Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: X0TMBRpqKLJhys1FDasHKm2+QZKM1YylIIZQOiraOPY=
Subject key identifier: 2E:98:DC:97:B9:B5:2B:CB:E1:1B:BE:6A:4E:43:88:0D:B2:76:9E:3F
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 019A71EE6853BAFF79CEBAEF575182D16568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:40 +0000
Manifest this update: Tue 11 Nov 2025 08:00:40 +0000
Manifest next update: Wed 12 Nov 2025 08:00:40 +0000
Files and hashes: 1: SOjICIUf3Q5KcvZmv_NHH5baNJY.roa (hash: CIXb+faY/LyAGhWDjXy0Uzmt28hgw4zuuv1ZndxzjNQ=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: J/hOGTvZXGzVi5XEuVPsM7+RhC7ziBLOHhb6vK41HEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:68:53:ba:ff:79:ce:ba:ef:57:51:82:d1:65:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Nov 11 08:00:40 2025 GMT
Not After : Nov 12 08:00:40 2025 GMT
Subject: CN=2e98dc97b9b52bcbe11bbe6a4e43880db2769e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:fe:04:6a:a5:ad:2b:d1:4d:36:ea:d2:1e:
aa:a6:46:4c:00:26:a6:f3:12:a1:46:6d:83:62:ab:
b4:18:ea:1f:b7:d3:62:75:ca:dc:11:2a:34:5b:73:
e9:78:f1:71:ea:18:34:c8:82:b1:3e:88:a0:71:94:
34:c1:c3:a6:e9:ce:db:fe:21:d9:70:59:4c:74:6d:
17:ea:34:61:0c:3d:28:76:dd:67:41:03:7b:ba:c3:
b3:6d:3f:b3:e7:3d:b8:e2:5e:df:81:b4:7b:ea:1e:
b7:c8:a0:fc:65:8f:6a:1e:2d:94:2d:99:4c:6f:1b:
cb:1a:6e:62:1f:6b:c0:b8:29:35:17:f1:95:0f:fa:
0d:96:ff:95:3f:48:cf:83:ee:4e:78:a5:b7:75:18:
10:a5:12:5b:c9:77:54:99:04:5c:6e:77:8b:e3:86:
29:01:df:c6:31:d6:d9:6c:07:3b:2c:b8:6f:83:0e:
7e:c5:8e:b8:ac:32:cc:ae:3f:bf:98:3b:b1:5c:f5:
2f:e1:65:0b:a9:54:0f:bf:86:40:73:39:17:3c:9b:
c2:fb:e9:23:21:26:f8:5e:7d:22:39:dc:7e:e2:70:
13:17:2d:82:e8:eb:bc:0f:b8:89:e8:25:ff:8e:75:
0c:aa:f8:04:b7:42:02:e2:b4:21:e2:05:2e:84:77:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:DC:97:B9:B5:2B:CB:E1:1B:BE:6A:4E:43:88:0D:B2:76:9E:3F
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:10:3a:bf:77:4f:de:55:5f:76:16:c0:c2:35:db:b9:7b:bb:
83:29:ef:38:02:d5:eb:98:fa:0b:8d:37:50:79:5c:25:ef:1e:
16:01:c0:28:eb:91:00:53:6d:79:4a:c7:7b:60:34:5e:4b:58:
cd:74:ef:7e:9f:28:5b:05:30:47:0e:fc:51:d7:8d:14:0e:84:
11:48:56:94:e0:4d:21:67:46:67:be:dc:90:9c:85:2b:3e:3b:
b6:8e:13:be:e8:6f:70:ad:54:88:2c:13:47:b9:24:dd:a4:30:
1a:8c:fd:e6:43:0d:11:16:1f:08:e7:df:39:23:4a:c6:db:8d:
26:b7:32:46:72:a5:b3:ec:1f:0a:95:3a:00:43:17:d2:35:9b:
fd:d4:9a:04:5b:81:c8:cc:38:c6:1d:b5:5f:f2:f2:b9:ed:a5:
25:ba:c3:f5:c2:51:c0:ac:25:35:a1:2f:e9:ce:66:ae:eb:87:
73:0e:59:8a:50:7e:7e:d9:d9:e8:ed:0e:cf:40:ff:29:42:78:
11:9c:e3:64:31:fb:63:cc:29:c1:66:c9:c4:23:26:4b:c4:7e:
07:43:03:be:72:2d:36:ed:bd:3b:d5:e5:42:a1:60:df:a9:5a:
14:f5:c3:a0:f8:18:da:53:e5:8c:3a:b6:60:f1:a0:dc:27:30:
16:8b:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:34 2025 by rpki-client