Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier: Tk7GbNFz7nsuKK1wzH3Qsj6txfWlFssuYeUhOM9Fl50=
Subject key identifier: 4B:7E:9D:A3:6F:A4:6A:C4:6C:87:4C:0E:DB:8D:42:3E:98:FD:77:7F
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial: 019A2409E5378B81807180814BBBD41FD3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number: 4C
Signing time: Mon 27 Oct 2025 05:00:19 +0000
Manifest this update: Mon 27 Oct 2025 05:00:19 +0000
Manifest next update: Tue 28 Oct 2025 05:00:19 +0000
Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: dlQNqcEFKm5oCYCkorRtF3vhqJ8aXMYw882VXq7hWvA=)
2: qdMXO5dxGNkyeRydnMIi_ZzZAVs.roa (hash: emXh4czyfau1VXJaPAfpRR7uc8vhZu0P1DoeRXNpxPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:e5:37:8b:81:80:71:80:81:4b:bb:d4:1f:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Validity
Not Before: Oct 27 05:00:19 2025 GMT
Not After : Oct 28 05:00:19 2025 GMT
Subject: CN=4b7e9da36fa46ac46c874c0edb8d423e98fd777f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:cd:ef:13:68:c7:63:fc:3c:27:2d:d0:74:
f2:8c:a2:2a:d9:40:40:ca:e7:f0:fb:98:c9:ef:31:
3f:48:41:a5:fc:9f:a7:ec:55:26:ea:0c:d2:32:99:
14:d0:3f:cf:9c:6e:66:e0:54:1b:4d:38:4f:90:b0:
29:c0:e3:6b:1a:28:1d:e1:e9:dd:de:ae:48:67:36:
39:9a:11:28:bb:11:c5:8a:74:de:aa:70:3a:d1:11:
04:95:04:87:62:7a:51:20:69:a6:5c:a3:62:45:ca:
49:1b:30:11:8f:f7:da:a2:ff:c4:1c:67:f2:6e:67:
d0:cb:cb:08:3e:ef:8f:87:fb:8f:84:46:42:9e:c4:
a9:45:ec:b6:56:fe:eb:06:dd:e5:cd:fe:12:7f:e4:
1e:f0:28:1d:0c:a7:81:15:62:a7:8e:0c:5b:1f:b2:
d9:f2:27:37:71:33:e9:96:58:33:5e:55:c9:34:60:
03:71:66:26:24:99:64:2e:3d:af:8e:01:ef:20:58:
92:37:bb:17:2c:e0:7a:95:47:18:0c:b5:9d:d0:b9:
c4:62:af:a6:47:b8:2f:19:a1:a3:d7:12:6b:52:18:
bf:76:6a:47:eb:7d:78:ec:d8:a3:37:07:46:28:29:
26:84:b9:c1:c8:62:6e:1e:f3:a2:16:57:21:4c:9d:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7E:9D:A3:6F:A4:6A:C4:6C:87:4C:0E:DB:8D:42:3E:98:FD:77:7F
X509v3 Authority Key Identifier:
keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:16:ec:64:26:f8:98:50:51:92:97:14:64:d2:01:db:79:a1:
1b:f2:ea:6d:cd:98:3a:bb:f6:e2:67:00:be:98:5c:a4:fc:2e:
ec:a4:a8:a7:1b:ac:96:ab:87:10:91:5d:14:36:d0:4a:06:c6:
bc:1d:d8:45:7d:fb:e6:84:11:82:19:0d:9f:28:bf:3d:94:f5:
80:0e:1b:34:66:2a:21:6f:ca:40:ff:9c:47:d9:d5:da:67:40:
f7:2a:97:ed:cb:e5:af:71:0d:91:cd:ed:d9:75:4e:2f:16:a9:
d6:bb:ce:4f:2d:91:3b:28:1b:c9:a9:5b:a2:f5:50:14:55:7d:
cd:38:2f:b2:40:99:46:2b:8d:16:fe:e8:41:bf:21:38:f9:40:
b7:36:8c:b9:83:03:e6:a8:6a:8a:15:2e:5b:c2:1a:6c:af:1a:
f8:70:c9:ae:b1:09:a2:0a:f5:18:37:b6:f6:a8:c4:a4:04:d2:
52:a3:db:2f:51:34:52:cf:e4:c7:34:b1:af:ff:e7:b1:cd:a4:
aa:3d:78:c0:ed:0e:ee:7d:5e:e7:5f:7b:71:18:a1:e4:f9:8a:
69:58:67:9e:02:d5:33:44:4c:5d:70:0d:0a:41:6d:1c:bf:04:
c2:c0:7a:43:ab:34:56:f2:e7:41:da:c5:ee:6f:46:b9:be:58:
03:14:61:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:15:37 2025 by rpki-client