Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File: i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier: D6xrUoCpm0pWaXJq05MbhDsiGRWyeCsn5yX+ogcjkLc=
Subject key identifier: 50:9A:82:92:75:51:AC:ED:14:36:07:C2:AE:8F:60:02:B2:6D:3F:4D
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 019A7293970E3F96FEB30AE5AFC4AEB7084F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=)
2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=)
3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=)
4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=)
5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: v+OEnGKDH+h8IXE/4wiPB5h5VEdOGCKWlekj0Au1SgQ=)
6: kgtXMGVq_yiG6jbCmetTa_cdZEI.roa (hash: 6jOU2wUAoyQfpjSCtb3mycfBqwA3lOt9bOnarXx4iMo=)
7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:97:0e:3f:96:fe:b3:0a:e5:af:c4:ae:b7:08:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=509a82927551aced143607c2ae8f6002b26d3f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:5d:0f:f7:58:b9:4c:2c:ec:b7:5a:20:00:
0d:ec:99:fb:3c:53:bb:f6:eb:28:55:26:71:4f:05:
02:dd:6a:86:9a:22:a8:62:bf:93:5c:2d:ae:e4:ea:
08:5d:85:d3:fb:bb:96:b7:d0:a6:7b:91:bf:2e:9b:
88:4a:f1:54:f7:7c:93:f2:c9:f1:a6:30:55:0a:49:
83:de:90:03:cb:6c:aa:5f:8c:3c:5e:58:08:38:d0:
08:f7:d4:fc:92:74:a2:0b:3f:31:e9:bf:78:af:e2:
75:57:05:76:22:ed:28:66:de:fa:e5:04:6b:69:b4:
16:cd:f8:09:35:bd:50:34:f8:4c:76:0d:38:92:66:
d1:40:78:36:8b:0b:78:20:6e:d0:55:88:b3:31:c2:
52:5f:10:f5:79:17:4d:ca:7f:37:f2:ba:e5:11:bb:
11:4e:a3:fd:3e:5d:75:8e:f8:6b:7f:d5:2f:97:59:
60:f8:2a:45:78:9c:db:49:0c:73:75:4b:2f:13:2f:
38:ce:bd:16:6e:12:41:c1:96:4f:37:b4:b3:f6:60:
43:3e:d2:99:bd:c3:a2:77:73:6b:8c:72:99:c1:62:
14:b5:65:4c:a7:52:6e:5d:b0:97:47:b3:e7:d8:62:
ec:a9:04:ef:61:d7:d4:74:fb:78:c4:4f:07:4b:d5:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:82:92:75:51:AC:ED:14:36:07:C2:AE:8F:60:02:B2:6D:3F:4D
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:85:12:b6:0e:1d:23:f8:33:95:21:57:a9:bc:65:cc:e9:
96:61:6c:c5:74:17:22:6f:1a:11:d7:3c:77:ad:5e:26:f4:03:
ac:a4:d3:05:46:ba:ed:f3:40:f1:be:62:88:e3:1b:cb:7f:9a:
21:31:8e:c1:5a:69:61:40:29:c7:10:9d:46:e3:0c:ba:3e:d5:
21:8e:0d:60:d3:b7:e5:a2:fb:df:7a:ce:dc:18:22:13:db:d0:
f8:80:fb:c9:b7:90:0f:25:09:22:00:c8:32:b2:43:28:fc:10:
99:e0:16:77:df:1b:93:8d:f2:43:38:26:55:c2:cc:a8:6a:a8:
7a:c3:ec:03:d4:46:d5:45:ed:b5:f0:03:fe:7d:f5:af:49:63:
96:8d:48:6c:02:6a:de:f7:6a:c7:87:42:ba:6f:2a:3e:f5:05:
20:f1:b2:45:fc:83:75:6a:1e:8b:ca:c8:8d:d8:8d:b3:db:eb:
18:9f:e0:35:23:f1:45:da:3c:a9:9b:be:7e:37:ac:eb:26:83:
8d:6d:dd:79:68:6d:95:e9:c5:a0:09:04:1c:e4:ff:7d:9d:6a:
ee:e9:7b:54:27:4b:b3:cc:46:b6:c0:78:97:f7:00:7d:10:ff:
b7:57:91:8f:46:f6:49:de:76:c9:71:ac:50:d8:21:c4:7b:51:
64:a2:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:41 2025 by rpki-client