Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: jM+qDfiTAkMMsM4Hz6TJ1dj0METXR7uFJ6WeeuGdCcc=
Subject key identifier: 86:D8:40:F3:18:09:E0:9B:9D:D9:59:B3:D8:A3:79:AA:71:9B:EC:EB
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 019A711360912FF9473CD5D26BE6CC629FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:01:26 +0000
Manifest this update: Tue 11 Nov 2025 04:01:26 +0000
Manifest next update: Wed 12 Nov 2025 04:01:26 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: syEG2Tr/khoO6f8eP9L7q63voahuxqGxOU7pXnRhlOY=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:60:91:2f:f9:47:3c:d5:d2:6b:e6:cc:62:9f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Nov 11 04:01:26 2025 GMT
Not After : Nov 12 04:01:26 2025 GMT
Subject: CN=86d840f31809e09b9dd959b3d8a379aa719beceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:d2:15:c9:df:ff:61:a0:c8:dc:b7:a3:55:
dc:e7:71:35:51:55:03:d8:c1:d1:b3:70:2d:c9:59:
20:17:f5:3a:67:b1:7c:23:a3:56:6a:69:c3:df:04:
7d:34:3d:1a:1c:15:13:22:54:67:44:2b:a1:be:36:
f6:91:fa:44:73:62:c8:13:b1:ae:04:37:4f:0f:e2:
9d:5b:f3:53:bd:b1:a6:eb:96:48:cf:e8:47:e8:c8:
fb:ea:2c:66:da:23:52:72:8b:85:29:56:9a:51:5f:
00:f2:b5:22:93:17:94:10:96:e4:55:b5:65:ea:17:
5a:1d:61:21:70:d0:33:1d:91:0f:b3:31:a6:e6:f7:
82:ad:f1:f0:4e:a1:6b:67:7d:d5:bb:8e:29:45:f2:
c8:57:10:78:51:b4:5d:ec:74:7d:0b:e2:db:6c:87:
a3:4e:f3:f2:8b:c2:03:85:f2:10:fa:9b:44:3c:15:
6c:70:12:0f:9d:78:6b:07:9a:28:03:f7:52:18:83:
ca:7f:13:3b:bf:d2:d1:d4:72:67:c9:3f:44:d3:cd:
29:5f:2e:b9:4e:39:69:e3:2d:a1:46:a9:b3:0e:b7:
53:a2:43:8f:72:47:4c:5b:8f:74:dc:1f:4c:36:00:
1c:11:ca:58:d7:e2:4b:ad:78:78:5c:b2:2c:86:72:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:40:F3:18:09:E0:9B:9D:D9:59:B3:D8:A3:79:AA:71:9B:EC:EB
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a7:3b:cf:07:ee:65:85:03:c4:69:89:a4:b5:52:57:9d:f3:
a6:44:02:6d:45:03:8a:6a:5c:56:0d:30:23:17:a9:de:bf:36:
f3:45:96:be:81:3a:66:49:92:db:f6:ea:83:f5:0d:ef:9c:23:
e8:73:ec:1d:92:3b:d9:8d:bd:c3:93:c9:b0:ed:5b:13:fc:0b:
a7:e1:a0:2f:aa:75:d6:bf:92:b1:b9:c8:53:78:e5:2e:08:07:
b7:3f:50:04:c2:c2:28:ca:55:95:53:6d:4d:56:c2:39:92:0b:
0d:e2:37:eb:7b:cc:f2:e6:89:5e:34:41:73:60:30:80:a2:ec:
47:53:2f:f5:80:06:57:47:a3:40:01:5a:a9:ca:6e:e0:bf:d4:
a1:e4:3a:47:fe:04:e2:80:7c:a4:8c:e0:6f:e6:39:63:36:ba:
dc:03:c9:5d:03:aa:47:bd:c8:07:ec:7e:38:65:64:da:43:e4:
ec:31:67:7c:f6:8c:f0:33:91:c8:82:87:04:c0:f3:e5:e2:08:
86:d7:16:7a:c5:c1:11:15:6a:24:3b:70:9b:80:1c:61:1d:09:
98:0e:1d:d1:7d:43:72:1c:41:97:f2:63:0a:d0:49:b2:28:21:
38:95:76:79:79:45:3e:75:a6:df:2e:d9:2b:60:68:9f:c2:3b:
99:6f:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:45 2025 by rpki-client