Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier: UsvPSv3ZikhCExhMY6EjufxEeympPtVxb9vYOaViDIk=
Subject key identifier: 71:1F:EA:B0:54:77:70:F1:DC:7E:29:E7:67:5A:2F:D5:6B:0B:28:C0
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 019A71B915B953531A33DD2E43CC59E34FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: mcCnj0YcjKVWKNRUEHJJ9oCILI8.roa (hash: QCD+FHuTsYXCE9fg4S64GzeBQUQDK650c6oIs3Pqi/Y=)
2: qnmXcL8dUJj7rdFkLv5IIJUwDDY.roa (hash: SbXai8opNHzQzJTVhIMV1eYK9jsCmNmT7MYPyjYeprw=)
3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: QOq15hgVlfb6/3dHEWWF0NX8DvLddaKwl2DWnN4zHPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:15:b9:53:53:1a:33:dd:2e:43:cc:59:e3:4f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=711feab0547770f1dc7e29e7675a2fd56b0b28c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:09:46:d0:63:23:cf:b0:31:bd:2b:6c:e0:
81:7b:6b:5d:e0:82:bf:e0:fa:62:be:d8:fb:6d:0e:
80:a5:3b:f5:42:c5:0a:fb:a4:42:27:95:fb:b2:93:
e7:8c:54:89:44:25:66:d6:77:9e:3f:77:2e:7c:3e:
dd:57:17:91:7c:f5:7e:51:ad:16:66:4c:68:d9:7d:
c6:c1:a1:78:96:7f:7b:c9:c5:f2:5e:94:c2:74:1f:
a5:c1:f9:3b:f5:4f:d1:6c:07:53:1f:f9:ad:5d:6c:
6a:52:7e:bd:2f:f5:42:93:19:ca:4a:7a:26:94:9d:
b1:05:ee:c2:2c:1a:fe:e0:7b:54:22:58:75:f4:44:
0c:26:43:ef:ad:f8:c0:48:0d:24:cd:df:66:f9:fc:
ce:bd:27:3f:1c:1a:f9:b4:2d:fc:ba:a7:32:04:ff:
59:f6:cc:30:ab:64:89:66:26:0a:ab:7d:8f:4a:cc:
f1:ae:e1:be:24:b8:e2:0e:4c:07:e6:b3:f5:db:0d:
1a:25:cc:24:3d:36:97:07:55:67:a3:01:6b:51:2c:
60:fc:a2:66:da:dc:41:a0:be:d4:b0:2e:d7:58:5e:
32:01:99:7e:1f:1c:19:76:c8:a1:d6:a4:90:dd:8d:
84:4e:44:0e:aa:6b:7f:70:47:60:0b:69:82:0b:91:
f8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1F:EA:B0:54:77:70:F1:DC:7E:29:E7:67:5A:2F:D5:6B:0B:28:C0
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:76:e1:f4:c0:56:1d:53:fe:12:02:41:3e:52:6c:58:c4:64:
82:f3:31:cd:5b:ab:ff:bb:56:35:4f:dd:86:da:47:dd:7c:61:
e6:f1:3d:52:00:52:f7:2d:ab:c5:d0:c3:fd:d4:6b:e9:8e:7d:
da:49:c6:fe:64:9c:cc:0b:28:73:b5:90:df:9d:24:fb:7f:75:
13:a3:09:df:70:f3:bf:b5:01:67:3b:f6:74:f2:95:a2:eb:09:
f5:d4:6b:5f:ad:c1:5c:eb:38:d0:67:30:31:39:84:ae:78:3d:
1c:d6:f2:73:74:bc:f4:f8:17:03:6b:2c:ee:9d:c6:5d:93:85:
f3:c9:67:86:58:ea:e4:79:ba:14:9f:a2:e5:30:88:b4:9a:d3:
56:5e:8b:52:42:f9:d5:e9:c3:37:dc:76:c6:fc:f7:5a:bc:ce:
df:82:78:3c:d1:c9:e4:ae:6a:96:47:85:8f:58:fe:e4:03:24:
8e:7b:5f:dd:63:14:d8:d7:96:43:69:55:8c:f2:95:32:3b:23:
8e:a3:64:87:4f:e8:73:7a:4f:f5:68:ae:10:6a:49:f1:2b:bd:
ca:23:bd:3e:50:ec:17:f6:a2:09:56:50:e0:71:b6:ae:66:b8:
42:28:12:3a:46:77:08:17:47:f5:cc:ba:33:a9:9c:42:31:3c:
59:cf:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:24 2025 by rpki-client