Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: op2t3PsdtgWHUV9C3Vc+0EyuSWk1kPBO24yiKxgIxgI=
Subject key identifier: 84:74:C7:76:AB:9D:44:AE:14:BE:66:90:ED:54:EF:E2:F2:16:42:E1
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 019A571C26B00BADE7D505F7E30472E234AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 1710
Signing time: Thu 06 Nov 2025 03:00:53 +0000
Manifest this update: Thu 06 Nov 2025 03:00:53 +0000
Manifest next update: Fri 07 Nov 2025 03:00:53 +0000
Files and hashes: 1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: gvrsFAnjwJJ7lCgdsbys3skfPt9wkniQhK3ZATOXQ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1c:26:b0:0b:ad:e7:d5:05:f7:e3:04:72:e2:34:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Nov 6 03:00:53 2025 GMT
Not After : Nov 7 03:00:53 2025 GMT
Subject: CN=8474c776ab9d44ae14be6690ed54efe2f21642e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:b3:fd:25:71:34:8f:67:b9:08:c2:d1:d6:
ee:ea:98:6c:30:53:92:cc:6b:ad:22:53:07:af:0f:
b3:24:31:f6:e1:c6:3e:3a:f7:7b:d0:03:6a:f9:76:
b5:bb:d0:13:a2:74:20:5a:dc:c5:73:23:df:94:9d:
79:f3:73:64:58:4d:65:14:47:95:bf:4a:dd:ae:35:
c3:78:99:f0:1a:da:bb:8e:8b:83:f8:30:4b:8b:fb:
f0:c0:84:09:8d:20:49:3f:7b:cb:42:c1:54:9a:cc:
dd:2f:08:69:02:da:ac:69:50:56:c7:40:65:b3:07:
eb:88:8a:88:08:53:37:ff:ba:54:b1:89:b0:65:e4:
14:bf:66:e1:09:ce:07:44:15:69:a2:5b:d7:19:71:
9b:91:26:b2:00:da:5d:cd:5f:98:d0:ae:e1:ad:b3:
78:ef:af:b2:ba:97:f8:83:54:fc:ed:94:8f:9f:6c:
bd:65:68:df:42:04:5c:d0:e5:3d:7b:f5:7e:a9:08:
ab:49:79:09:53:6e:b5:21:4a:a0:09:6f:9c:93:91:
27:43:19:b9:3a:ab:e5:a3:e1:4c:30:45:d8:76:86:
c2:f7:5d:8f:d8:8c:00:d2:3e:bc:d1:89:52:f5:73:
69:19:9c:a2:13:b3:fb:8b:94:c4:45:8d:e5:64:49:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:74:C7:76:AB:9D:44:AE:14:BE:66:90:ED:54:EF:E2:F2:16:42:E1
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d8:7a:d9:62:89:e1:93:c3:7e:c8:20:7f:cd:17:6b:b6:bd:
79:ed:98:ad:a0:d9:16:a6:ab:20:e3:d9:aa:77:2d:2c:0c:e3:
93:56:79:10:9d:13:b0:4a:aa:79:fe:0a:6d:da:f8:1f:82:0d:
2e:00:86:f1:00:cd:1b:4a:e8:af:cd:89:a0:ed:72:b2:3e:6e:
a8:a1:39:79:e2:cd:2e:07:e2:f7:b8:72:6e:08:36:1b:ee:f5:
1a:08:9f:bd:44:a5:43:4a:01:02:48:7f:03:74:00:af:68:b0:
37:7e:28:d3:ff:f2:b3:c7:a8:d0:6c:fa:8f:6e:df:2b:31:e0:
1b:20:f7:a5:75:1e:3d:5f:a9:b1:4a:91:06:03:b9:19:2b:9f:
ab:e5:b9:b2:92:6d:af:99:0b:84:14:51:67:bc:e1:22:dc:5a:
94:9c:12:24:d3:d6:be:ac:80:90:dd:ba:9a:c9:6e:65:e8:72:
1a:be:14:2b:da:26:11:e2:93:dc:24:3f:32:91:aa:4f:8f:ef:
09:9b:5b:46:fd:b1:16:8c:6a:0b:65:ee:73:0e:8e:ce:10:d0:
7d:99:d9:e2:84:5d:8e:0c:7b:b6:a3:99:c0:42:29:6b:8f:39:
01:93:c8:22:3a:2d:d6:e9:f5:65:87:f5:63:d8:b6:e3:81:a9:
0f:59:eb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:53:00 2025 by rpki-client