Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier: DilBi/oKMWLg39Dmss3Buvehu3ino54YRyM1uQlthI8=
Subject key identifier: 06:93:C0:3E:AE:FF:40:86:79:43:84:E9:06:B2:15:3F:2B:CF:2D:22
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 019A4FCFEFCFF13876F08E1E4BD5D4100B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 17:00:18 +0000
Manifest this update: Tue 04 Nov 2025 17:00:18 +0000
Manifest next update: Wed 05 Nov 2025 17:00:18 +0000
Files and hashes: 1: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: iCvktXlnPZnQ6cm+iiagOLs5sF9dxHg89lK+Uanvct8=)
2: apB7016k1B8Xf8viYBYRSP8KhJw.roa (hash: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ef:cf:f1:38:76:f0:8e:1e:4b:d5:d4:10:0b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: Nov 4 17:00:18 2025 GMT
Not After : Nov 5 17:00:18 2025 GMT
Subject: CN=0693c03eaeff4086794384e906b2153f2bcf2d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2a:96:b3:14:a6:46:a9:7c:56:2f:7c:1d:85:
a2:74:a6:c7:31:02:bc:13:d5:fd:48:63:23:cb:ea:
0c:2a:e9:a8:42:eb:eb:ea:fa:fd:38:29:7f:2f:ed:
74:a8:8f:5e:76:47:19:7e:da:b8:32:5a:fb:d7:af:
66:32:f7:f4:00:52:fb:f1:6a:51:f4:2e:72:04:80:
05:c1:ea:4a:48:8e:5d:c1:3f:2b:7b:44:5a:cc:aa:
59:74:4d:1c:3a:73:bc:44:fa:90:02:73:6f:22:ca:
46:0f:ac:83:5f:df:90:e9:b5:a5:47:74:25:1e:03:
0c:6c:18:0c:d1:2d:f7:c2:b8:de:2f:ec:f8:f2:5e:
5f:90:d0:71:c0:91:22:c4:15:82:8a:df:8b:26:e6:
f0:43:73:ac:23:da:96:f7:1d:60:7d:64:55:69:91:
e8:a3:55:c0:ee:f7:2d:42:fd:3d:dc:58:6a:ca:38:
4f:62:59:ff:56:56:be:16:43:ad:b3:a2:64:ab:ee:
23:72:9a:54:10:36:f2:bf:61:21:04:5a:0e:c1:cb:
f9:10:d5:6f:aa:33:51:af:8f:f3:40:98:d6:1c:df:
36:c8:e3:c4:e2:71:94:48:41:a2:cb:5d:a9:30:da:
0d:ae:db:20:49:df:97:04:44:ba:f4:b4:96:3c:6b:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:93:C0:3E:AE:FF:40:86:79:43:84:E9:06:B2:15:3F:2B:CF:2D:22
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:98:c0:b0:ca:42:2d:13:4f:a7:bb:70:75:7c:bc:eb:4a:80:
0f:5e:86:14:6d:58:76:75:d6:94:ad:ea:e3:dd:7f:eb:4a:a5:
8d:2a:0f:0d:73:c2:93:89:c8:cc:07:7a:22:40:17:8f:57:39:
b1:04:90:ca:17:08:fb:8a:7f:75:82:88:a2:05:ce:ac:27:06:
94:ba:28:bd:dc:33:b1:e4:ef:86:53:7f:13:83:b5:38:7a:34:
0c:f8:d6:46:21:b4:e5:ca:f8:23:81:cc:fa:d3:aa:e9:65:16:
5d:17:e8:23:b2:ad:9f:57:02:3e:6e:d9:05:78:94:84:1f:79:
06:be:9a:71:e9:94:ea:27:6c:2f:d3:e9:37:e1:94:38:c2:6a:
dd:64:4d:30:60:20:95:71:c0:10:55:1e:25:e0:37:47:8b:9a:
c7:08:c8:26:68:ad:de:61:62:c3:ec:c7:04:bf:1d:15:78:75:
ef:c0:90:4c:0a:d4:ad:a6:3f:fa:8b:64:ab:25:a6:47:b3:d7:
ba:85:17:7f:6d:0b:76:34:5a:4b:d8:dd:ee:07:ba:24:aa:87:
ab:f7:ef:e1:a0:c3:8e:ae:b7:77:ec:28:26:9d:a0:19:b9:14:
dc:96:d7:26:0b:d3:cf:6c:af:6c:e2:50:07:7d:2b:9a:b8:56:
71:d2:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:20 2025 by rpki-client