d8:64:12:19:78:55:89:33:7b:55:72:
74:64:e6:8c:7a:81:7c:1c:db:a3:08:bd:8b:ef:ef:
5f:cc:b5:35:24:fb:be:ce:e4:63:e2:48:c1:ef:34:
47:fc:f1:8f:5e:f8:8e:cb:ad:f9:a4:09:5f:e0:c1:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:32:C3:51:75:9F:DE:68:46:FE:CF:50:97:97:D5:5A:91:8D:BB
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9b:56:85:bf:d0:f6:4c:17:b4:fe:27:21:06:af:41:56:22:
32:58:df:ae:44:db:4d:af:d8:64:ec:bd:4b:54:9d:41:f2:21:
f4:0d:24:58:68:88:64:a2:c6:ba:9a:73:72:7b:ff:3f:40:ac:
15:91:bb:87:d2:da:1f:12:ef:80:3a:89:90:96:e0:4a:f3:f5:
b1:14:c3:6f:d8:5e:24:d9:f6:af:fc:f4:42:2f:c5:5d:6d:f2:
e5:2f:bb:d6:34:f0:bf:a4:4e:9b:ba:92:ee:bd:48:d0:da:78:
a7:33:68:7c:93:7a:05:a3:4c:9c:b0:14:af:0d:55:8c:01:02:
3e:00:ea:6b:d6:f1:e9:f9:49:2d:8b:42:b9:97:48:47:a3:c9:
dc:f6:6d:e4:69:9c:09:86:1b:11:5e:4b:35:d2:2b:af:a4:07:
22:3f:79:5c:13:11:0c:ca:64:f5:d3:ca:85:8a:70:5b:0b:01:
11:67:48:39:ed:f4:1f:12:10:b2:8e:09:30:58:e1:12:98:ca:
a9:81:16:e7:e8:ad:30:83:2d:83:11:55:e3:ac:0d:7d:bf:e4:
b5:8e:89:a1:57:71:6e:d4:de:80:4a:f3:06:fd:22:b8:d6:63:
60:0d:28:eb:b5:03:aa:95:70:6a:78:a3:5e:60:95:d4:a7:ee:
e7:49:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:15 2025 by rpki-client