Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: OEepxP2PI9coDu3QG/t7dXfLL5U9cBTlkOdUjIRSt5Y=
Subject key identifier: 17:0D:03:FB:8C:EE:2E:0D:27:0E:5B:C9:F9:0B:1A:99:B7:45:02:57
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 019A4E865573686661E7D180A608DED2EE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 065A
Signing time: Tue 04 Nov 2025 11:00:17 +0000
Manifest this update: Tue 04 Nov 2025 11:00:17 +0000
Manifest next update: Wed 05 Nov 2025 11:00:17 +0000
Files and hashes: 1: S0bRpdJWK72QH0WUGiObKU-szZo.roa (hash: nahgUHhIrdKyE1HO3U29HHKRqVvxXNA6pcRe9FHTMjw=)
2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: 7O0rmBsb90d8aPqSam1cbw8zy0Il0FKk6olK0EoWJAs=)
3: j7_hDGdLtkL478z9D-_ULzuPNQ0.roa (hash: cHtMiS6d0uLx+z24O2WShjptyU5EzGP59Cio4Yaow/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:55:73:68:66:61:e7:d1:80:a6:08:de:d2:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Nov 4 11:00:17 2025 GMT
Not After : Nov 5 11:00:17 2025 GMT
Subject: CN=170d03fb8cee2e0d270e5bc9f90b1a99b7450257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:c7:44:58:42:7d:df:02:66:c6:d4:ef:f2:
ba:d9:60:76:ff:21:4b:f9:b9:0d:d8:7e:89:2b:8f:
8c:0f:b3:e8:d7:68:cd:e5:49:2b:da:ac:f4:10:4f:
d8:d9:a9:e8:b1:a0:04:97:9a:38:0b:e5:7c:37:d4:
02:41:54:0b:a6:0e:5e:e0:fa:8a:9d:a8:e9:d1:17:
87:b7:32:83:ff:5e:97:1e:a2:7e:2e:91:05:66:5d:
04:3e:21:49:f4:d6:17:66:c1:5d:8e:3c:b0:b6:fd:
ff:61:4c:a3:b3:0f:27:6f:01:c7:39:ce:87:b4:e3:
d8:80:df:e3:09:53:11:e5:c4:91:0d:e7:c6:67:4d:
f7:da:cf:b8:a0:a8:c0:50:cd:8b:53:bf:1f:3c:b9:
7e:1d:02:f1:f7:63:5e:3f:6c:28:bb:22:d7:cf:92:
a7:96:de:5f:13:04:6c:f9:a8:6c:c9:c0:df:2f:da:
b8:cf:6d:46:74:05:97:00:d2:f0:2a:e8:7f:25:71:
f3:bd:8a:22:c4:20:0a:65:43:9b:12:97:f5:2d:85:
d5:aa:0c:6e:1c:9b:a3:0a:b3:77:a5:58:6d:78:e7:
05:22:69:4f:22:05:6e:4b:2b:56:4a:39:77:d6:a7:
b5:2a:7e:cd:32:e0:82:f5:d2:68:d4:98:48:ac:fc:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0D:03:FB:8C:EE:2E:0D:27:0E:5B:C9:F9:0B:1A:99:B7:45:02:57
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8e:45:c2:d2:fd:c2:b3:1e:14:5b:f7:c8:f5:6c:6d:7f:02:
1a:1d:c8:e8:7d:c4:c8:03:ad:1a:ab:2b:c1:15:54:f5:fc:dc:
03:6b:bb:d1:c8:6e:10:93:82:6e:d9:c9:a1:e5:57:3c:29:f8:
37:df:a8:a0:d2:09:03:d2:a9:39:d8:a6:84:03:4a:a2:9a:7b:
e3:2f:c4:5b:ac:0d:5d:9a:2b:20:24:7b:0c:81:d7:7e:c2:51:
5e:60:f4:4b:19:04:bc:af:a3:0f:a6:fc:55:e0:2b:70:58:a0:
80:07:20:c7:59:8b:65:42:56:61:d6:c0:a7:71:bd:ab:1a:df:
f3:88:15:62:3d:5f:81:28:1e:cc:3d:88:fb:8e:83:09:fa:de:
67:4a:ab:5f:12:46:6e:bc:d4:6a:b9:b4:ed:21:c4:00:6b:db:
f7:e8:26:85:b0:17:5b:b5:11:56:1e:c1:31:e1:89:d4:39:c2:
e1:d2:26:e3:ec:99:86:77:e0:e8:bf:f0:57:e5:51:4b:fe:9b:
7a:ed:15:b9:46:de:44:85:5d:9f:6e:29:b8:31:25:e3:5a:c1:
44:7f:21:0d:b9:02:d4:04:88:1c:27:c3:83:d6:f8:3b:15:81:
cb:68:22:0d:c5:00:4a:80:70:28:6f:88:e3:ae:e1:c7:16:77:
03:06:22:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:04 2025 by rpki-client