Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
File: ybIylYCXtYY-r9BHuzFRceqgH7c.mft (raw, json)
Hash identifier: x+1iGRgvWT/EWy8YltTiKyGWUzz9KVE8v6A4aRPxBTI=
Subject key identifier: 78:45:11:C6:6E:77:D5:F4:94:02:4C:62:94:F5:5C:96:37:E1:77:5B
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Certificate issuer: /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial: 019A70DBFD7478DDCED7E164F7842A4A3914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:00:56 +0000
Manifest this update: Tue 11 Nov 2025 03:00:56 +0000
Manifest next update: Wed 12 Nov 2025 03:00:56 +0000
Files and hashes: 1: 36kJZTUd_sWq6XGYaO7P5RhoNYQ.roa (hash: SQ9ogBKHb+rGHe3BXgCbUKWuF1/SVTNnqc7Qrrn9o88=)
2: BLIbcZ8gVGAjnHegyR2lqH6xAJM.roa (hash: Bj27w9uQHRhZtkX+wPrDSZtYcxRX/Qm5XlGgHnKEj+g=)
3: c_Ixc3AYPX_fmGAE0EUaA8iCaCY.roa (hash: G3UZF7fxpF7R/IVnk9rPAZ+jjio/iwehlQmNNTZ8rAo=)
4: h_RE6WU4ZuYi01oBDIse0-pY6i0.roa (hash: WA+t8DetCDYbdx3o6UcknVGJ3PsCQ51UnZ6QRrSNIm0=)
5: oq_HXzOCCJ3V-kFxFIeDBDnbULg.roa (hash: n4S14t4ExmuKX91bG38pFLwh1gNdMqcOWis+wx+O8jw=)
6: ybIylYCXtYY-r9BHuzFRceqgH7c.crl (hash: tOTBACbL6vDcbHJLVC5lmp5ORisfYmAVy6SOvy2I8e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:fd:74:78:dd:ce:d7:e1:64:f7:84:2a:4a:39:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
Validity
Not Before: Nov 11 03:00:56 2025 GMT
Not After : Nov 12 03:00:56 2025 GMT
Subject: CN=784511c66e77d5f494024c6294f55c9637e1775b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:99:a3:cf:eb:88:2d:71:be:31:c4:ac:4f:
b7:e8:1b:74:c6:a3:94:4a:95:0c:8a:21:bc:d3:e4:
a7:ea:ce:58:09:35:70:b6:a3:c3:16:b6:cd:ad:43:
c4:05:02:65:f6:66:6e:f6:e1:80:61:99:d0:32:8d:
dd:cc:08:21:d6:43:dc:b9:b7:c9:f5:47:1d:22:e5:
3d:80:40:2b:75:7d:e4:e7:0d:93:73:54:9e:84:08:
9a:08:db:c2:0e:46:34:f9:15:ce:31:2f:6f:9c:26:
05:99:a2:cf:4d:3c:a1:02:43:0c:2f:23:b7:3a:7c:
8c:f8:65:f1:8d:a9:fe:5f:13:b9:a8:0b:1e:d0:f1:
e8:e7:8e:2f:61:29:ee:99:ba:6f:b1:14:6b:3b:8a:
4d:73:31:61:65:e6:e1:a4:0d:82:b3:f9:09:34:02:
61:5d:ef:52:c1:73:07:54:cf:79:6e:c2:09:72:04:
54:ce:fa:5c:4e:6e:23:09:47:67:90:61:50:1e:39:
13:f6:6b:d7:20:15:4d:74:db:44:a7:41:c1:10:9e:
26:58:20:14:c6:a0:ac:54:49:f5:96:92:8f:d3:e4:
a2:f0:80:fd:4d:68:fd:34:bc:db:d4:90:e3:a7:84:
37:11:18:2d:e1:91:9e:17:f9:5f:09:64:1e:7d:d0:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:45:11:C6:6E:77:D5:F4:94:02:4C:62:94:F5:5C:96:37:E1:77:5B
X509v3 Authority Key Identifier:
keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d9:c7:b4:f2:5d:d4:c3:fa:d6:e5:db:33:47:9a:8b:a4:42:
33:2f:ab:4d:72:d0:26:07:27:8d:fd:38:06:2e:48:0c:f2:1a:
57:e4:7f:8a:07:e4:ee:75:45:0b:af:e9:1a:4a:bd:93:74:70:
b9:37:ea:af:07:31:6e:e5:92:55:24:26:9f:f1:13:e2:3d:d7:
ed:b6:86:a4:0d:12:0d:da:e9:d2:4e:36:04:df:a9:7e:7a:96:
44:46:c9:5f:68:d4:85:a6:db:6b:e3:85:e4:1f:e6:dc:3c:fa:
f0:4d:4e:78:26:73:2e:57:14:c3:6b:e3:4f:e4:6b:a3:46:32:
21:5f:77:81:c6:3a:ab:0e:8a:75:d3:92:fd:62:0c:c7:2e:58:
24:35:54:22:7e:11:6d:11:8d:d4:64:1f:8b:43:71:0f:e4:f4:
49:e8:ce:68:44:d3:bf:08:6e:7a:dd:82:20:35:5f:1b:5f:9a:
ee:8d:8d:1d:47:c0:dd:c0:c8:4d:8c:61:6e:bc:c4:e3:51:8e:
55:8b:1f:f1:46:46:78:b3:e9:b9:8a:b8:43:bb:2f:cb:77:43:
40:a9:c9:0a:a6:f2:3b:68:d9:6e:22:c2:48:5f:b1:e9:d0:24:
84:fe:ab:b2:19:df:e1:68:b7:82:b9:9e:b1:6e:ae:02:1f:f3:
c2:3b:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:39 2025 by rpki-client