Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: pNRn8lKnSE5PwNY1XMkbWqHM1kNmufn2jFYadd/LyLo=
Subject key identifier: F3:B2:81:F6:F1:DF:48:97:1F:6C:4A:A0:9A:47:90:64:35:A7:35:23
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 019A4EF432825BE2F62DFC131D55134785B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=)
2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: WrMwngShgRM2mqtER6tJOamEd4Cdr7Id+DDMcV6N8Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:32:82:5b:e2:f6:2d:fc:13:1d:55:13:47:85:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=f3b281f6f1df48971f6c4aa09a47906435a73523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:ad:f1:e4:78:a8:37:f4:40:81:4a:5c:43:
ca:0c:22:29:f8:c6:93:f4:52:02:64:76:12:c5:74:
aa:db:3e:f3:a9:a6:79:50:16:07:c5:7d:52:f2:60:
bb:fc:b6:84:f1:3e:c8:08:ea:44:65:d0:c0:dd:f8:
29:74:b5:1c:a4:88:7f:8f:0d:d1:98:d9:1f:0b:e2:
80:9a:4f:37:c5:35:9f:1f:22:f5:02:33:31:ca:4c:
88:85:62:c2:9a:f2:49:91:9c:7a:51:21:f6:22:00:
56:74:eb:8e:dc:2a:42:70:7b:31:b9:90:fc:f6:64:
c7:d2:26:b0:13:e2:ad:90:4f:7e:26:73:b1:eb:33:
63:4c:d0:3e:17:d9:f2:d1:9a:da:0d:90:78:1a:82:
e0:dd:33:6d:b3:c7:01:2e:e1:63:8d:de:63:ef:24:
5b:9d:c7:14:cc:64:69:b9:59:2f:77:19:02:03:a3:
ea:ad:b1:5a:b4:9a:ff:00:6e:91:6f:57:61:11:ac:
7a:8d:ed:17:1f:5d:4c:61:59:80:3e:9d:56:d5:82:
5b:e8:e3:bb:e9:ff:6e:cf:62:25:4b:92:11:a3:c6:
9a:d0:ff:b4:51:05:41:46:6b:e2:ef:8e:ec:46:25:
d8:a9:a3:4c:b5:d5:cb:0a:bf:93:9b:7e:a1:c8:5b:
70:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:81:F6:F1:DF:48:97:1F:6C:4A:A0:9A:47:90:64:35:A7:35:23
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:db:a3:b0:6c:47:6a:e9:61:87:b0:a5:5f:56:7e:9d:23:37:
50:16:cb:db:f7:8c:be:bf:6d:42:a0:2d:a8:9f:ac:8d:4b:b5:
e8:ce:8e:ee:82:63:d7:f6:0f:ce:41:a6:e9:74:36:a2:b0:d0:
df:ab:b5:e7:d1:3f:90:75:fe:2d:fa:fd:16:c7:15:d5:d9:36:
73:1c:93:12:7e:02:d5:de:92:d6:1e:b5:2a:e0:ff:d0:80:6b:
d0:de:b4:ce:b3:e8:61:d6:bb:46:d7:54:d6:d7:77:ee:db:4a:
af:39:e6:64:93:f6:7d:6b:04:89:44:47:fa:45:41:40:1b:e9:
7a:8d:21:15:2f:d2:54:83:62:10:34:53:c1:71:eb:7c:bb:6c:
b1:dc:6d:44:7f:93:fd:8c:73:ba:43:db:9c:1a:00:ef:f6:9e:
5f:33:ad:90:1f:78:61:b9:ab:58:9f:1c:8c:5d:85:1b:ab:42:
3d:b1:a7:16:3d:d8:68:f4:0d:59:12:28:77:bd:c4:36:c7:d9:
fe:cb:39:bd:6e:22:c3:3c:29:bc:ae:00:4f:ad:a8:d6:b1:04:
39:a4:92:43:dd:19:8f:59:ab:12:82:e1:f2:1e:ac:10:7e:07:
8b:ed:63:4c:b8:f5:0c:5d:e0:4f:dc:18:90:54:b3:cb:f3:f3:
f3:5f:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:45 2025 by rpki-client