Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
File: rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json)
Hash identifier: 7+m4kj63Qxg/lZmI84K3HO3g3s1LSLNd3US+/YbHUdI=
Subject key identifier: 7D:E2:E1:F9:E0:3C:5D:1B:EC:EC:59:B3:56:1A:21:08:81:06:13:22
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial: 019A72265CCAE74D5A26C7AD4EC5AA1B4CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
Manifest number: 1719
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=)
2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: rB2EonCWhpHX/fRCm7mD/9YkXmvtB6PjsfFqnlj/W+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5c:ca:e7:4d:5a:26:c7:ad:4e:c5:aa:1b:4c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=7de2e1f9e03c5d1becec59b3561a210881061322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:94:02:bd:33:62:6f:1b:4e:ca:63:6c:fc:
25:94:95:f8:5b:4e:11:a2:a2:0d:c8:52:ab:7b:35:
18:db:47:1b:02:d7:ec:93:11:46:89:89:37:45:a8:
f6:52:5a:77:31:32:4f:61:6e:02:c9:e3:37:1a:1d:
cb:f0:33:56:a5:be:ef:8f:3f:ca:4f:a1:a0:22:d6:
9b:ee:5e:d7:a0:44:33:46:77:95:5c:88:34:e6:78:
6a:d4:56:72:fb:63:36:99:4a:5b:0d:7c:a3:6c:e7:
bc:2f:9a:0a:a9:92:b0:d1:c0:f0:da:b7:92:b0:4e:
e3:b0:fb:f3:9d:4f:70:6d:37:61:5f:aa:45:bc:6d:
10:91:2b:da:83:99:90:db:ab:ea:73:15:52:f0:0c:
aa:8a:cb:39:4e:98:9c:d1:ee:0a:41:16:01:df:30:
dd:c1:fc:d3:ae:c6:0b:f5:65:09:47:00:1f:7d:c4:
8d:e0:ce:c1:de:e7:8f:85:8a:d8:6d:7b:68:2e:24:
e5:f3:44:eb:54:e0:ee:5c:0b:f3:48:25:de:da:c7:
a0:e2:4b:78:65:1e:2d:33:60:af:81:5f:bd:7c:a7:
11:3c:10:c6:46:f9:25:e0:47:fd:86:dd:2e:82:67:
28:11:04:4f:10:22:03:3e:dc:d8:c6:d0:4d:5d:00:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E2:E1:F9:E0:3C:5D:1B:EC:EC:59:B3:56:1A:21:08:81:06:13:22
X509v3 Authority Key Identifier:
keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:32:ad:b3:8f:f4:57:1b:8d:b1:c0:f9:de:97:47:2d:c1:4e:
a8:d6:ce:f7:6f:d6:97:9b:f5:e5:b6:be:b2:79:5a:a1:d8:80:
43:96:87:6f:1d:cc:fb:40:23:03:4f:13:3b:8e:29:d9:d7:c7:
e3:41:a5:eb:18:dd:03:98:f3:f6:01:e5:52:84:1c:89:a4:16:
67:71:d4:aa:af:aa:06:77:f5:6f:45:2f:61:cc:d0:8d:82:3d:
66:0f:30:b9:03:61:e2:c2:15:22:ec:1a:77:65:12:dd:5d:32:
55:0e:ec:e5:91:d4:2b:9b:75:10:8c:90:ac:1b:7a:4c:f7:34:
f7:f2:9e:7a:fb:b8:ee:7b:33:5a:7c:63:cc:83:f1:29:c7:9c:
84:b8:8d:65:67:8d:a8:76:0f:6c:6f:4e:1a:25:73:d0:d5:2e:
60:0d:c4:ba:8c:1b:71:8d:43:85:08:7d:81:db:1c:9f:fd:16:
27:7a:9f:4f:23:96:8a:66:6e:c4:cb:9c:8e:31:d7:36:89:dc:
8f:77:66:2c:8a:82:3c:7b:07:44:19:88:83:7a:d6:80:be:f9:
8a:ee:80:f9:d3:77:8a:01:81:10:d6:3f:35:c5:77:20:ed:89:
d7:1e:b8:16:01:71:15:4b:62:96:21:03:f3:9c:7e:a0:5e:b4:
e8:7b:d6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:44 2025 by rpki-client