Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: V6rvhmumh845VAt+LQqTzsWXpsUqpTOVE6pBOcLanYs=
Subject key identifier: 23:84:34:0A:D2:BC:DA:3E:00:52:3F:39:D0:09:F3:85:90:80:2A:E7
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019A4A7285DE83FD9E389EF472E4B827728D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 170A
Signing time: Mon 03 Nov 2025 16:00:10 +0000
Manifest this update: Mon 03 Nov 2025 16:00:10 +0000
Manifest next update: Tue 04 Nov 2025 16:00:10 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: ir7oUfc59jLm1xmiuwaw9FGpXItpPyRlppOCk1Sq3fM=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:72:85:de:83:fd:9e:38:9e:f4:72:e4:b8:27:72:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Nov 3 16:00:10 2025 GMT
Not After : Nov 4 16:00:10 2025 GMT
Subject: CN=2384340ad2bcda3e00523f39d009f38590802ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:47:21:a1:7c:28:78:ca:57:4d:40:64:6f:
81:47:c7:4e:da:a1:fc:02:ef:b8:b5:c9:ab:98:c4:
44:8a:eb:7c:b6:02:3e:02:41:5a:bd:54:88:54:f6:
02:c7:2a:b1:2e:2e:ed:a8:6c:9a:1f:32:29:68:a2:
f8:99:f2:91:24:50:84:05:bb:c0:31:30:3e:86:1a:
aa:d3:87:34:37:74:7d:5b:50:24:c5:fe:5b:c3:b9:
8f:e1:e0:d2:98:7c:62:b0:e8:a9:8e:20:3d:ab:dd:
71:d2:3d:86:9f:a9:0f:a0:19:4e:e9:23:d0:cd:a6:
7c:63:c6:24:63:6b:05:1f:2b:10:53:6d:e6:49:5e:
02:1f:2c:a0:f1:45:d2:f9:f1:ad:24:e5:a2:f3:82:
09:7c:77:06:cc:f0:dc:ab:8d:82:c0:31:d2:04:36:
97:40:14:f7:65:2f:c6:70:af:20:73:bb:0e:23:06:
ca:99:c5:9f:6a:88:d7:9a:11:fa:d1:36:b8:fb:b0:
16:10:fa:ec:5d:6a:dd:3b:96:63:55:63:12:01:48:
a3:51:fb:83:da:4d:1a:9c:33:ad:33:97:73:17:02:
72:35:c2:0d:42:59:9c:68:6d:50:89:d7:b4:8e:f4:
dc:1e:c6:4f:77:94:b1:36:1b:05:68:ca:b0:69:ce:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:84:34:0A:D2:BC:DA:3E:00:52:3F:39:D0:09:F3:85:90:80:2A:E7
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:32:1d:62:6e:07:f6:2a:92:a4:1d:5f:b9:ea:c0:ea:01:86:
48:7e:e7:6f:86:e1:c4:9b:7d:18:ee:21:2f:63:d2:69:2b:75:
d0:5e:e4:b3:90:97:0a:be:52:84:34:02:8f:14:3e:91:d5:b8:
b6:6a:23:28:a9:5e:ba:a4:df:ac:d5:f5:88:d9:14:88:87:3b:
d6:56:fd:2d:76:45:aa:90:0a:60:39:dd:9a:5e:4e:42:ca:2a:
13:bf:69:58:6e:f0:f4:27:ed:08:43:15:a6:05:68:48:ff:42:
68:f4:fa:07:50:10:2c:27:63:be:e1:d4:e1:ed:08:05:d9:a3:
9b:dd:7d:01:ac:91:84:cd:81:d2:95:a1:e4:c1:cb:69:22:98:
c8:c8:e8:42:1b:5f:d0:c3:8b:3e:5d:fb:51:21:de:d7:89:94:
33:c8:18:eb:9a:08:d1:7a:4f:6e:8b:32:a7:48:d2:e2:c2:d5:
77:dd:08:95:e5:c1:e1:22:c9:4f:4e:5c:09:d4:5b:3e:81:72:
e7:8a:36:6f:39:9b:fb:41:d3:8f:09:ff:4e:12:0e:68:58:94:
3e:ef:95:ff:b3:78:a6:38:7f:86:7f:d0:fe:7b:44:8f:b9:f5:
f9:80:2b:b6:10:9d:ac:a7:dd:b9:2c:38:43:16:8f:76:62:89:
66:a9:eb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 20:33:31 2025 by rpki-client