Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier: UTB59SVOmiWG9tuA3cl6kJt6RTMjSQhr0lMKx3KB5Ac=
Subject key identifier: AC:F3:EA:65:6C:07:85:79:C4:FB:FB:BB:0D:3E:4E:ED:78:FB:A3:1E
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 019A71B8F16AEE2AF5D3B2DB61A926EAD68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number: 164F
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: XBSLMXjuSr4I5khPSr8Uz0M+N7KdwFjXBycmoOgxmuE=)
2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f1:6a:ee:2a:f5:d3:b2:db:61:a9:26:ea:d6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=acf3ea656c078579c4fbfbbb0d3e4eed78fba31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:03:50:92:fb:54:9c:de:88:df:22:b2:b9:
23:c8:ef:f7:42:64:f1:0a:ab:41:3e:88:0c:15:81:
fb:64:0c:49:7b:ed:0a:00:0c:70:43:31:95:98:01:
c1:e7:cc:a6:e1:fa:6e:86:1b:5b:e3:54:09:bc:dd:
31:5b:1c:cb:5e:ec:cd:ad:49:8d:4b:ce:07:05:2d:
22:1c:cb:57:6e:28:b9:2a:bb:af:22:63:b3:28:ba:
65:27:a5:dd:0d:5f:90:22:b7:a3:78:ef:24:e0:e7:
b8:53:a0:b3:cd:fe:db:05:98:69:35:6b:8d:2c:19:
6b:66:ac:ef:4c:01:a4:77:ba:b7:19:d3:25:cc:3d:
94:90:0a:a4:58:bd:f3:a1:84:6e:33:87:8e:5d:c8:
ee:fe:63:c4:52:28:cf:7c:0e:95:39:8f:ae:e1:c0:
08:23:64:61:51:2a:32:42:a6:c4:a4:72:10:5d:d7:
1a:9d:aa:ca:38:fb:bb:61:be:7a:f1:81:a7:ac:3b:
93:b1:33:65:29:e9:ca:24:3d:a2:b7:7a:41:6e:f4:
67:d7:1b:57:94:03:a8:8f:8a:20:48:9b:cb:45:17:
83:82:0b:8d:0c:36:6e:98:81:21:1c:f3:77:b1:5c:
57:9f:6a:02:4b:86:e6:27:65:a2:b9:d0:c8:0e:5b:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F3:EA:65:6C:07:85:79:C4:FB:FB:BB:0D:3E:4E:ED:78:FB:A3:1E
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2b:58:cf:84:c1:de:50:0b:fb:e4:2f:27:90:81:c8:3d:ae:
91:e0:ad:85:97:9e:e0:aa:7e:7a:1d:91:5d:bc:74:e1:bc:d7:
2c:39:a8:1d:42:86:7f:e5:aa:df:50:de:fc:d8:f7:72:d9:b0:
19:37:20:b4:c7:20:19:96:0b:53:f1:69:cf:9d:49:a4:18:20:
cb:c5:19:d3:59:85:e6:7e:5c:cb:22:d3:99:f9:71:23:46:ad:
c2:cd:57:51:5d:bf:79:c9:69:f6:42:e9:08:80:bf:70:2a:3a:
1f:9d:88:d4:97:d9:9c:2d:e0:f6:2a:33:b1:ad:7f:76:6c:5f:
5a:3c:ec:fa:7a:d8:7a:28:63:05:c6:5b:99:8e:9a:bb:2d:2d:
e6:a2:bf:ad:98:c9:07:d0:35:50:11:57:d4:fa:85:63:db:1b:
15:98:4d:ea:86:39:a4:77:a9:0e:16:cd:29:e6:c0:c1:77:fa:
12:72:22:c5:c1:45:cd:36:1c:ed:a3:40:4d:99:9c:da:c0:9c:
0e:37:ed:95:e5:c8:2e:0d:99:7d:40:a4:13:ed:82:69:aa:4e:
56:1f:ba:dd:c8:9f:34:55:2d:98:52:a6:e3:5c:52:b0:e6:50:
62:f2:e6:7a:bb:55:98:cf:3c:b8:d5:48:74:30:8e:28:dd:7d:
97:c3:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:20 2025 by rpki-client