Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
File: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json)
Hash identifier: CuqNorDhc39hkumstkKdcW9FUb3qSGYypJhlpXviqSA=
Subject key identifier: 15:7F:10:59:D3:0D:CC:5C:9D:96:FB:03:BC:95:AC:61:08:95:94:8F
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 019A54C0FB188451775CC9F562D3A651C549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
Manifest number: 172E
Signing time: Wed 05 Nov 2025 16:02:04 +0000
Manifest this update: Wed 05 Nov 2025 16:02:04 +0000
Manifest next update: Thu 06 Nov 2025 16:02:04 +0000
Files and hashes: 1: 3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa (hash: REslMcuG9HXm7BovLzYOAaMUk36BGxFiDYcZuAUfor8=)
2: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: 9SunFCBQXDWvfip9/97cJSMvwuWMNZAZEau2AJ5iNso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:fb:18:84:51:77:5c:c9:f5:62:d3:a6:51:c5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Nov 5 16:02:04 2025 GMT
Not After : Nov 6 16:02:04 2025 GMT
Subject: CN=157f1059d30dcc5c9d96fb03bc95ac610895948f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:44:0a:3d:1d:1d:06:fb:ea:07:d5:34:79:
21:62:d0:e0:96:44:25:48:b7:7b:94:08:89:31:cb:
e7:25:3a:36:15:90:58:b3:5e:59:15:ba:f7:96:23:
44:d0:ce:0b:ad:b6:b6:3c:9b:3f:a1:9d:7a:ff:0f:
3f:98:05:fa:34:6b:d4:a3:8c:f4:57:42:40:bd:73:
49:f3:b7:ab:88:8e:77:c9:c1:18:ac:9c:27:07:f1:
ca:05:b9:19:18:7a:b2:0c:aa:31:68:41:95:b5:49:
44:49:da:9e:85:dd:d9:46:49:35:e5:23:e5:7c:c4:
64:02:02:ca:18:26:8e:56:7d:20:04:be:1a:8b:ae:
30:11:48:10:7d:f6:aa:c9:01:8c:f1:51:80:52:4d:
38:02:16:75:70:bf:49:76:db:da:bb:b9:13:3c:49:
2d:aa:b3:59:1c:ff:99:f7:ba:76:be:17:0d:d0:eb:
36:21:62:94:17:f8:bf:44:57:d6:4f:ae:b3:56:55:
e2:c5:05:b0:3b:17:90:61:f0:4b:16:96:c1:7d:bb:
72:2d:03:44:1b:b5:38:36:57:74:a2:b4:89:e6:ac:
e4:35:c8:3f:13:14:7a:61:e7:29:4f:be:0d:84:98:
9e:83:07:b4:8c:a9:64:a8:ad:dd:dd:97:00:eb:f5:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7F:10:59:D3:0D:CC:5C:9D:96:FB:03:BC:95:AC:61:08:95:94:8F
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e8:bc:c8:c6:18:c3:f2:90:65:db:9e:81:b4:8f:90:c0:2c:
55:63:54:97:85:c7:de:35:e1:f5:bc:84:6b:b0:14:41:f2:85:
ef:db:00:a6:7b:79:36:30:8e:54:12:28:37:c1:9b:d4:49:10:
58:15:26:40:65:03:4e:e9:b9:26:82:cc:e2:e9:b9:4a:33:9d:
53:0c:b6:20:2f:e7:f1:01:16:e2:e2:88:8b:a0:00:4f:c3:c6:
e3:8b:cf:e1:a1:14:2b:c8:c4:78:2e:c2:5d:ff:ab:42:6e:ea:
77:fb:25:d3:04:ea:b9:fa:e0:99:85:a9:06:b7:a2:7a:b0:32:
15:89:7e:aa:a9:20:a0:6f:01:93:7b:b4:c0:c7:44:57:5c:8e:
89:06:84:50:cc:a1:99:ce:35:97:24:ab:5a:d6:23:5a:19:61:
a5:4d:1c:f4:bf:14:63:15:17:87:fc:8c:13:62:16:01:2e:b1:
8c:0d:2a:29:0c:73:62:1e:2d:18:09:c8:fa:d3:38:2f:2b:41:
3e:0c:19:16:09:3d:35:5e:a7:70:75:74:b9:82:20:3f:5f:e0:
b2:b7:e8:0c:f2:6f:94:ef:a8:81:f7:b8:7a:05:46:62:2b:24:
54:16:9e:72:64:60:2a:5f:e1:e3:85:bb:b0:32:5e:81:d6:c7:
a7:84:cb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:37 2025 by rpki-client