Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: eBp/xw7g0X8AuDvyNH7qHrelCNcb2cqf3r1RY15zpCk=
Subject key identifier: 6F:B9:33:8A:47:65:38:A1:71:62:20:BE:C1:27:7E:DB:36:41:48:6F
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 019A4E86D4422689393C168BF926B03B3784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:50 +0000
Manifest this update: Tue 04 Nov 2025 11:00:50 +0000
Manifest next update: Wed 05 Nov 2025 11:00:50 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: iY4QZHJp0nZhYLi0Rl1htJFK+0w0QuYoDzOU8fV05r4=)
2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:d4:42:26:89:39:3c:16:8b:f9:26:b0:3b:37:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Nov 4 11:00:50 2025 GMT
Not After : Nov 5 11:00:50 2025 GMT
Subject: CN=6fb9338a476538a1716220bec1277edb3641486f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:58:56:4b:5a:d4:2b:49:5f:5d:d0:cf:2e:
46:25:11:cb:b0:c9:17:8a:05:82:71:e4:02:05:0b:
bc:bd:ae:c2:c7:4e:27:6f:6f:04:c2:18:dd:7a:0c:
a3:d0:69:a4:59:cd:ad:29:d8:45:34:b7:17:9b:06:
dc:3b:5e:80:84:61:56:a2:f7:a8:53:1f:ca:a8:2a:
62:6a:50:3c:69:64:e0:ff:32:44:3a:d8:b4:53:9c:
d7:7e:a9:e7:14:80:f2:92:31:5d:70:43:9a:c4:0a:
34:b0:ea:ad:37:4b:0c:1c:3b:49:9d:9d:f7:d1:8d:
73:6f:6d:77:d4:6e:94:7e:d9:78:43:ae:f2:7d:c9:
43:d4:09:a7:4a:d1:5e:2c:4b:3c:17:57:25:ab:60:
19:4f:81:7f:a0:48:dc:52:22:55:c1:a9:37:00:9b:
af:d8:eb:0c:12:37:ad:db:52:5a:8f:33:07:34:0a:
ef:47:1e:36:02:78:0c:68:58:34:8a:d6:a9:c3:8b:
93:c8:11:b1:d3:12:33:87:35:42:db:89:6d:14:9b:
34:81:e7:41:3b:40:73:66:1d:ce:85:f1:62:b7:1a:
9d:f6:7f:7c:06:6f:43:eb:16:7e:18:58:ad:7c:bc:
c7:40:2e:21:87:34:41:4b:83:1c:f2:12:05:d9:5e:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B9:33:8A:47:65:38:A1:71:62:20:BE:C1:27:7E:DB:36:41:48:6F
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0d:b3:8b:a0:86:64:27:f9:ed:a8:aa:55:0e:72:e2:84:67:
35:2d:c9:50:b0:35:b5:77:eb:fd:be:8f:eb:3e:ef:26:31:2d:
d1:5b:43:18:7c:40:cb:56:df:f0:1c:68:04:93:7e:44:f1:fa:
7f:03:05:cd:ee:20:62:f9:d1:e5:2a:6e:a3:8a:c0:3a:b3:ca:
f4:db:5d:c9:2c:1a:37:ca:09:42:bb:c3:60:56:f3:1e:dc:b9:
85:5b:1e:da:2b:77:67:f2:8d:1b:eb:37:12:84:09:96:78:07:
23:e5:fe:d5:62:10:9c:e4:7b:98:28:67:e5:2f:5f:92:01:04:
d2:63:d0:ef:2c:3a:37:d3:f1:b2:c3:fa:b5:df:1b:3b:1a:8c:
f2:ab:0e:0d:39:cd:2e:0a:04:7f:99:66:b4:11:b2:3c:81:fd:
51:58:b1:ef:76:c4:9e:2e:be:1d:a0:a8:c8:d8:e5:7a:90:cd:
0d:c5:90:a6:9a:9a:e8:63:bd:4e:3b:c2:06:b1:30:1f:ef:3b:
73:8f:b3:bc:6c:25:70:f4:08:b8:cc:b7:03:96:ad:3a:a5:af:
bf:6c:3d:12:6b:c3:34:06:7a:1b:ee:16:a8:65:27:c5:db:52:
36:0e:ef:08:8f:82:81:8d:f7:87:7a:a3:36:f0:b9:11:64:cc:
69:2d:d9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:20 2025 by rpki-client