Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: yP/PnPFNWdPCEtvjqZ9TJZ15hiXFIGwgYLpru1m/19U=
Subject key identifier: 1A:10:1B:4A:11:E9:53:DD:02:19:BA:04:A9:EB:ED:70:FA:A1:BC:67
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 019A7225C54B09B340DB2A21B3C6EF92D7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=)
2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: o7yKcR8NUaOTboqW0nJ1pPHQ3+IoaWrKr+N8Z4rlRww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c5:4b:09:b3:40:db:2a:21:b3:c6:ef:92:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=1a101b4a11e953dd0219ba04a9ebed70faa1bc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:a9:4e:d6:af:d9:e3:dd:da:ab:c2:26:34:
26:92:4c:eb:d4:52:ee:7c:da:63:7e:9c:04:dd:a7:
54:8e:df:ae:0c:95:29:cc:78:7b:0f:13:e6:00:a2:
b6:94:43:a9:b9:e8:13:15:40:56:9f:98:eb:0f:21:
ca:33:56:06:cd:8f:94:df:0e:be:dc:5d:44:da:60:
31:83:14:9f:20:7a:02:d4:6c:79:b4:98:3a:bc:63:
bf:54:25:da:ab:16:7b:6d:8c:b9:1f:53:da:f2:c0:
bc:5e:4b:92:6b:de:de:ce:24:82:0c:4f:41:de:7f:
7d:95:b7:8d:54:66:09:83:d0:07:1e:ab:86:fb:c9:
0c:bb:a3:d3:e4:0a:1c:68:5f:a2:63:1f:08:23:17:
45:3a:cc:f4:65:d2:26:ba:98:54:d0:94:fc:1f:fb:
f1:e6:42:4b:e9:f0:1b:17:8c:81:1f:c2:41:89:f2:
42:ad:fb:9e:73:94:e9:88:1b:fb:3a:9d:0a:57:95:
64:64:de:62:9d:d5:53:61:fd:f5:37:3c:27:d4:19:
7d:58:d6:96:fe:9e:24:11:37:87:7e:9c:76:dc:38:
41:6e:c7:30:f1:ba:76:8a:12:d6:70:4e:6d:57:d4:
8e:0c:6c:a7:31:08:5f:17:e8:f7:21:2c:da:76:c0:
b8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:10:1B:4A:11:E9:53:DD:02:19:BA:04:A9:EB:ED:70:FA:A1:BC:67
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:96:98:5f:56:81:e4:f1:3e:49:5f:f9:34:ff:a9:8c:e2:1b:
2c:09:f0:5f:69:08:a7:09:ed:9f:52:2d:1c:bc:a3:60:bd:6d:
6e:5b:12:22:c9:cc:7b:8f:f0:fb:26:68:ed:4e:77:75:d7:06:
1a:b2:23:01:7e:18:6a:43:84:87:24:6f:1a:9d:00:01:66:98:
48:b6:f0:8a:28:73:81:97:4a:7c:00:2a:a5:04:70:27:3a:79:
52:5d:c2:d8:04:ff:ed:35:e1:f6:4c:0b:0c:77:9c:65:12:a0:
94:b8:1a:2d:5c:19:2a:ff:41:f1:1b:9c:71:bd:6e:e6:be:b3:
cf:13:cd:09:ec:79:5e:7a:5e:22:de:99:90:29:21:fd:a1:cd:
8c:2b:aa:ca:2a:a2:93:df:42:ea:e7:d3:23:e7:3e:32:42:31:
36:73:3e:c0:60:66:b1:5b:b1:dc:f1:e9:d5:78:d9:67:1d:a5:
1d:e4:9f:4f:40:ac:6c:8d:4d:6e:4a:82:b6:af:a9:5e:c8:4d:
09:9f:1e:6b:ba:c9:78:d8:c0:65:16:dd:08:4a:50:13:d3:81:
dc:36:1c:88:1e:ec:89:cc:00:17:db:a6:45:6f:eb:50:c1:aa:
5b:ea:2b:e3:3a:13:cd:ab:75:b0:c9:37:ec:94:61:32:9c:a2:
e1:c5:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:39 2025 by rpki-client