Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: a4NT0M7ZmV9ESXHIvG3yQAgSrip6ugy5CHM7wLLiUTA=
Subject key identifier: 43:AE:6D:D5:53:1A:14:82:EA:FE:86:13:61:63:2A:F1:2F:FA:C4:FE
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 019A4F993EDB3C5BC1645C202E16A972CF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 141A
Signing time: Tue 04 Nov 2025 16:00:34 +0000
Manifest this update: Tue 04 Nov 2025 16:00:34 +0000
Manifest next update: Wed 05 Nov 2025 16:00:34 +0000
Files and hashes: 1: mj2SP2YUf8OOW3PWyfsSenlnbcQ.roa (hash: 7rYL22HIBA9YP5PrLL9E5bTyxJEJdAa2DC73cuHwaP4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: 0GRzvbzi9syI7wd+51ijSc7F5r2FUWp7SAus8k72odA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3e:db:3c:5b:c1:64:5c:20:2e:16:a9:72:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: Nov 4 16:00:34 2025 GMT
Not After : Nov 5 16:00:34 2025 GMT
Subject: CN=43ae6dd5531a1482eafe861361632af12ffac4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:ab:a0:08:81:88:1b:5f:11:e0:93:47:91:
ff:b6:97:c3:c0:6a:17:4a:83:b2:31:50:20:8b:78:
22:83:be:79:b7:42:7f:52:9b:b2:e5:d5:0f:c6:64:
ed:bb:5a:be:a9:c2:ef:ed:55:c6:9b:b7:fa:7c:db:
72:e4:83:24:e2:6e:3b:14:ac:a0:10:6b:8e:8a:31:
fe:49:4e:0d:4d:ad:75:d5:10:06:90:c7:0f:15:ac:
c8:55:2e:3d:bd:05:76:ac:7f:a4:cc:3c:be:3b:15:
37:76:be:98:41:8c:95:dd:43:03:d1:94:a7:f2:1c:
7b:40:df:f6:84:70:68:ad:a3:ab:88:5b:6d:cf:71:
d9:35:8e:13:70:1d:b9:fb:65:39:d2:dc:3f:89:c3:
a7:67:9f:06:d4:65:20:51:37:f8:58:4b:86:da:34:
36:49:0f:2f:4a:d6:47:6f:64:58:38:64:b4:27:e8:
e9:e6:ff:28:77:78:a7:5f:f9:cb:86:1b:96:8e:51:
b4:b7:ea:3d:f9:6c:14:f4:29:05:2f:ae:20:bf:44:
72:d3:cd:0c:48:7c:ac:d5:c0:bd:eb:56:a7:bc:5a:
f7:3e:35:22:c7:a9:47:0d:5c:ed:5a:97:3d:51:e3:
93:6e:3f:0f:04:63:94:d0:4e:17:9f:01:80:73:50:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:6D:D5:53:1A:14:82:EA:FE:86:13:61:63:2A:F1:2F:FA:C4:FE
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:40:e4:9e:8b:b0:db:1a:cd:b9:6b:94:0b:da:07:f8:d7:79:
cb:67:d7:f7:46:7b:de:16:72:74:63:e4:7e:7a:af:8e:b6:8a:
dc:d3:89:84:ff:6f:7f:28:a0:14:bf:28:5d:73:6c:64:d2:c1:
6a:e2:b9:1d:47:d9:64:59:68:3c:a8:ce:79:47:26:d4:1d:c4:
9f:98:74:18:ef:ee:4a:00:60:85:33:60:15:37:0f:22:0b:d2:
e3:c3:0b:5b:06:24:b6:59:59:00:14:da:9e:3a:91:80:59:98:
63:26:10:0c:ff:fa:29:7d:ef:37:37:4e:ae:f7:97:15:4c:42:
2d:89:ac:c3:2e:13:3c:0e:ba:94:5d:ec:15:5d:6e:94:ef:1e:
e5:6e:d8:ee:1b:27:7b:af:47:65:e7:1e:40:0a:b5:2a:42:c6:
1a:fc:7d:d2:41:09:42:64:6d:00:e0:ea:e7:50:57:0b:2d:a3:
d7:96:76:fb:da:7c:4f:03:b1:66:1c:27:94:55:ab:46:92:30:
b1:d2:24:e0:31:ee:e6:18:77:20:96:4d:82:f1:93:49:7f:df:
84:39:db:34:b5:b2:bb:1b:8b:c2:e7:0f:d2:c3:11:63:46:2c:
8b:7a:48:0a:63:03:3f:5a:bf:29:8a:a8:eb:58:c1:47:46:36:
0f:f2:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:54 2025 by rpki-client