Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: vs4d4URM1XNsaE0ozVZBAkD+tlC4CfNe1InXndMCdoM=
Subject key identifier: 1A:6C:08:2C:BA:E0:A6:A8:5B:4F:CF:CF:7C:21:64:B8:B8:E8:96:96
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019A4F626BC72270DD5434AA4AC610CA365B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:41 +0000
Manifest this update: Tue 04 Nov 2025 15:00:41 +0000
Manifest next update: Wed 05 Nov 2025 15:00:41 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: 6718f+4QNeuSeo74vBuouyE99K/4X3DNwqmr40ZjloI=)
2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6b:c7:22:70:dd:54:34:aa:4a:c6:10:ca:36:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Nov 4 15:00:41 2025 GMT
Not After : Nov 5 15:00:41 2025 GMT
Subject: CN=1a6c082cbae0a6a85b4fcfcf7c2164b8b8e89696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:51:7c:94:f9:c9:2b:42:f4:92:dd:5d:c5:
1c:b7:4c:2f:62:56:1c:ba:81:5a:cd:6c:cd:a7:6f:
32:96:b6:c0:e3:36:ad:66:a3:18:2f:3a:4d:24:b1:
11:c2:57:c6:1d:c7:1a:6f:c3:eb:57:76:4f:14:fc:
b4:01:99:2e:c3:09:b1:27:d9:6a:f9:87:18:db:98:
88:7c:1f:7f:2c:e9:6a:7e:21:55:10:d4:88:da:41:
53:1a:2f:f9:65:05:43:cf:95:a3:a3:0b:fd:73:0b:
54:49:70:59:cc:d6:be:79:25:7d:a6:ae:a1:17:ef:
c2:b7:ef:d1:b9:5b:84:85:1b:4b:29:69:70:de:72:
61:91:a8:8f:22:36:56:66:c3:82:c9:19:69:ed:ca:
48:19:82:b9:39:24:9d:3d:03:ec:7c:c9:45:fd:0e:
91:7c:4d:03:e0:e0:83:48:87:8e:ce:da:76:f6:bb:
54:d5:61:06:88:2f:61:81:7b:4b:ef:bb:17:7f:32:
cb:02:8c:49:8c:ab:a1:85:24:cc:84:66:10:68:dd:
09:29:c7:b0:a5:a9:6e:4f:22:fa:eb:da:50:f9:a4:
df:09:94:55:18:14:b4:78:a1:91:39:0e:e4:1b:6c:
fc:2f:21:d7:94:29:02:1d:9a:58:59:ea:10:29:83:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:08:2C:BA:E0:A6:A8:5B:4F:CF:CF:7C:21:64:B8:B8:E8:96:96
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9a:c5:79:55:a9:21:d6:5b:6e:f5:43:9c:a7:5f:66:ab:97:
9a:06:e0:45:48:1b:8f:72:ca:19:b9:e4:c6:83:c2:bd:86:d4:
17:fb:50:a4:0f:59:90:e6:a3:c6:0b:81:d4:32:28:d8:3e:fe:
b0:cd:58:9b:f9:dd:0b:a1:ab:e1:d5:39:b5:28:ee:8a:44:8f:
24:05:3a:98:6a:86:9e:ff:0a:10:2b:d5:1f:52:20:bc:a3:67:
4e:ad:03:05:b6:c9:35:73:fa:c6:af:87:d1:8d:0a:43:98:ca:
f3:41:05:4c:7c:69:14:b8:65:ae:ba:a9:91:11:c8:38:e4:ec:
e1:77:17:24:f7:38:d8:f9:5a:59:96:68:25:6e:a3:89:df:59:
a4:b1:4f:68:27:8e:f5:2b:87:41:02:87:e5:5d:7f:c7:04:93:
de:4a:b6:09:c6:2a:d9:06:73:fd:45:a3:fe:ea:f1:24:cb:b8:
c5:66:42:f2:3f:50:bf:b5:14:a6:33:6a:6d:2f:52:18:97:60:
f5:82:ef:9c:7f:37:1b:74:e3:d5:40:01:7e:a9:b9:b9:65:09:
18:60:07:94:0c:7d:07:83:df:d6:b9:f8:7d:5a:7d:27:a4:a4:
1b:a6:53:00:48:26:33:93:0e:07:cd:f2:fb:d6:8e:80:19:08:
d3:cf:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:04:25 2025 by rpki-client