Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier: IccB0SHU/D4GpL7iEKTwrHHC6VAgvg0uPU8oDEXNQz4=
Subject key identifier: AC:CE:53:56:D7:3C:3E:0F:6A:00:E7:3F:1E:DA:3E:E3:30:B1:13:5B
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial: 019A54518BAF153F1943CD26039D7E4D9534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number: 65
Signing time: Wed 05 Nov 2025 14:00:21 +0000
Manifest this update: Wed 05 Nov 2025 14:00:21 +0000
Manifest next update: Thu 06 Nov 2025 14:00:21 +0000
Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: ZJcd5OhygWWbNtwbi1a+pzDgRHPMYMwqRDni4MoSpPY=)
2: qdMXO5dxGNkyeRydnMIi_ZzZAVs.roa (hash: emXh4czyfau1VXJaPAfpRR7uc8vhZu0P1DoeRXNpxPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:8b:af:15:3f:19:43:cd:26:03:9d:7e:4d:95:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Validity
Not Before: Nov 5 14:00:21 2025 GMT
Not After : Nov 6 14:00:21 2025 GMT
Subject: CN=acce5356d73c3e0f6a00e73f1eda3ee330b1135b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:b3:e4:8b:a6:d9:94:7f:48:a7:fd:6f:ad:
f7:78:29:ba:ac:ae:a6:ec:c2:45:15:7e:7c:f8:b2:
bc:45:84:8c:4c:48:9b:5b:90:07:e9:fa:7c:91:93:
c8:03:5a:33:44:78:1b:5e:cc:4a:62:bb:de:43:71:
2f:a4:54:76:95:80:07:0b:62:fc:8d:d3:70:7b:28:
98:63:36:d0:7d:8c:1a:18:66:6c:59:82:13:11:a1:
89:2f:fb:d7:d4:9c:6e:b3:93:9e:3f:75:c9:ab:09:
0c:ed:cb:1f:04:cf:04:09:ff:c7:74:42:82:8f:a9:
be:2c:67:9f:49:67:17:05:2e:53:d9:84:54:70:2a:
bd:6b:5b:83:d3:ca:ec:bf:31:84:11:49:b9:e1:c3:
93:bb:89:2c:76:6c:56:8e:1b:e6:19:bb:08:80:ed:
37:21:d6:98:d6:9a:be:7b:c3:e3:e5:44:d7:17:b7:
8f:c6:14:5a:39:4f:cb:e4:d3:fb:bd:5c:e6:9c:0f:
7a:56:cd:7c:cd:92:59:b3:a1:aa:d3:34:97:9e:24:
67:07:fe:26:88:d9:4d:8b:7a:ae:6c:38:cd:e3:c7:
1a:22:cd:bd:cb:60:1b:b0:6e:c4:0f:ea:04:da:4e:
89:06:75:86:77:f2:77:d4:e0:2a:c6:88:cd:c8:e6:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CE:53:56:D7:3C:3E:0F:6A:00:E7:3F:1E:DA:3E:E3:30:B1:13:5B
X509v3 Authority Key Identifier:
keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d7:63:09:1e:b1:31:17:02:3d:75:58:fc:db:45:51:db:20:
5b:aa:73:94:5d:2e:c8:26:19:64:d8:73:18:c9:f5:b0:4a:05:
06:69:34:27:2e:73:f2:2f:cc:4f:be:23:c6:4d:ee:23:97:41:
b6:42:5e:4b:45:86:8b:d7:a9:c0:99:e9:25:ea:4f:2e:4a:aa:
d8:38:ff:c9:44:47:d0:5e:2c:67:66:68:e9:32:4a:58:1c:98:
11:b9:48:50:7b:20:a5:24:21:1c:4f:0e:0c:88:ec:8d:29:a3:
18:ad:48:01:3c:25:e2:1c:72:a4:58:d5:ee:6c:ea:d0:25:21:
a0:9f:b9:87:58:b4:27:65:2a:0e:bd:b9:74:31:63:cc:ea:95:
7d:e8:5e:0d:6d:6f:dd:74:81:cf:1b:c7:98:d6:69:44:58:11:
b8:b7:e0:3b:19:f5:66:c9:c4:9d:06:a4:11:fb:cd:53:b1:bc:
24:5d:34:30:7a:66:93:59:9c:75:78:73:3d:78:c9:0d:70:2d:
d0:49:32:7f:80:70:56:26:03:e9:80:8b:fa:c5:bf:e4:4a:88:
9d:bb:29:29:4a:4f:4e:cf:70:d6:23:7a:c1:38:8f:6a:55:9f:
a2:9e:be:1f:0c:8c:b3:f4:6d:58:69:1a:37:8c:10:c4:1f:6b:
30:89:36:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:16:07 2025 by rpki-client