Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
File: yXKq7Icz1F96AANRAYC0ri1Lvo4.mft (raw, json)
Hash identifier: sqLwUNv35pwG7uaAl6g0RgBS1DBBKMttkwmyJLq1GCM=
Subject key identifier: 8A:D8:1F:A3:70:31:6E:30:FC:67:6F:00:7C:C2:F7:63:FD:AE:C6:14
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Certificate issuer: /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial: 019A71EEABBD9EAD59C5577D9DA1A9F8FD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: iEYRoHL_x--Q-PC_QmRkLatna0w.roa (hash: 5s1E+tOqSuT9Il26pYgrASE0LBQS+wYadwRdpb6ASa8=)
2: yXKq7Icz1F96AANRAYC0ri1Lvo4.crl (hash: +uNsrqkIAb3jES3hDTwbQJ+S2QiTL/1dLKjU068IfoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ab:bd:9e:ad:59:c5:57:7d:9d:a1:a9:f8:fd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=8ad81fa370316e30fc676f007cc2f763fdaec614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:55:a6:98:0a:78:62:bd:c3:0c:81:54:9a:
c0:57:53:7c:83:d1:29:cc:46:70:fd:4b:20:f2:6f:
40:cb:0d:fd:2a:8f:11:65:89:b0:f3:6a:f7:99:4d:
a4:bb:62:ab:c3:e7:d6:f4:3c:7d:87:41:de:c2:df:
e5:4b:dc:ec:fa:98:32:ab:10:c9:d3:32:d4:4d:f7:
25:2d:10:f2:bb:16:b8:0b:bd:73:39:c1:c6:9a:32:
98:7f:4c:97:fe:62:6c:66:4a:bc:14:90:c4:88:67:
bf:07:7f:ad:ce:3f:07:e7:39:2d:8c:94:0e:96:26:
b3:f7:a9:3b:0b:4e:f7:53:11:a6:eb:0f:5d:f8:c1:
e6:d1:52:0b:04:71:fe:d4:04:17:e0:ac:13:6e:9e:
ce:6b:5f:1a:ed:25:32:2c:01:01:07:43:fc:ce:9b:
2b:52:47:34:65:ee:0d:1c:0e:c8:c9:6a:8c:7a:f8:
72:63:6b:c2:2b:d8:0b:c2:27:48:64:d9:7d:4e:9e:
1f:86:4c:72:fc:1c:1c:c7:07:f6:0d:f5:6c:be:2c:
9c:1e:c6:57:2c:c4:df:4b:d8:5e:d5:9e:e7:7a:24:
51:b0:6c:72:f8:3c:f1:4a:18:d4:0f:3a:4a:9f:0d:
73:1a:51:06:27:3f:bd:2a:ae:9d:77:a4:c2:68:e3:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D8:1F:A3:70:31:6E:30:FC:67:6F:00:7C:C2:F7:63:FD:AE:C6:14
X509v3 Authority Key Identifier:
keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b1:66:62:db:5d:a2:21:e0:f7:b0:ff:3b:3f:bb:4f:bc:11:
68:ad:c4:e1:09:35:84:78:f6:04:5b:58:3c:fd:7d:a6:dc:2d:
67:51:c1:3b:5c:68:8d:87:c3:18:c9:0e:c0:3d:60:b3:70:56:
3e:08:e8:18:eb:48:31:7a:bc:5f:62:a2:ba:82:84:b0:bf:95:
e1:81:e5:87:90:44:04:37:47:af:65:40:16:55:2e:0f:89:08:
c8:b5:5c:d1:41:f1:d7:97:a0:d6:f2:1a:d7:ac:b4:a7:fc:21:
91:5d:82:9e:6d:13:25:bd:58:6f:4d:e5:36:ca:51:e3:17:ce:
18:5f:ff:2e:25:be:1e:57:68:67:72:16:04:ed:18:46:9e:55:
6a:55:6a:6a:54:9a:c8:3a:97:98:c3:11:b5:b8:2e:32:4b:8b:
87:2b:b8:f0:94:4d:7e:c4:a5:54:a4:bc:a1:8b:e4:17:17:50:
39:84:80:d3:2e:7c:bd:ea:62:43:3a:d0:27:d3:66:3b:6f:24:
77:a9:88:f0:06:36:65:8d:73:e6:50:e3:d4:b9:1f:92:cc:f1:
d2:6b:e4:d7:75:63:e5:7a:71:2f:71:c3:ed:d5:17:44:ff:c0:
46:fb:6b:cd:0e:f6:ff:ba:ff:6b:06:37:39:99:3e:e7:2d:d5:
02:bb:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:00 2025 by rpki-client