Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: EI899EcxAtp0DTZKiweIZ1Tmc/TZd76FN2JYclHtOsY=
Subject key identifier: 6A:5D:E1:50:63:82:11:D5:D7:48:03:8F:95:18:AA:45:DA:2D:D3:22
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 019A522CC008BAF4D06D008685EC4FB5CB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 04:00:55 +0000
Manifest this update: Wed 05 Nov 2025 04:00:55 +0000
Manifest next update: Thu 06 Nov 2025 04:00:55 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: WxodDKO5+1mNhcZIojJ9nMmZbGBmZ4W4ZoHMLhGUNdQ=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:c0:08:ba:f4:d0:6d:00:86:85:ec:4f:b5:cb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Nov 5 04:00:55 2025 GMT
Not After : Nov 6 04:00:55 2025 GMT
Subject: CN=6a5de150638211d5d748038f9518aa45da2dd322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:e0:93:99:e1:c9:d2:3b:e9:6b:c6:9e:8b:
b3:61:05:d5:cf:15:7d:c4:47:9d:31:9d:53:5b:8e:
ae:ab:6f:0e:42:7d:b6:93:4b:a4:7f:62:cb:df:12:
6a:a4:dc:77:64:2a:d7:a2:d9:63:e7:37:3f:fc:0f:
d5:fc:10:03:01:64:ed:be:d9:24:4b:e4:2f:7c:f7:
80:97:0d:b8:22:d9:c2:b1:a3:00:34:45:6d:ea:dc:
e2:70:cc:10:b8:c9:b4:7b:4b:b6:14:36:0a:1d:2f:
ef:8e:83:98:44:27:03:1e:e4:2b:6e:b7:d1:dd:92:
6b:d7:8b:e9:a0:8c:b3:f5:f6:51:dd:08:dc:db:a0:
fd:69:ad:54:08:d0:21:39:af:fc:ae:ae:9b:b1:56:
82:12:d5:9c:be:ea:c4:93:8e:6f:03:d3:92:62:99:
34:55:53:42:e0:8e:f9:77:a9:51:c2:cc:56:a2:5d:
4d:39:5e:40:27:ed:9f:37:23:68:6f:01:2e:a1:9c:
29:37:95:0a:3a:80:7d:02:ca:6c:f2:b7:c4:4b:cf:
ba:dc:c4:70:a5:bc:30:36:f4:eb:91:51:13:ef:c5:
ca:d1:74:42:40:ef:9b:4c:37:f6:26:fc:ff:9a:2d:
11:b2:8b:75:42:6d:cf:f4:4f:c6:cc:01:2d:98:3e:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5D:E1:50:63:82:11:D5:D7:48:03:8F:95:18:AA:45:DA:2D:D3:22
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4f:56:ff:2c:72:7a:ff:09:92:0c:de:3c:da:15:58:85:58:
7c:c5:11:5a:12:06:cb:b1:19:db:72:a2:94:16:78:a7:8f:4e:
c3:5b:8d:33:0f:e8:8c:f8:1a:4c:ee:d6:a5:54:ce:b0:22:94:
f6:18:f2:0d:f3:04:6f:17:19:82:2b:42:c6:ad:b4:7a:54:9f:
8d:2b:dc:60:03:e6:3c:0e:fd:51:78:d0:09:95:23:a4:8c:e3:
88:4a:ae:a4:ce:96:5d:8b:21:6d:a8:60:3c:49:af:13:2b:db:
99:65:eb:8c:71:0e:c0:fe:11:85:70:3d:61:e0:63:a4:51:5e:
3a:15:d5:60:7c:30:1e:9d:20:7e:12:21:1d:2b:a9:80:a7:15:
22:62:1e:85:b7:5e:eb:6f:62:06:78:99:00:45:8c:5d:20:00:
d5:70:27:a5:34:b2:1e:55:ce:c1:c3:e4:19:08:f1:c1:0b:28:
9d:2f:f3:cf:54:aa:f6:db:98:cd:7b:89:99:2d:fc:e4:fe:4c:
fe:d3:ab:ae:51:5e:28:0a:7e:fe:45:7d:41:7d:ec:3c:f1:91:
58:e8:c8:6b:a1:27:ad:a0:5e:ae:56:8b:f1:ce:70:c1:25:9f:
17:5a:4b:c9:91:02:25:fd:e7:62:64:c0:3a:cc:ce:4c:5a:49:
8e:57:03:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:21 2025 by rpki-client