Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: xT0HAZMY7FPibZEYMNbi0b6UlODPYRoXhqob8mW28Aw=
Subject key identifier: 1C:01:1E:A8:89:36:EF:19:C0:10:A8:F9:AE:25:9C:D9:1D:E5:C0:4A
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 019A4EF5C1E7AC482F440C4D7372CCE0E8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 13:01:59 +0000
Manifest this update: Tue 04 Nov 2025 13:01:59 +0000
Manifest next update: Wed 05 Nov 2025 13:01:59 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: 3J4LiP7EvrgKzX9Hbj1t74wldPcN1yudsMAKj+n0T5Q=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c1:e7:ac:48:2f:44:0c:4d:73:72:cc:e0:e8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Nov 4 13:01:59 2025 GMT
Not After : Nov 5 13:01:59 2025 GMT
Subject: CN=1c011ea88936ef19c010a8f9ae259cd91de5c04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:00:91:e3:32:84:7a:ac:b9:bd:38:08:6b:
6f:e2:9e:b2:bb:56:7b:e3:7c:5a:91:b4:13:2c:af:
3d:8c:e8:d6:e7:c7:ab:f6:04:a7:e9:9b:9e:1e:4a:
0d:3d:01:3d:b5:44:6f:76:06:b2:63:80:61:0e:01:
3c:13:c3:0f:14:c5:b8:93:fd:5d:0a:e6:4e:0a:86:
75:dc:da:b8:e6:5f:f6:ee:ec:60:eb:87:6a:4b:51:
20:0a:71:31:b6:ee:4b:73:a1:43:74:34:98:c0:be:
cd:3a:61:d3:e0:c5:ad:36:f7:df:bd:fc:eb:ef:1e:
1f:7a:c4:65:c8:32:fc:5f:8f:00:90:46:e5:1b:5d:
50:4d:21:4a:45:7e:ff:1d:d8:29:54:b7:5d:2f:e0:
79:13:f8:3e:91:c4:18:a2:aa:e9:f7:b8:39:9d:ae:
56:e5:d2:7f:d2:9c:65:8d:33:21:ea:ca:c0:92:f1:
81:41:40:d4:b7:6f:26:14:ab:d3:1d:a7:bd:07:dd:
39:c7:34:93:88:f8:90:45:25:62:69:bf:ba:9e:2f:
49:6f:3e:ca:1c:5a:79:ac:49:e2:25:47:1b:ee:a3:
92:9e:cb:97:44:60:72:7d:00:af:f9:20:e9:b6:0b:
f1:f9:7b:d5:76:89:2b:29:dc:56:f2:15:43:f1:df:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:01:1E:A8:89:36:EF:19:C0:10:A8:F9:AE:25:9C:D9:1D:E5:C0:4A
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8f:66:13:5e:05:e7:97:8c:30:8e:9a:d8:d2:fe:a2:c5:16:
53:bb:f4:ed:b5:60:55:0d:eb:a2:db:d8:2b:cd:6b:aa:12:6a:
74:a5:bc:6c:3f:f7:fd:fd:39:24:40:d7:fd:25:9a:ee:a3:7a:
f8:8f:64:95:b0:6a:b0:9a:ad:87:8b:ba:9a:e6:e7:fe:e1:fe:
a2:61:41:43:e7:86:29:d5:0b:96:4f:e0:b4:11:85:c8:93:0b:
11:ee:8d:3a:a3:7e:6e:db:08:b0:f5:23:2c:bf:a1:58:b2:aa:
a0:29:ec:bd:df:ec:f2:15:56:41:49:97:c2:d9:d4:10:26:7f:
3b:af:1d:09:90:b8:36:4a:fa:9c:81:92:10:ec:49:01:fa:c0:
b4:74:2f:97:fe:c7:92:ac:a3:c7:2d:2c:85:6c:e2:d3:51:04:
60:21:0f:fb:e4:ae:54:8f:b5:8f:19:5b:b8:58:37:21:d4:b6:
17:a6:80:db:2a:aa:4a:74:64:04:56:f3:ca:94:5b:6b:64:3b:
b0:07:6e:3a:aa:73:33:2f:75:1e:51:b7:db:ce:24:54:61:39:
a2:71:84:30:d7:d2:05:64:d6:a8:ae:14:9d:7e:61:42:31:53:
58:c3:bf:a0:2a:86:0d:46:71:28:19:d8:ca:b2:23:8d:37:9e:
09:4e:2a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:59 2025 by rpki-client