Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
File: ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json)
Hash identifier: BCHN2EOuuSa/u6D2qySKaKvzUjElzTm3Ro0N2q6gRM8=
Subject key identifier: 4C:B7:25:AF:84:EF:B9:BE:0C:79:0D:61:45:3E:4E:58:F8:59:B2:D3
Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
Certificate issuer: /CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Certificate serial: 019A4E187F8A0E1B978F330E0C924F8558C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 09:00:19 +0000
Manifest this update: Tue 04 Nov 2025 09:00:19 +0000
Manifest next update: Wed 05 Nov 2025 09:00:19 +0000
Files and hashes: 1: 2ba1m8Gy_1XOQ9HVKpmmzSbnedQ.roa (hash: nQyh0Ol7+Fw/xV4Vz5V2aR6KWFx7hjc+pCgRAL93L9k=)
2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: qpEBVDHT2XvOPMjZi9uveHaM8A5BzAkrOYTa3/GHsv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7f:8a:0e:1b:97:8f:33:0e:0c:92:4f:85:58:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Validity
Not Before: Nov 4 09:00:19 2025 GMT
Not After : Nov 5 09:00:19 2025 GMT
Subject: CN=4cb725af84efb9be0c790d61453e4e58f859b2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:ec:b3:02:4e:d1:68:2b:d9:39:bd:34:3b:
90:ca:e1:5a:63:54:df:6c:60:cf:d1:c2:ca:32:f3:
50:ff:e4:59:0e:f3:69:af:c2:7e:0a:3d:a9:56:6a:
56:3c:2e:1a:9e:7a:8f:dd:a6:04:ea:6d:b0:9b:32:
44:48:f7:66:66:47:c3:68:ae:ee:5d:54:56:78:8d:
a4:d4:84:dd:fc:03:2b:e4:00:4d:b5:bb:e7:ff:77:
b4:63:b2:3c:02:97:79:05:c2:be:06:8f:67:e3:0a:
37:5b:40:ba:9e:38:35:d5:0f:91:79:35:a9:58:73:
48:b4:e1:d2:6b:f0:29:4b:a2:4d:5b:61:f1:87:50:
86:2b:7b:d4:4d:a6:4a:d0:56:93:ac:9b:cb:24:f3:
80:1c:21:6d:4d:75:f2:e0:e2:e6:59:84:58:d5:d9:
67:39:35:3b:93:18:2a:0d:91:64:71:f8:c3:cc:54:
e0:dd:b9:88:bf:45:55:eb:2a:9c:ab:cf:45:7a:78:
ad:58:fc:0a:d1:be:53:97:14:44:92:05:86:39:24:
bd:d1:73:ed:9c:17:59:5a:4e:8d:a9:1b:6a:be:88:
0a:43:e7:42:16:d4:84:1f:1d:63:23:d5:33:dc:52:
48:8e:04:cd:b5:91:4a:06:07:c2:c1:72:3f:3d:8d:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B7:25:AF:84:EF:B9:BE:0C:79:0D:61:45:3E:4E:58:F8:59:B2:D3
X509v3 Authority Key Identifier:
keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0a:86:b6:ac:86:54:dc:41:38:f0:63:f2:49:a2:aa:1e:dc:
bd:96:ab:dc:86:45:46:11:ae:4a:81:34:b7:fd:e8:54:66:21:
e8:bf:8b:de:18:72:35:5c:cd:92:37:3d:92:fe:3f:ab:05:91:
35:1a:16:98:0f:30:26:47:2c:72:43:4b:43:37:cf:7b:58:83:
0a:b0:c5:be:03:8c:91:fc:5d:4b:3d:2c:3d:92:49:73:b3:7b:
1b:41:83:cd:7f:5a:f0:2e:e4:54:5e:94:ce:fb:9e:9a:82:12:
d8:8b:9e:35:c8:3e:1c:d6:3b:d1:bb:84:e1:60:01:37:b8:ee:
9c:3f:93:ac:9d:c9:ca:b5:5f:8a:43:16:bd:cb:eb:b4:c2:6f:
58:02:ce:0f:cc:f9:70:fe:12:27:f9:fb:5f:bc:c2:19:9a:39:
ea:41:f9:c0:45:2c:42:f3:d2:83:d1:45:24:e8:2d:7c:35:8a:
a0:11:87:2e:a3:96:08:2f:c4:28:bd:e6:f8:13:0b:58:aa:67:
7e:da:78:f0:d6:23:4f:6b:65:d7:4a:cb:f4:0b:5b:11:dd:36:
17:b4:67:03:2b:35:08:9d:81:5c:e8:b9:3d:5d:bb:93:28:e7:
9e:fd:2b:9f:21:f5:e3:db:bb:19:0f:a8:48:83:47:c1:04:e7:
19:57:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:36 2025 by rpki-client