Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: 8VP3RB1yydj0K8ni1vcFzP+DIvxuQ54FDvcbQ6mzS+w=
Subject key identifier: 78:AE:66:7C:A7:96:C4:4F:6B:3D:C5:E5:1A:A0:8E:FD:7F:A7:60:8D
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 019A503E124D222D798B28A6502D7743CD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 1174
Signing time: Tue 04 Nov 2025 19:00:36 +0000
Manifest this update: Tue 04 Nov 2025 19:00:36 +0000
Manifest next update: Wed 05 Nov 2025 19:00:36 +0000
Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: IkE+pFV0FumHhKSLTPvN5nYxmPKBRIN7t3eiMorDXLU=)
2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=)
3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:12:4d:22:2d:79:8b:28:a6:50:2d:77:43:cd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Nov 4 19:00:36 2025 GMT
Not After : Nov 5 19:00:36 2025 GMT
Subject: CN=78ae667ca796c44f6b3dc5e51aa08efd7fa7608d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:7e:a7:a3:e4:68:d7:f0:02:2d:74:3f:b5:
32:ac:e5:17:10:76:7f:01:b5:48:45:19:c0:ab:42:
c2:b1:5d:77:15:0e:f0:b9:e6:2a:3d:d4:37:3e:76:
9b:ad:e0:2b:87:97:4b:ac:07:33:90:d1:d7:32:61:
35:86:ee:df:d1:88:69:07:c9:e0:b1:54:79:25:72:
2f:f4:bf:9c:fa:6a:85:0b:61:d9:73:66:62:ad:07:
52:a1:44:e8:3c:97:28:17:6b:3b:63:e1:29:f6:1a:
ed:b8:86:9f:f6:41:dd:88:75:be:b6:41:77:20:b8:
2f:b0:84:b4:52:e8:cf:d6:2b:63:65:40:d5:3f:cc:
0d:7b:85:0f:e7:0d:82:16:2a:c1:6d:6f:b8:85:f0:
ff:06:df:e0:ed:d7:75:f2:e7:55:8b:02:18:81:7a:
b5:6a:4f:2a:26:20:5b:d9:38:2c:6b:4d:25:49:d5:
65:dc:2c:15:55:d3:3d:d2:9c:5f:ea:75:7d:c6:92:
a6:cf:f0:aa:c5:42:31:18:a0:9c:83:db:3d:d1:28:
04:b5:4e:c2:94:f5:a4:62:c7:57:1a:21:10:ee:72:
32:0c:c0:06:d2:43:7d:dc:b2:5d:2a:90:47:43:c7:
92:ce:a5:ed:3b:8f:ab:d3:30:77:93:35:fe:f5:46:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AE:66:7C:A7:96:C4:4F:6B:3D:C5:E5:1A:A0:8E:FD:7F:A7:60:8D
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2d:ad:f1:d5:95:f4:60:1c:8c:fd:7b:09:b9:41:84:75:57:
0b:bc:9a:00:5e:bd:9a:74:90:b2:44:f1:6d:80:d1:bf:75:4d:
5b:14:fe:51:24:2d:7b:f4:cb:0f:dc:97:d0:df:4a:e4:2d:11:
83:5d:6b:bb:c5:b4:91:5b:30:31:d1:d8:42:ed:ce:d3:35:e5:
ed:b6:40:c2:f4:b5:f5:1e:e7:d1:0d:3c:c1:0c:2a:04:d5:52:
23:6a:41:be:cf:ca:e8:76:fd:ad:0a:c5:59:ea:87:b2:a0:cf:
0b:8f:f1:75:e7:60:72:b9:c5:b1:c2:e0:60:88:89:16:77:57:
35:b2:5f:0f:7b:69:2f:9e:4a:68:cd:d4:f5:7e:58:98:bf:a4:
8d:db:28:30:21:50:3e:f8:9a:87:0f:c0:29:c7:2b:5c:43:31:
ed:98:ee:cd:86:45:83:cd:51:f2:c0:cf:e6:c3:28:c2:e1:7c:
4e:f6:f8:94:25:25:91:a1:54:4d:11:61:f8:ee:1e:f1:99:23:
a1:51:35:e2:54:46:63:a9:fe:3b:90:ac:38:96:9b:ed:b8:37:
8f:78:1e:c6:0e:a8:79:ce:3e:a3:1a:2c:08:4c:39:6d:cd:7c:
b6:48:dc:c3:f4:61:d5:b2:0e:b8:41:a8:f6:e9:96:6c:f6:b0:
72:ac:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:19:10 2025 by rpki-client