Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
File: YXe1tkvknoGZlf7n8-NiG9ymrow.mft (raw, json)
Hash identifier: RMgNTHP8dZKiH+ijpsC+6S7G49nUDq7mQsp7Mdud2W0=
Subject key identifier: 3E:B9:89:E0:7E:43:1E:4D:50:66:B2:1B:09:7B:88:C5:88:01:2F:0F
Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
Certificate issuer: /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Certificate serial: 019A5074DB26AED80042142D1F8FFF3A6F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:26 +0000
Manifest this update: Tue 04 Nov 2025 20:00:26 +0000
Manifest next update: Wed 05 Nov 2025 20:00:26 +0000
Files and hashes: 1: YXe1tkvknoGZlf7n8-NiG9ymrow.crl (hash: UCes0joW+l2G9/dhBtthwlu0TcvRqk+SXfv7cuOn3h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:db:26:ae:d8:00:42:14:2d:1f:8f:ff:3a:6f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Validity
Not Before: Nov 4 20:00:26 2025 GMT
Not After : Nov 5 20:00:26 2025 GMT
Subject: CN=3eb989e07e431e4d5066b21b097b88c588012f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:e7:26:f4:f2:b2:d2:0a:0b:fa:49:f7:23:
be:40:0a:42:1a:d8:02:eb:53:56:55:c7:a9:9c:28:
f7:e3:4e:6c:dc:11:f6:4f:2f:68:9b:af:a0:bf:67:
b1:57:b4:38:2d:da:52:7a:2b:bc:c2:42:c2:48:6a:
df:d6:13:3e:df:4c:46:05:bd:c8:3d:d1:a0:6e:cf:
62:54:74:7d:75:8b:eb:99:4d:96:cb:73:42:13:8b:
72:b2:a7:ea:4d:65:55:dc:48:77:5a:50:b5:51:1b:
cf:b3:8a:30:ef:73:d0:d0:e0:d3:42:5b:62:58:24:
e6:99:d1:41:ee:c7:60:48:fc:99:c7:70:b2:f1:fc:
98:ad:47:2a:cc:99:91:8c:69:fd:7d:65:4a:da:69:
f4:f4:d2:44:43:ca:37:20:44:f0:12:62:cc:dc:fa:
b4:e0:22:65:19:5a:5e:b3:42:ff:12:fa:6a:b3:38:
a2:ea:7f:4e:e5:2a:fe:2e:a8:aa:de:a9:fe:e1:f9:
18:04:76:91:e3:50:67:9b:50:62:fd:bb:78:c2:96:
e9:25:ff:f8:ee:14:9f:41:81:b5:58:2a:20:5a:ab:
a3:c1:a5:03:87:c9:06:ca:76:fb:ff:45:a8:a8:cc:
39:4c:0a:dd:08:2a:df:8c:a4:97:b7:57:ee:e7:30:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B9:89:E0:7E:43:1E:4D:50:66:B2:1B:09:7B:88:C5:88:01:2F:0F
X509v3 Authority Key Identifier:
keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6f:b7:56:29:62:d7:a0:d8:22:43:a7:b8:65:ee:48:a0:c4:
00:9b:a5:81:28:15:a2:7d:10:68:a1:60:0c:4a:09:0e:be:24:
76:77:b2:68:bb:50:c6:25:26:e6:44:a5:91:53:33:b0:5c:e3:
99:41:b4:dd:db:cf:24:0a:c0:08:29:6c:4a:04:1e:da:ef:b8:
bb:4c:dc:ec:16:c2:6d:c9:e6:0c:05:2d:0c:7e:60:fa:c5:27:
64:2d:54:a9:66:1e:6f:d8:c1:86:4f:99:dd:bc:ef:0e:e5:eb:
c3:6c:5e:49:a5:17:86:3a:85:22:08:c7:99:b1:e8:99:8f:44:
1e:63:dd:2f:51:34:06:3d:4b:90:e5:1a:ce:37:0f:16:7b:f4:
b5:8c:87:04:0e:d0:4c:83:0e:53:74:2c:85:9f:52:5d:cf:17:
e5:c5:fb:32:ac:78:38:34:ee:82:53:57:76:3a:8b:58:8e:da:
ff:ed:f2:9d:2f:1a:d2:0c:41:19:c0:67:fa:21:99:77:85:01:
3c:7d:95:d0:e3:b2:a9:f6:7e:0e:7e:05:f0:39:2b:f3:74:82:
75:65:d5:d1:4c:d6:f5:60:b2:d6:2b:7f:b0:71:47:c8:da:0f:
38:7b:07:5a:4e:d1:62:9c:3e:bc:d1:af:0b:df:a2:65:19:7e:
ad:07:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:57 2025 by rpki-client