Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier: XDgwgvCjtB/BMp6d6TyaZ6pc36vScnhwGSXHGLB8mMA=
Subject key identifier: B0:26:40:5C:6C:37:C1:86:49:CF:CA:DB:CF:97:C6:71:05:0C:A1:79
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial: 019A7225F701BFC680639D724F96B33D6CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: 5t5Dcx5tNkWQ_sy57yYX9uF0BSc.roa (hash: PzSrKv8Rw8leyPQ1z/odwxbCskApuD1oeaEEXKXPsNc=)
2: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: yxDSboTE3bCdo3sU/Nv4uEajJOUbmhlDkdOFbW2YWXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f7:01:bf:c6:80:63:9d:72:4f:96:b3:3d:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=b026405c6c37c18649cfcadbcf97c671050ca179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:fd:1e:e3:64:1f:fd:08:30:0f:c2:11:f6:
42:66:a5:89:3d:5d:66:7a:a6:43:93:8e:f6:4f:01:
97:d0:53:90:ed:33:ce:fe:b7:f4:43:c4:c6:7c:62:
99:50:dd:1a:0f:ff:5c:91:8e:69:be:e9:4f:50:a4:
4c:f3:6f:94:4e:18:8a:d3:a2:db:e7:f8:0f:72:0a:
68:73:a1:28:27:78:1f:aa:90:b8:60:fb:81:4b:fb:
ce:73:2d:da:ec:fe:94:b7:a1:97:d0:c8:23:8d:52:
95:09:60:52:22:d1:29:b3:ed:dc:49:0d:22:15:74:
99:3c:a8:e6:83:12:f7:d8:e2:9a:bb:51:58:d7:dd:
17:fd:0e:87:93:b3:c1:35:25:c1:c5:c7:94:a6:d5:
82:b0:d0:0b:b4:2b:78:fe:9a:15:09:09:87:c9:5b:
cd:a4:a7:fb:03:4f:00:8f:c5:b7:c3:e7:ce:b2:96:
87:76:63:3b:7d:75:cf:c2:ed:bc:18:d3:74:64:9c:
9b:1d:d0:18:8e:b5:44:fb:e4:4c:a3:48:3a:44:be:
5d:1d:a9:7f:ea:59:69:9c:77:62:00:5a:ad:d4:73:
3c:ce:af:a4:a3:c4:6b:f6:99:12:12:de:96:3a:ce:
c4:cf:61:ab:1b:c0:f6:39:39:bd:40:2e:17:2b:d1:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:40:5C:6C:37:C1:86:49:CF:CA:DB:CF:97:C6:71:05:0C:A1:79
X509v3 Authority Key Identifier:
keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d8:ed:06:ee:71:62:09:fb:76:b9:c8:31:79:9b:ea:ec:cc:
18:d5:9a:c9:e4:b8:9e:80:5e:c6:f9:bf:ac:3e:ae:89:b9:57:
34:e0:76:f7:e2:2d:96:e5:3b:f8:de:99:ae:4c:f1:e8:96:83:
e2:9b:99:a8:79:e8:4e:a3:f3:7e:b5:7b:a2:89:f0:fe:4c:cd:
ed:c1:d1:e0:24:51:b4:a4:85:b2:b2:20:3e:7d:34:ac:2b:b8:
ad:75:76:e2:bb:b8:e0:10:05:a6:36:bc:66:a9:8a:bc:56:77:
c9:c5:c1:44:37:e8:4b:e1:4e:7f:ea:b3:49:94:16:08:4f:90:
5b:fc:ce:db:2c:7b:07:82:50:58:49:d2:70:a5:a4:c9:f7:02:
c0:cd:ea:f4:1b:ac:19:f7:97:5c:a5:88:4d:33:65:fd:dc:3c:
23:d3:c7:18:71:da:73:9b:bf:1b:ce:86:c8:e9:f9:89:15:cc:
d4:29:39:19:7a:01:fa:f6:51:3b:c8:e4:0a:41:61:f4:ab:e6:
da:d7:35:08:b9:86:c6:03:16:21:41:b4:de:d1:00:5e:d6:aa:
18:24:ae:fe:9c:05:95:2b:07:c1:1a:2c:99:60:28:71:f8:0a:
e0:61:45:b1:e8:94:d0:7c:b7:22:0d:11:7f:d3:c1:26:21:d3:
ed:69:4b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:49 2025 by rpki-client