Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
File: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft (raw, json)
Hash identifier: QZi+o1P8FCDw7tCi1CGC2xvlvtjDGuVRZwLa1XvxNGM=
Subject key identifier: 40:8B:F3:31:7D:1C:68:78:F3:29:EF:70:11:97:8B:0D:08:6E:0F:60
Authority key identifier: 63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
Certificate issuer: /CN=6325f514270167a43e65e27df9b3d26efb29c31c
Certificate serial: 019A722603603AE0A3DC8356D2F33C177865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: 7i3ElD5IcOtwR7N5wXzR1mVlNsw.roa (hash: eiPh0DahvU1iWHrSLpqP3W+j96pO/2cFZ0BXyIe6o9g=)
2: YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl (hash: NoFMkq9y6vAI75rH2FliV97acQf66fVHBxc51D67y2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:03:60:3a:e0:a3:dc:83:56:d2:f3:3c:17:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6325f514270167a43e65e27df9b3d26efb29c31c
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=408bf3317d1c6878f329ef7011978b0d086e0f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:af:43:06:25:b1:0e:aa:6d:66:b8:8b:21:ea:
3c:6c:19:76:59:0e:35:ba:78:f3:01:31:c1:b6:85:
e9:28:98:19:06:55:30:6e:36:37:05:f4:9d:60:c9:
c9:41:ef:fb:c8:72:24:57:e2:78:8d:16:c4:fd:49:
1e:57:d4:71:7e:a7:c0:ce:8c:f5:82:8a:69:77:96:
d9:2d:87:d5:49:32:1f:93:5d:f4:1a:56:98:f5:46:
7c:93:5c:ea:a5:22:b7:0e:be:5b:81:83:c1:f5:87:
e6:6d:45:d4:54:ba:8d:ff:3b:16:3a:6b:6e:ad:bf:
f9:4b:7e:40:16:0a:3e:2a:3f:ca:95:46:69:a1:b7:
75:75:2e:17:72:b5:3c:79:b4:ba:01:47:89:14:4d:
40:2c:51:7e:8e:14:9a:e4:07:64:69:7e:fb:34:28:
37:91:47:5a:2f:8b:79:1d:16:2d:3e:fc:5b:6b:1a:
bb:d6:b5:77:1f:f9:ca:4b:ad:15:6e:dc:82:97:cd:
8e:74:fe:95:23:0e:3b:2f:21:91:b4:38:47:4d:79:
74:e1:07:21:ca:95:25:af:16:f4:2f:14:ca:b6:eb:
5e:32:42:d4:b6:26:2a:10:85:ef:3a:f3:24:25:63:
15:96:6a:d3:44:0f:fd:27:8c:c6:5b:f9:46:e7:75:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8B:F3:31:7D:1C:68:78:F3:29:EF:70:11:97:8B:0D:08:6E:0F:60
X509v3 Authority Key Identifier:
keyid:63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:17:4d:b4:4a:26:4d:bb:40:22:2d:13:7b:b2:0a:2a:8b:74:
92:44:56:1b:c2:2e:c6:ad:63:1a:d9:6a:f4:03:bb:4d:69:e4:
71:33:21:97:9d:70:79:ea:d7:2b:82:8b:19:30:ac:9e:44:90:
8e:69:33:47:e9:48:da:4e:f9:69:8a:c3:45:01:43:8e:6f:ef:
86:73:1a:2d:49:0f:4a:22:8c:4a:79:89:ce:83:a0:a0:d2:cb:
5d:5d:7b:aa:db:cd:13:07:04:a2:e1:e7:46:b4:c1:e9:d6:d8:
b9:56:29:de:a0:31:13:07:4d:f9:72:6b:2d:20:e4:cc:fb:a4:
8e:55:e8:c3:51:5f:0e:cc:1d:f3:e5:af:a2:3f:ed:22:b0:31:
a5:8b:2c:b8:f3:31:1e:2d:6e:7c:79:f3:28:f6:4e:5c:6f:ec:
48:71:2c:c9:c9:3c:8a:de:63:64:89:98:8f:b6:8e:94:d9:b4:
ef:ff:f0:ea:44:33:b2:0b:71:63:81:bb:97:83:63:d4:21:14:
16:c4:30:f2:bf:8f:e2:d4:35:99:2f:dc:93:2c:a9:86:8b:11:
a3:1d:74:95:b5:10:80:06:1f:cd:4d:ec:6b:41:79:68:0d:33:
52:43:7d:42:4a:79:84:01:10:15:fa:77:94:99:d8:99:85:9b:
73:06:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:27 2025 by rpki-client