Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: JyTzFFCAeBmvzHH5U4iilI3wdX4yYixC0g7tr0Ii+DA=
Subject key identifier: C4:D0:5F:07:C5:DD:44:CF:F2:B3:B3:2A:C7:A0:6F:65:46:22:C4:19
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 019A4D742B88A323CC300BB659E4810625D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:50 +0000
Manifest this update: Tue 04 Nov 2025 06:00:50 +0000
Manifest next update: Wed 05 Nov 2025 06:00:50 +0000
Files and hashes: 1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: Kt2KgssamOZ4HP6b8OqN4OaYfNzpt71weaQkQtrMWCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:2b:88:a3:23:cc:30:0b:b6:59:e4:81:06:25:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Nov 4 06:00:50 2025 GMT
Not After : Nov 5 06:00:50 2025 GMT
Subject: CN=c4d05f07c5dd44cff2b3b32ac7a06f654622c419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:0c:71:7f:f6:be:47:10:79:26:92:48:20:
a9:f9:fb:af:15:5e:b2:05:2a:70:d3:b1:f7:0b:f7:
4d:7d:0f:02:da:c2:14:7d:65:c4:8d:e6:86:1b:df:
2f:d3:30:8d:8e:41:ff:66:b6:c9:a2:37:bc:fb:1e:
7d:b2:e0:67:d2:ff:fa:f6:3e:45:59:4f:ba:8a:8b:
c0:ad:52:e6:60:72:1d:bd:ef:ad:b4:7b:c0:c4:8a:
c4:da:34:04:db:21:a7:9b:56:f3:35:53:4f:2b:dd:
78:54:45:cc:85:25:55:81:d2:47:17:7d:07:32:2c:
67:cd:53:d3:52:a6:37:49:b8:0f:19:5d:fe:74:93:
b0:2d:e8:17:46:bc:e4:f5:37:61:06:96:b4:03:e6:
95:f6:18:3e:14:0a:f7:fc:c0:93:33:40:4d:4e:5a:
cb:40:56:53:da:ee:46:1c:2b:d7:03:77:05:28:c2:
cb:73:bf:23:07:8f:dd:da:94:96:74:18:00:43:44:
78:8c:3b:6c:7a:8f:60:a8:03:1e:c1:bc:00:74:63:
00:39:eb:24:43:0e:6d:94:bf:92:ed:7a:8b:09:cc:
17:10:65:5b:4a:05:42:4c:0c:9b:a0:85:7a:ca:1b:
67:0a:ed:29:39:9f:b0:4d:ce:0d:47:6e:05:d0:5d:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D0:5F:07:C5:DD:44:CF:F2:B3:B3:2A:C7:A0:6F:65:46:22:C4:19
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b9:e3:a8:79:99:eb:e1:43:a4:dd:57:db:35:b8:78:6d:b6:
4c:87:6c:77:6b:17:40:1c:d7:c5:2c:00:8e:52:70:52:8a:cb:
ab:77:3d:2a:ef:e9:9e:15:05:9a:56:c8:28:bf:88:32:14:58:
a5:0c:d6:7a:0d:00:a2:7a:5f:84:7d:78:ba:cb:bb:0a:18:58:
3d:65:91:4d:ca:cd:3c:d6:e6:6b:fc:83:ab:d5:5c:35:26:9c:
8e:b7:3f:f8:21:83:7f:5f:4c:d6:17:fe:9d:8e:b3:ad:80:1e:
6c:fd:27:11:f9:38:2f:39:c0:ca:4e:cf:03:4c:d0:1c:e8:c7:
42:03:ef:10:33:7b:99:d8:b3:bf:e4:52:f9:2a:02:d9:12:14:
8d:c7:3d:bc:4c:34:43:74:0d:df:00:88:a5:36:5d:fc:44:fe:
f8:08:d6:e2:2a:67:60:77:6a:8f:97:82:54:9d:ad:c7:a5:c8:
28:9b:6f:2c:cd:59:69:9c:8a:48:b9:0a:70:e1:74:7c:f3:bc:
e5:24:69:1d:d7:ba:ac:c2:02:6c:85:0a:88:46:85:6c:7f:5c:
a7:43:5f:d4:38:89:07:67:1d:93:15:8d:83:26:71:b7:36:3d:
5b:1b:d4:99:84:bd:04:95:02:9f:c4:fe:a3:26:87:60:10:91:
9a:e1:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:39 2025 by rpki-client