Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
File: ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json)
Hash identifier: hc71KHZ4LTMwnhzbmMLzu9/uHS8qfVc4j+9lFmbUwYQ=
Subject key identifier: 0A:5D:F6:97:18:B2:21:77:53:96:A9:6B:DA:A4:86:A3:1B:53:31:C7
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial: 019A71B85DE88F52E443D206507640F270BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:39 +0000
Manifest this update: Tue 11 Nov 2025 07:01:39 +0000
Manifest next update: Wed 12 Nov 2025 07:01:39 +0000
Files and hashes: 1: u2ztrN64ny4t-5qedlgZVwCCd-I.roa (hash: L/fv9+pcl735U5hA8Uy57NEou3lVd9gt0o2oOToLmgY=)
2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: LGULW7p7JbsFQwqOCHhj3UEjj1oUrb124M+Z2+DTj44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5d:e8:8f:52:e4:43:d2:06:50:76:40:f2:70:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Validity
Not Before: Nov 11 07:01:39 2025 GMT
Not After : Nov 12 07:01:39 2025 GMT
Subject: CN=0a5df69718b221775396a96bdaa486a31b5331c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:41:6e:fa:5f:74:6b:48:d6:af:99:9e:0a:
d5:76:fa:bf:af:38:01:45:0f:0c:37:d5:49:e5:4e:
a2:8f:cf:52:c1:bf:a5:55:19:26:00:11:17:46:1b:
1a:54:98:7a:04:62:b0:af:e1:9a:96:45:e1:f4:9a:
07:c5:a4:f5:72:d8:ba:39:5a:48:07:d9:5f:e5:ac:
b9:4f:e9:cb:21:68:75:11:b1:5c:ea:3e:cf:52:7a:
d8:e1:80:9b:db:87:8e:dd:12:4b:9b:b4:7b:59:e2:
5c:f0:da:18:28:89:b4:15:8b:77:fa:63:60:44:be:
f4:d1:0f:76:92:58:09:0c:02:b4:c7:f7:c5:06:74:
d2:73:0f:27:59:0c:73:ed:b9:64:35:f1:fb:ed:d7:
d3:50:b0:47:25:61:ac:d3:70:b0:25:58:9f:c0:98:
0d:78:20:d3:c9:92:ba:fa:80:46:03:81:ce:95:b0:
3b:3b:8b:de:c0:d7:6b:f7:d7:01:b0:72:a1:94:60:
26:26:eb:2e:20:4e:64:c8:6e:7d:e2:07:d4:75:62:
fe:82:df:e9:f1:75:31:92:5d:75:ad:a0:5c:10:0b:
8f:f0:b5:8f:98:9f:43:3c:9c:34:bd:58:4c:a5:4d:
05:04:9b:74:a8:6d:22:da:4f:10:31:24:da:4c:c8:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5D:F6:97:18:B2:21:77:53:96:A9:6B:DA:A4:86:A3:1B:53:31:C7
X509v3 Authority Key Identifier:
keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:62:92:02:44:fb:64:b5:ca:71:ef:8f:aa:6e:6b:13:0c:c5:
41:2e:7f:c5:6a:55:a7:f2:c2:9f:a9:39:0c:1c:a2:5a:2c:db:
11:57:a7:83:b3:04:b9:29:29:04:b2:2e:cb:04:25:78:ea:cd:
38:b2:98:49:cd:5e:fd:99:81:36:db:95:ad:7f:32:55:00:0a:
a1:c4:a4:3d:41:eb:1f:1b:a9:fc:5a:1a:15:20:9c:e1:97:47:
c4:db:10:11:b4:0f:f4:6f:44:93:cf:cf:a7:7d:3f:57:d6:32:
0c:ce:70:e5:17:fc:67:88:54:3b:3f:25:af:a9:0a:d4:c6:08:
81:2f:4b:a5:7c:38:05:8e:1d:5b:95:22:52:f3:56:2b:18:d9:
34:14:af:ec:a4:d1:a3:0c:6a:5f:a6:ef:de:fa:63:86:dc:1b:
73:62:a5:ed:00:f0:1b:5f:fc:9f:eb:b1:25:74:cc:0a:8f:1a:
8c:64:27:e2:9c:8e:c8:86:d4:eb:21:41:3c:d1:7f:e6:5c:c3:
07:a3:57:db:42:90:0a:8c:3c:24:13:7a:2a:13:93:55:3f:f3:
e1:30:c5:98:e9:24:b1:e4:ec:07:06:ff:d0:2a:b4:c3:f9:d8:
d2:73:3b:ed:0a:42:1a:d4:04:e4:1c:96:2f:7f:d6:bf:58:04:
a8:f9:b6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:17 2025 by rpki-client