Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: XiSTD18GrL8xpQwME9Q6cbXXi1aqXQejfcDRxJmfkMQ=
Subject key identifier: 4E:C3:0B:0C:16:8B:BB:04:EC:CB:5E:5A:2B:AF:E9:A1:79:9C:1B:8A
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 019A725C7D20EC40369D6365451528C08AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: Z406JsldDq5gjN_1Lio77tcegQc.roa (hash: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: nxotlfQASYU91V6JKOlc/3S2YNNjy4xJNyWx+eUQxlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7d:20:ec:40:36:9d:63:65:45:15:28:c0:8a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=4ec30b0c168bbb04eccb5e5a2bafe9a1799c1b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:42:0c:ca:fc:a6:8d:a3:97:ac:37:d5:5e:
b2:a2:d5:00:64:ee:ba:73:9b:a3:b6:cf:3f:29:23:
2a:51:06:5d:00:1a:01:c1:a2:58:79:ca:41:26:45:
a4:8d:17:3a:21:61:3d:b4:5c:ff:ee:1f:b6:9c:e9:
ae:fe:37:2d:bd:01:d1:be:cd:d8:78:31:8f:78:9a:
20:75:f6:05:ab:32:9f:97:6a:7c:e0:c2:44:b3:fe:
42:49:a0:6f:37:2a:3f:40:98:3f:4e:6a:b2:74:e0:
3b:28:1d:1f:17:09:e0:3a:53:70:b2:5a:b2:d7:f8:
22:68:37:58:1b:65:8f:b5:96:b2:f7:e9:a7:30:b9:
0c:5e:15:a9:88:cd:00:ac:7f:bf:5e:10:e7:68:1b:
e2:7b:06:12:55:f3:71:e7:bb:32:bf:af:7d:5b:0b:
32:80:77:77:87:b2:f6:16:3b:34:aa:07:aa:96:7d:
f1:35:53:02:e8:64:3a:d7:3e:2a:72:dc:c6:3c:25:
6e:5b:5a:1c:08:49:3f:92:a5:60:91:8f:42:95:79:
53:55:ba:e0:e2:e0:f6:e7:e6:37:f4:aa:2c:df:a6:
3f:14:e8:41:6c:6e:fe:54:14:bc:00:5c:65:63:62:
f5:9b:f8:bd:68:44:f2:10:7d:03:fe:74:d7:9f:0d:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C3:0B:0C:16:8B:BB:04:EC:CB:5E:5A:2B:AF:E9:A1:79:9C:1B:8A
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:31:01:e4:6c:4d:3b:bb:e5:21:7d:86:9f:14:43:ef:8c:99:
0a:86:88:0e:57:7d:eb:c5:70:05:dc:56:34:37:ff:d6:0d:f5:
ec:5a:c3:c2:14:cf:51:d3:97:1b:0c:c6:9f:1d:97:17:b0:a1:
1e:c7:be:95:f9:10:c5:89:46:4e:b0:77:d7:6a:69:85:5b:13:
ae:da:08:96:8c:f1:a7:28:e1:58:1e:52:c3:e7:cd:9c:4f:1e:
51:e7:cc:0e:19:d9:20:23:0a:92:8e:5e:c3:fa:51:c0:e0:fd:
c9:5f:19:61:c9:43:34:da:9f:c8:61:02:c1:f0:03:c2:c3:4c:
b8:2d:ad:06:a2:58:08:ba:56:ef:dc:98:d8:8e:a3:1b:95:e5:
ca:08:78:f4:ad:0b:c0:ac:fe:bb:db:cb:f8:28:1a:f0:88:bf:
01:c8:22:38:04:3d:fe:9f:8b:8d:0f:05:3e:c4:09:4f:69:d0:
68:42:c4:9d:a8:d3:b5:ec:e9:ba:3e:bc:09:47:ad:b7:fc:82:
e6:36:2d:f8:14:35:2a:4f:6b:84:d9:5d:f2:4c:48:c0:e0:d8:
31:86:5a:da:e3:c7:26:e6:48:e3:28:52:97:5e:96:41:89:21:
21:3d:48:3d:c2:c9:01:5d:6b:20:f0:5e:87:c0:6b:b6:06:b8:
8d:64:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:43 2025 by rpki-client