Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: ry1f4wi/jiT+bEGFjc43KYshNWUi523o4QfmFSi6pvE=
Subject key identifier: 07:94:7F:EB:DE:33:9E:2F:41:5C:D5:CF:B8:9D:25:61:DF:CB:18:2C
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019A4EF5736E1A51CB2A63014CDE1C890461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: OiIBQ74SHEVkT-8PoCX8Cy-Yivo.roa (hash: W/4g1y46KUHpbD2tJe93lGZ8b+4RqJt+o9NgZvpLShw=)
2: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (hash: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: kUXXAq0MJ3dCF5GfHjRtCljWkmLEJR2AVfwapuNhLXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:73:6e:1a:51:cb:2a:63:01:4c:de:1c:89:04:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=07947febde339e2f415cd5cfb89d2561dfcb182c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7b:39:6e:99:f9:5e:a7:e4:db:bc:2e:99:c8:
f9:7b:a2:d5:99:05:0b:cc:ca:6b:01:cc:a8:ec:7f:
a9:07:93:a7:7c:1a:f6:d4:3c:2f:75:14:2e:43:35:
b9:31:9b:03:73:c3:f2:f5:6f:4f:75:fe:fc:b8:8b:
2e:ff:16:a9:03:a6:c5:78:c8:bc:b8:40:cf:e0:b4:
18:37:9b:f6:8d:85:dd:ef:c4:89:de:b5:cd:b9:f7:
2b:b1:d9:b8:33:21:a9:d1:41:6a:65:69:b6:bc:56:
3c:95:48:cb:49:d6:3c:6f:33:02:54:b3:28:2d:5f:
b0:19:a8:97:19:52:4b:88:c2:3f:4a:f5:62:c3:04:
7b:cc:b6:ee:56:b3:24:1a:3c:e1:ac:bd:d6:9a:9b:
65:ac:c2:36:22:73:1c:ec:1c:84:54:e1:71:92:c5:
cb:fd:74:65:5e:ab:a2:12:0c:71:17:ff:f5:ae:37:
ef:51:d1:bc:ac:d4:77:b3:a3:3c:d6:5e:c8:2c:1f:
6e:df:f4:bf:b9:e8:28:58:6a:0f:47:f2:b9:60:ff:
80:48:4f:06:f9:04:14:f8:9f:29:62:ec:74:9c:33:
00:59:a3:1b:ed:b5:28:6c:1c:b5:2f:d1:1c:46:55:
09:ba:6e:b3:9d:1a:9f:6b:9e:73:cb:9b:d5:a8:d0:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:94:7F:EB:DE:33:9E:2F:41:5C:D5:CF:B8:9D:25:61:DF:CB:18:2C
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c8:0c:13:9b:82:d8:89:ab:7a:37:64:c3:61:31:0d:1f:48:
1b:44:d7:3a:9b:85:33:d8:98:c4:42:7e:54:56:85:cb:2b:6d:
73:d3:59:54:40:a4:aa:fc:8e:ea:6a:7e:b2:d6:68:c4:86:02:
c1:d3:38:74:7d:96:6a:50:cb:98:2e:52:4f:7b:9a:a6:08:a7:
41:56:7f:ca:32:47:61:f6:66:b9:09:99:0a:59:ea:36:81:22:
02:bf:09:4e:c8:aa:3e:ff:31:9b:db:df:53:d9:6f:76:35:f6:
b3:c6:1a:84:59:e6:74:3c:2f:7e:d2:71:5f:15:b5:56:80:e2:
e8:ab:28:c1:06:a1:c6:1d:a2:82:1f:3d:76:98:10:94:50:a4:
7e:97:08:46:40:4e:0d:e9:50:8d:72:2a:61:79:05:86:d2:c5:
67:79:7d:b8:ed:17:da:1b:38:d6:f0:21:8a:32:70:72:07:cf:
21:d8:44:5e:d4:4a:63:37:6d:b8:21:19:9c:94:f2:a0:0c:b8:
d9:50:8b:f0:ea:c7:5e:0a:1b:23:60:d4:46:b4:f6:e2:3f:65:
0e:d7:68:97:8c:f9:6f:8f:74:12:4d:a2:2f:f2:7e:b4:e6:95:
c9:00:e1:fc:68:56:b2:14:5a:2c:fd:f9:68:31:31:67:b3:26:
f0:15:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:09 2025 by rpki-client