Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
File: Ya6c-i1ltBVC037v8dHGw4eqobU.mft (raw, json)
Hash identifier: 6+HcpSfJz66KydKeG5cVjKfo598u9ja72ulIWDYmkqY=
Subject key identifier: 77:BF:F4:C9:C4:76:5D:8D:66:B6:29:7B:19:DC:DB:66:46:08:D0:81
Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
Certificate issuer: /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Certificate serial: 019A71B78532F9F1DFA70F52B7A1C90117EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
Manifest number: 01BC
Signing time: Tue 11 Nov 2025 07:00:43 +0000
Manifest this update: Tue 11 Nov 2025 07:00:43 +0000
Manifest next update: Wed 12 Nov 2025 07:00:43 +0000
Files and hashes: 1: 3OrX-Bx_5Y7rOdWC35EMVBiLsiM.roa (hash: Hcg3Yc6y08nDt8RGm5cjhZE+4ENH1m8OZY89OLwGe7s=)
2: Ya6c-i1ltBVC037v8dHGw4eqobU.crl (hash: VRa39sWGn2pSJevj+bGFVyxH8VrFqSQC6dMgenPxCcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:85:32:f9:f1:df:a7:0f:52:b7:a1:c9:01:17:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Validity
Not Before: Nov 11 07:00:43 2025 GMT
Not After : Nov 12 07:00:43 2025 GMT
Subject: CN=77bff4c9c4765d8d66b6297b19dcdb664608d081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5d:8c:81:d5:b5:50:02:e0:4b:0e:b0:86:8d:
65:ad:5c:55:00:f5:34:75:30:b5:9a:1f:cb:e1:5d:
15:d4:ac:00:6f:c7:9c:99:4a:cc:83:e4:9d:9a:a0:
b6:5b:2c:3b:cc:1a:20:bd:c7:78:a2:a1:2d:ac:72:
25:21:d8:2c:7b:a8:75:2e:68:87:a0:c7:3a:9e:9b:
1d:8d:ae:be:07:13:2b:f8:11:59:d7:b8:e4:46:c7:
e0:56:d9:33:5f:a2:21:7f:9f:c6:e4:45:21:7c:21:
45:14:bf:c7:79:35:1e:78:a4:da:17:5f:ff:7d:ec:
c7:6f:20:dc:8f:ed:e2:8d:6a:20:98:fd:ee:6a:af:
4d:d1:2b:f2:e1:8f:87:33:39:ee:8f:6b:fd:4b:ba:
99:db:73:cb:5b:31:27:f7:2d:e9:40:cb:00:e9:4a:
de:63:89:c8:ea:03:c8:21:ea:93:df:af:2a:c3:ed:
0f:7d:04:8e:4f:3f:a5:12:66:5b:12:08:ba:fa:5f:
b1:d0:45:3c:a6:30:50:ec:8c:37:08:5f:68:9c:a3:
c0:bf:d5:b2:8c:0d:93:89:1e:a3:b3:01:04:c7:8c:
22:22:e6:f2:b9:de:5c:91:df:38:c7:c1:fc:fa:23:
c1:cb:5f:7a:d6:99:bb:53:57:61:e6:b7:ea:19:4b:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BF:F4:C9:C4:76:5D:8D:66:B6:29:7B:19:DC:DB:66:46:08:D0:81
X509v3 Authority Key Identifier:
keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:10:2f:e7:5b:ca:9c:a0:f2:60:9d:fe:51:af:f9:96:79:c0:
94:dc:d2:6b:9c:be:3a:13:79:9d:23:6b:bb:0f:b4:15:97:b8:
5b:ca:13:e6:f2:6e:81:41:73:91:7b:a1:13:fb:d1:f5:8b:98:
9e:29:af:3d:c4:83:61:fd:93:fa:e4:5b:d9:49:cf:d0:17:01:
0b:01:61:40:d5:4b:22:87:7e:80:f1:12:f5:98:25:a5:81:46:
82:ab:fe:6b:06:8d:15:62:29:c2:1a:44:01:c5:ec:41:9c:43:
b4:ad:d0:c2:b8:0e:b6:4a:00:94:5d:76:89:c4:17:48:4b:f6:
06:65:f9:d2:39:7a:69:d7:d9:c2:7b:ce:3b:03:c1:fb:75:a1:
4f:23:8d:c1:d6:8f:bf:44:f7:0c:29:ac:fc:7c:26:99:9f:d2:
5a:ce:94:db:3b:4d:22:7c:37:03:c7:1b:fa:b5:1b:d7:8c:2e:
6a:9a:f0:63:fd:4f:1b:78:b0:0c:93:3d:0d:0d:73:93:0d:74:
83:ac:3e:6f:9b:ec:40:96:bf:14:51:88:eb:ac:49:1a:aa:df:
e8:ad:19:9f:59:85:01:fe:6b:cb:45:63:71:90:51:0b:58:79:
d5:c9:54:ec:53:3a:66:e6:3e:dd:53:b9:0d:f5:01:0e:aa:25:
06:f1:48:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:47 2025 by rpki-client