Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: pIH61AfeJoAiEUOUJZuaO74x5gv9lQaYtBNnDNy62MU=
Subject key identifier: 1A:3E:10:73:7F:F9:CE:D0:BF:2D:69:20:63:A3:85:60:6D:FC:FA:A8
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 019A71809E91F46E9BC5D93CA852FD598E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: B3
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: koBib2uPWu1fyn4HVBAVxFJIczc.roa (hash: yxrymR254A6BMsvvnsqltpyGmKY1M2wtyBZSkgJxmi8=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: Lfm8F6C9o6IsDpTD6rUeq/si9j62jwb3qbeqGiSUl4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9e:91:f4:6e:9b:c5:d9:3c:a8:52:fd:59:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=1a3e10737ff9ced0bf2d692063a385606dfcfaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:fc:64:73:5a:6d:1e:24:54:2c:46:68:42:65:
ef:ad:cd:21:1a:b0:38:40:28:67:d4:e9:b5:e3:38:
05:e9:e8:d4:82:63:41:75:ae:0c:9d:4b:15:8c:84:
06:9a:65:c7:bf:1c:7e:68:be:9e:aa:22:c7:43:33:
1d:cb:2f:04:f9:b1:03:ab:73:35:aa:06:29:cd:58:
55:24:cf:f5:fd:63:59:f0:7a:58:97:2c:26:a6:02:
a2:47:9f:f6:c7:12:10:11:70:f4:f2:d6:1e:c1:b9:
fe:08:16:67:f0:8b:b8:5e:73:0d:ae:cf:2c:15:87:
6d:eb:be:08:5b:21:bd:f6:03:c8:30:c3:95:b4:4f:
63:71:b2:bf:2c:06:f6:be:7a:b6:9b:3c:45:53:42:
8e:0a:f4:45:70:05:35:11:99:d2:1a:6d:18:07:11:
8c:e1:cf:0c:9c:82:76:42:31:94:3c:be:2c:f2:dd:
a6:a5:10:24:4e:db:57:e1:45:ee:b3:8b:4d:49:bb:
44:e0:21:b9:3c:fa:2f:1d:71:bb:c7:41:6d:a1:7d:
bb:76:c9:bc:ee:00:cf:7e:d0:93:54:65:38:5c:4d:
77:6f:f5:34:7f:7d:05:1f:e2:1f:2b:4d:f3:8a:2a:
f2:16:38:4c:bb:f0:cf:63:9d:23:57:8e:03:2f:5e:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:10:73:7F:F9:CE:D0:BF:2D:69:20:63:A3:85:60:6D:FC:FA:A8
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:f5:bb:7e:6b:25:6b:c4:06:44:82:3c:e5:f9:e9:12:31:
63:6c:4e:0a:f6:76:c6:b9:a3:a2:7e:5e:00:27:21:8c:47:e0:
25:00:ab:81:c9:4e:52:b2:85:90:c8:44:fc:ef:1c:35:d2:c2:
fe:9c:e6:4a:2a:8d:7b:33:23:15:dc:78:e7:bf:32:9f:05:62:
5d:e2:ae:47:75:9b:50:49:4b:d6:b4:09:02:b1:3c:a6:f5:e8:
93:ad:c9:fe:67:03:b2:73:f4:ba:8c:c2:d3:77:2a:b0:88:a7:
00:4d:ec:26:d8:40:1a:29:82:7e:cf:b7:ca:5e:49:06:27:8b:
c3:52:14:22:3e:22:4c:43:1d:3f:74:0e:f7:3e:3c:42:be:2f:
d6:5d:e9:01:e6:83:41:4f:01:a1:cf:ee:bb:f4:0d:99:77:c4:
bb:44:2f:eb:c4:c7:d8:b0:94:6d:12:71:6e:a5:f1:5d:9c:08:
0c:b8:d5:50:2f:fa:cc:9f:ee:67:2e:c0:9a:4d:1c:a2:0f:6f:
f2:ce:92:04:f7:3c:11:51:d7:32:13:3f:9e:da:b8:da:96:4c:
4e:c7:bf:85:b0:ce:d8:46:2a:b3:b6:7b:c0:18:66:b9:fe:da:
91:2f:78:34:be:6a:8e:d9:86:34:8c:1d:b9:f6:91:b9:50:00:
38:89:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:32 2025 by rpki-client