Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: RL7i+TUOwaxY2fsWPjnnF+avMRJPd6OYGV+thmzQpT0=
Subject key identifier: B6:55:1B:DD:AE:F0:E1:9F:7A:FA:79:09:36:9D:18:4D:56:CD:1E:AE
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 019A4EF4000486D0213C38B2A5ADC3995AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:04 +0000
Manifest this update: Tue 04 Nov 2025 13:00:04 +0000
Manifest next update: Wed 05 Nov 2025 13:00:04 +0000
Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: NdQyw1hD3cG1pmtllD5DCQLf/TwqRArx4VJiku6feak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:00:04:86:d0:21:3c:38:b2:a5:ad:c3:99:5a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Nov 4 13:00:04 2025 GMT
Not After : Nov 5 13:00:04 2025 GMT
Subject: CN=b6551bddaef0e19f7afa7909369d184d56cd1eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:45:3e:75:44:37:93:9b:82:13:d8:72:0d:
71:43:d2:5e:12:21:51:08:2e:e7:52:fc:d6:36:87:
fc:2b:90:43:b5:af:21:4e:59:c9:b0:69:d5:83:1b:
a8:5f:c9:a4:17:bb:8e:41:aa:87:77:d0:78:ff:13:
c9:1e:6b:23:5b:37:06:cc:40:56:21:06:74:ab:81:
ae:3c:6c:0f:df:ee:67:24:bd:40:03:1f:58:6a:0c:
4e:0e:77:97:29:9e:bc:9a:aa:21:17:7a:44:71:4d:
21:92:56:6a:9a:ac:8d:43:b0:33:aa:07:18:04:9d:
1f:8b:3b:5f:08:ae:2a:ee:01:69:3a:44:9f:76:b2:
87:90:f8:54:1f:6a:a8:87:cc:58:7b:6f:85:53:e4:
04:34:62:c4:67:57:13:93:ee:c5:04:91:62:0a:4b:
db:17:03:6a:49:c6:fe:21:95:1f:d1:17:7d:9f:6c:
f1:da:34:0a:4a:1e:67:4c:44:fd:87:dc:fa:25:c1:
47:16:d2:11:a7:fa:40:91:0d:30:4b:94:a4:e5:88:
b5:d8:35:26:c9:34:80:c3:a3:c6:be:f3:b7:31:df:
f1:cb:d3:87:b7:20:d3:bd:49:85:ea:55:5c:37:22:
a4:a0:29:d7:6b:db:12:e8:3a:f1:60:68:9f:d0:ab:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:1B:DD:AE:F0:E1:9F:7A:FA:79:09:36:9D:18:4D:56:CD:1E:AE
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:30:8a:8d:10:b8:75:af:64:55:31:fc:90:61:86:47:9c:7b:
c3:85:e8:a0:8b:7f:b6:b0:03:ad:11:29:bb:59:42:a5:df:36:
dd:bc:ad:01:fc:9e:27:9c:91:87:69:65:c9:d1:f6:d3:bf:48:
55:bd:62:2c:20:6a:9b:ef:cc:cf:e0:14:d1:d7:ea:6d:8f:58:
55:1a:59:d4:67:38:39:cf:a2:8c:dd:b2:82:43:c8:4c:63:e1:
77:a6:e6:ac:fc:bb:3d:ba:af:ef:a4:c7:0e:95:24:47:00:3c:
48:be:e9:20:69:e1:a2:3d:81:1d:35:14:12:df:20:3f:1a:53:
0a:96:b2:dd:52:cd:2e:9e:a3:49:35:c7:3a:b6:5f:56:c9:c9:
64:34:1d:02:8f:8d:a4:d4:a5:c7:10:a4:49:a9:d4:c9:08:cb:
3b:ef:b6:00:71:a2:a3:f1:44:38:e7:ec:c3:c6:58:57:84:c5:
fb:f2:ca:fb:79:ae:f3:69:95:4d:02:21:2c:df:34:5a:57:6e:
4c:4e:01:81:d1:ab:b7:f8:2c:9c:74:84:88:8b:f0:0e:17:d9:
41:c8:22:88:65:53:c5:f8:24:54:8a:fa:41:f6:bf:ac:c2:39:
c7:5b:c1:42:89:af:6b:7a:8d:5b:19:b5:ac:58:c7:68:b5:4c:
e5:f2:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:01 2025 by rpki-client