Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: 2CoOGeEtYi0JbFQgSaQdLLeHTWhiDKkDaoPqfinezAc=
Subject key identifier: 3C:68:23:B8:91:B6:DD:6C:4F:16:79:EB:2F:56:69:5C:B0:B9:B9:3C
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 019A71B84435EF34392EBAB750469096B978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: bh2siLxLeBgfX2x0Z6Txp98jpvXK9spZmWCgjHI1bPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:44:35:ef:34:39:2e:ba:b7:50:46:90:96:b9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=3c6823b891b6dd6c4f1679eb2f56695cb0b9b93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:4b:14:ea:c6:7b:ea:5c:68:43:f0:44:bb:
72:ad:7b:56:7f:b7:b4:10:bd:6d:f4:d5:56:54:24:
10:e3:12:68:9f:44:ef:e3:e6:99:b6:14:2a:49:ed:
bc:06:01:9e:02:7a:dd:01:61:89:26:02:0d:42:7d:
5c:bb:55:f0:23:5c:b1:e7:e6:bd:7a:bb:7a:64:79:
42:55:55:45:e3:73:da:60:31:c3:f1:0e:0e:20:fa:
9d:f1:fc:24:f5:8b:f9:03:17:f3:df:31:e8:f0:6c:
04:18:2f:47:bc:12:86:8a:46:1d:29:29:f5:35:e8:
f0:a2:b4:b0:bb:8c:22:d4:d5:fc:e8:50:14:40:4b:
65:0d:2d:e7:18:17:7e:99:af:ca:4d:2c:cc:4f:0a:
77:01:31:35:d2:9a:1b:a9:94:a9:e0:ae:a3:e2:60:
14:c7:f2:a6:b3:05:42:ed:cc:d7:d9:9a:c4:b8:a7:
0d:60:2a:b0:11:c6:48:2d:88:92:6d:94:8f:69:e9:
91:80:9a:75:f2:1c:65:2f:f1:c5:2d:fd:70:55:2c:
2b:27:f0:c1:df:e1:f5:f5:73:a7:ef:92:b3:ee:57:
96:a0:ac:8e:65:87:c5:fd:b3:64:7c:fb:3c:4b:7d:
01:3d:7f:81:84:c8:f1:c2:3b:2f:60:31:03:50:a4:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:23:B8:91:B6:DD:6C:4F:16:79:EB:2F:56:69:5C:B0:B9:B9:3C
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fe:49:12:dc:d3:51:d1:11:de:4f:a4:fb:0f:84:c6:82:9e:
9c:10:39:11:45:82:3d:90:02:ed:ec:de:a6:c9:78:c0:c8:f5:
0e:fd:0b:7f:9c:f4:27:5e:79:58:e7:26:9a:58:ed:3f:ac:91:
b6:52:23:23:d4:e7:df:54:11:65:d5:f6:64:1c:d0:b9:d9:13:
94:17:85:cb:10:c1:05:b6:cd:2f:d7:f5:7c:2b:d8:6a:31:4b:
f5:41:78:d4:32:4e:17:81:6f:29:b1:34:cc:d8:3b:0a:fb:21:
1f:45:b8:df:21:79:10:7d:9e:5a:61:3e:b5:e5:d4:6b:1c:c5:
71:9a:d7:54:0b:55:b6:66:82:83:32:4e:48:28:00:94:d5:19:
b9:39:dd:2d:b4:de:fc:ee:d0:0f:e7:20:bd:4e:3a:79:21:50:
6c:bf:1c:e3:b1:6e:61:89:c1:8a:71:6e:c1:48:83:e4:88:af:
0b:30:6e:e2:a8:4a:ce:87:e7:2c:fc:08:0a:59:03:31:92:45:
69:31:8b:bb:97:77:de:aa:ab:f5:e6:9a:31:d1:9e:dd:77:d9:
79:43:e4:fb:3b:21:db:b3:25:84:65:86:56:f7:50:50:38:4e:
6f:3e:21:d6:53:d0:6d:24:66:95:c5:1d:59:b1:cd:57:7f:00:
a7:bb:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:04 2025 by rpki-client