Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: IThO+36dh+HFg+rqOqiliYQwItEUhKqATc/aL06VZF8=
Subject key identifier: 9C:BC:EE:2D:0B:91:2D:59:7E:4C:C9:5D:B5:58:40:65:A1:32:5D:66
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 019A4D3CBD30FB8778B9DE14DDB15D7FBE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:17 +0000
Manifest this update: Tue 04 Nov 2025 05:00:17 +0000
Manifest next update: Wed 05 Nov 2025 05:00:17 +0000
Files and hashes: 1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: lZHgi1PrBvPy3Trou40eTpOqfbwwNJ8JT5H/aiFHBHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:bd:30:fb:87:78:b9:de:14:dd:b1:5d:7f:be:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Nov 4 05:00:17 2025 GMT
Not After : Nov 5 05:00:17 2025 GMT
Subject: CN=9cbcee2d0b912d597e4cc95db5584065a1325d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:eb:59:3d:d3:67:6b:f8:54:b2:c7:b9:ad:
e5:88:7b:a8:27:b3:4e:30:f4:b5:38:37:4b:bf:a0:
ee:99:f8:b9:d7:78:c0:80:5f:86:7f:eb:bd:8a:6f:
f1:8d:a6:25:53:27:d8:0b:cd:70:5e:ce:90:87:dd:
86:f7:9e:b0:8f:f5:d3:ed:3d:16:bc:27:ba:2c:c5:
e0:24:b4:90:af:c2:24:d2:97:ac:80:1e:13:b9:75:
67:6a:f6:2d:c2:0d:20:9c:85:47:fe:3c:38:0e:00:
57:15:88:08:fe:3a:7d:19:75:d0:ad:17:11:22:69:
1c:8d:0a:62:2d:68:e0:93:bc:ab:3b:f6:7a:c9:4e:
a2:ad:37:90:16:9f:b1:dd:af:c1:7d:70:a7:88:5a:
ea:4d:96:fb:0f:79:0e:15:03:12:54:23:4d:e9:b6:
77:bb:69:f4:90:a1:15:2c:de:27:c6:5a:49:11:0e:
c8:90:23:10:73:13:d9:fe:a2:dd:92:4d:b7:ca:4c:
9a:8e:b8:a6:7a:bc:85:aa:7b:17:57:b5:38:a4:14:
8c:fe:f2:0f:27:d6:f3:bc:89:cb:e3:28:22:aa:74:
e3:96:b5:8e:66:9d:d0:5c:66:8d:6c:dc:ed:3f:bb:
af:97:3c:45:e7:17:e2:a9:47:9b:89:22:43:56:8d:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BC:EE:2D:0B:91:2D:59:7E:4C:C9:5D:B5:58:40:65:A1:32:5D:66
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:be:13:4b:fb:57:bd:cb:c1:1e:bd:39:3e:00:8a:87:cb:d4:
4e:6f:92:c0:be:0c:58:81:05:d0:d4:ff:69:78:44:11:b3:6c:
03:75:f0:36:79:a9:9e:a0:62:5c:20:86:99:f9:45:c8:e5:1e:
f5:ee:95:97:44:3c:f4:48:8c:11:2c:cc:57:22:b6:63:d9:bf:
54:00:5c:e1:fd:59:93:f3:53:2a:f4:18:0e:b9:69:e9:aa:1c:
a5:b1:d4:08:8c:90:04:4c:89:7e:b6:33:05:db:2f:58:5e:3c:
fb:bd:85:c8:16:02:34:0a:6d:fe:0d:60:72:77:fd:1d:9b:d6:
f9:fd:fe:8b:c0:3c:15:01:2c:d8:4e:bf:88:f8:af:33:35:7d:
e0:a8:cb:bd:59:ef:c4:4e:ea:36:b5:4b:cd:e7:42:98:ba:4a:
a6:a6:80:0c:86:c5:ef:a7:6c:68:17:30:03:3d:0c:f2:19:ca:
65:87:c5:1b:66:64:0b:3c:8e:79:ec:04:aa:0e:54:d0:58:01:
fb:fc:37:01:3f:bb:2c:6b:05:21:f5:81:a2:ad:d4:12:cf:26:
74:bb:06:df:f7:a3:74:93:1c:6c:ee:f9:ae:88:79:c2:c6:ee:
64:f3:29:26:7a:3f:95:d8:98:d4:ad:14:2e:fe:95:ba:cd:df:
71:76:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:11 2025 by rpki-client