Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
File: yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json)
Hash identifier: Cag/KcmufvTlzKeVizmn4/tOpPvjort6dYy5YgdxjDA=
Subject key identifier: B5:11:BE:D5:2B:83:FC:0E:17:5C:09:97:64:3A:6F:85:DB:88:E1:55
Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Certificate serial: 019A72262D8366BF924645A983F4F542AAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (hash: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=)
2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: WvVQCw9b79CsqnzVrftkIk0pP29uYG8Iw9hP/q97OKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2d:83:66:bf:92:46:45:a9:83:f4:f5:42:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=b511bed52b83fc0e175c0997643a6f85db88e155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:d2:2c:37:9a:be:d2:2c:1e:8d:44:99:91:
34:21:89:60:77:07:b9:75:19:59:2c:3a:3e:d2:91:
09:07:0d:99:59:8d:a8:45:da:a9:02:77:9e:51:c2:
3d:97:52:e4:c7:e8:40:e7:79:c4:05:eb:7e:e4:60:
e5:85:ee:e2:13:04:2f:ce:be:0a:8e:ae:25:57:20:
e0:c1:26:3e:83:63:29:cf:ac:e7:95:5f:cd:db:1b:
d5:a6:c0:6d:9a:43:d3:f3:b2:68:fc:b5:c0:cb:75:
f5:85:e0:5e:aa:d7:68:1f:5c:00:28:4d:2c:6a:3d:
5d:cd:94:77:53:2a:f9:f2:97:f7:83:6f:ae:07:0c:
67:3a:af:7f:79:1a:41:23:07:a8:8d:fd:87:70:df:
06:65:22:91:a8:0c:30:e8:78:2a:8d:cf:30:5f:d7:
60:cf:a8:ad:0c:93:66:60:b6:27:e9:d1:63:b6:c5:
c9:33:8f:8d:a7:8f:32:92:d2:f4:45:d0:9e:8f:ae:
57:c8:b3:79:28:b6:45:00:04:ca:c8:98:e2:4b:08:
52:35:b9:fc:fd:22:f9:87:f3:54:57:1b:3e:6a:78:
ab:98:de:db:89:fd:6f:68:b1:0f:5b:29:a3:fb:ab:
d9:e8:9f:93:bb:01:df:3c:c0:33:a3:55:be:e6:e6:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:BE:D5:2B:83:FC:0E:17:5C:09:97:64:3A:6F:85:DB:88:E1:55
X509v3 Authority Key Identifier:
keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:51:e8:9c:e4:a4:ab:c0:74:14:1a:22:0a:43:59:e3:8d:9a:
6f:94:8d:4e:eb:ce:06:af:69:19:14:41:a4:48:ad:bc:7f:05:
34:df:b1:b5:5f:83:20:08:60:3c:39:5b:53:73:e7:5b:3d:38:
00:a5:0b:9b:b3:00:b5:2d:45:8a:72:ad:d8:60:2f:d3:12:97:
be:a2:e5:f6:46:62:03:cc:06:35:25:88:41:a1:8c:96:a7:97:
17:ff:60:5c:21:2a:9d:7c:30:2d:3f:0f:cb:b3:a5:61:7c:13:
95:3a:22:13:09:b5:2c:ce:a6:13:39:8a:c1:1f:c6:13:14:54:
07:77:81:b1:9f:5e:40:cf:be:58:36:79:fd:65:dd:02:e4:df:
0c:27:e6:8d:21:19:92:38:84:9e:cc:4f:27:1c:9e:72:01:79:
70:18:76:71:5b:1a:23:99:46:fa:84:b2:67:9f:8b:11:0b:c4:
81:b4:e8:5a:ee:d8:fd:3c:fa:13:6c:30:c1:61:ba:5f:b9:21:
aa:94:5a:81:95:87:98:78:19:c6:87:cb:4e:42:d6:0d:dd:d2:
dd:b1:59:04:ab:60:e8:ed:9d:85:fc:47:90:65:ff:a3:de:36:
88:64:4a:cc:3a:35:66:8e:f2:12:13:93:5d:2a:f7:aa:76:79:
d9:38:6d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:33 2025 by rpki-client