Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json)
Hash identifier: Cm4LghgTxdMvRzk6yiSp7SDlszKCRE4kmHwivlPPfZQ=
Subject key identifier: C6:54:AC:3A:40:EE:26:84:F2:F6:8B:08:4C:93:E1:B3:DA:A1:2F:DF
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 019A729358E803F545E8062129245FAB90FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: l0VArl6/wDjIP0+pU3UFdTSgf3TMik6JEJHqWKvAFVY=)
2: apB7016k1B8Xf8viYBYRSP8KhJw.roa (hash: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:58:e8:03:f5:45:e8:06:21:29:24:5f:ab:90:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=c654ac3a40ee2684f2f68b084c93e1b3daa12fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:a1:13:ea:f2:7a:e3:8b:d7:a4:ce:a0:7a:
a4:30:80:e0:8d:c5:fc:88:46:75:9c:37:bf:91:0a:
67:bf:7f:da:7a:67:2e:ae:8d:73:72:73:93:ee:a8:
5d:da:f3:8f:83:e7:67:9f:82:62:23:0a:e3:15:9f:
3b:fd:16:78:90:9d:17:bd:30:a0:b1:c3:e8:03:57:
91:2e:83:70:21:28:60:ae:d5:a1:3d:0e:b3:bf:41:
3c:46:75:40:15:da:11:7b:a7:d1:57:07:92:96:26:
9a:df:60:34:a3:e4:c4:7e:b7:39:fd:da:8c:c5:25:
0a:09:56:da:76:38:79:38:a0:23:c4:e4:84:94:db:
5f:b6:f0:19:0d:0e:59:f6:dc:5c:f7:23:82:00:ea:
1c:dd:8b:b2:82:09:ee:cd:d8:70:04:85:50:ef:2c:
2e:9d:9a:f4:a9:cd:7d:7b:32:02:ca:10:1c:55:aa:
9f:46:97:d4:06:75:91:45:c2:6c:da:1b:e3:a0:db:
e7:ea:83:83:b9:88:52:97:b4:10:f0:b2:2f:82:cc:
65:85:7a:9d:8e:21:34:08:a8:b9:70:6b:ad:f8:79:
74:b4:d6:1c:ee:a0:87:98:1e:f1:a8:49:a2:c8:f9:
fe:72:ff:88:d7:8f:f9:d5:14:e7:3d:75:99:49:79:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:54:AC:3A:40:EE:26:84:F2:F6:8B:08:4C:93:E1:B3:DA:A1:2F:DF
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ee:31:c5:7e:02:2b:fd:31:f8:cf:e3:f6:84:be:3b:1e:e7:
56:3c:bf:58:7a:e2:e0:33:08:55:d8:a9:bf:a2:80:0c:af:e6:
5b:70:26:b2:e4:34:cd:dd:5a:79:01:48:69:78:db:24:4c:7c:
19:f9:fb:16:3a:da:6d:a8:96:58:79:50:c0:e0:68:d9:62:f1:
54:6b:ff:ef:15:a7:c0:b6:e5:0f:82:8d:d9:bf:b4:cc:2c:d2:
f1:c5:42:50:da:af:ad:7c:00:5c:14:2f:ad:e7:0e:ca:b8:db:
f1:1a:a5:92:25:29:07:1e:8a:5b:31:94:31:03:17:34:a6:39:
92:78:6a:be:61:08:8b:8b:3c:5c:80:0e:4c:ef:43:a0:4b:04:
63:f9:17:64:63:ca:1e:d3:93:d2:a8:02:9e:8f:19:67:57:fc:
92:64:5d:14:4e:78:f5:bf:be:cb:8a:53:d2:a8:af:0a:6a:b7:
db:cb:a7:e2:34:0e:57:ee:e3:74:04:4c:0a:c4:13:86:b9:35:
c6:a2:bc:26:61:d6:ab:03:fc:62:14:e2:61:f8:46:d4:6a:ef:
57:ef:98:1c:71:ac:ff:ea:50:0d:70:85:d4:0f:ab:23:cf:13:
fd:82:95:12:dd:42:7c:d8:ad:36:58:78:26:69:50:56:dd:96:
10:f3:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:31 2025 by rpki-client