Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: KEm4uKYuCqNuJHt4kJJ5v1KxehPDwSwdtZnQ0+9M/DY=
Subject key identifier: 0F:98:31:E6:80:50:7E:DF:DE:82:0F:52:8A:47:05:32:F1:88:7F:15
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 0199FC8F4E0238642C40B6AB90132AD5A9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: IwNnMumHuRi32I7ksfRxTLj5SGU.roa (hash: CRwLwpZrZ0WbgGxRhGmhgHh8+Fm0a0d8zmfWAizQF84=)
2: X1s8zvuHJ81hdIgP19R2zatnWy0.roa (hash: zIp2gzAGnioL2V7YTZ/nOIwk4pKLhlEEq3/Z8mzK0KQ=)
3: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: NqZ94nqXSS6TA66qgwBsSVecaEK6j5Ca0iIL/DUCTVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4e:02:38:64:2c:40:b6:ab:90:13:2a:d5:a9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=0f9831e680507edfde820f528a470532f1887f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:28:d9:ed:94:89:bc:51:a7:e1:ff:9a:5b:
ca:ff:74:04:b9:f9:65:ed:ea:48:fa:f3:40:2d:48:
7c:b7:fe:f4:c9:31:e7:fd:dd:25:4f:fb:e4:10:64:
a4:f5:bd:17:f9:3a:fc:77:aa:89:ab:5d:6b:df:f6:
c1:a8:61:4a:3f:d0:ac:c8:da:55:7a:73:87:91:8c:
78:d1:85:03:56:e0:4b:99:96:7c:ea:88:5a:b1:a1:
9a:b8:45:5a:fd:35:0e:7a:91:47:93:04:2b:f4:10:
3f:f8:ab:f8:35:03:5f:97:3d:42:a4:4c:0e:82:ef:
07:a5:a6:00:70:cd:c5:af:1e:c9:e7:2e:55:46:27:
a7:1c:58:c3:e1:ca:69:74:be:58:9a:19:51:1d:a1:
72:7a:a9:db:35:78:3e:44:ce:43:37:47:59:b7:7f:
05:3e:88:43:78:0c:9c:fd:7a:ec:4e:b3:21:32:d3:
22:ce:f4:ac:71:2a:8c:16:f3:84:8d:a8:18:d6:6c:
fa:55:e4:6e:97:96:ec:c3:7f:62:ff:c3:6a:58:b9:
0a:64:d8:f5:c8:60:11:67:ed:ed:f1:7e:7c:66:98:
ce:8d:94:5a:88:71:7e:e6:39:78:41:e2:31:be:99:
cd:b5:e8:ca:b3:0c:18:0b:8b:58:36:04:98:7b:a8:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:98:31:E6:80:50:7E:DF:DE:82:0F:52:8A:47:05:32:F1:88:7F:15
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:24:d9:79:7c:37:e9:6a:be:53:0d:ad:83:80:e9:89:97:02:
ed:7f:f3:08:16:e3:ea:82:35:9f:fb:5c:b8:37:db:c9:b2:88:
29:1a:45:b0:e2:f2:ca:c7:f9:18:7f:04:28:7e:fe:a0:f0:44:
42:d8:c3:df:25:a9:8b:19:cf:7f:b5:ea:f5:4f:3b:c4:09:d4:
98:89:40:93:04:40:bb:01:a0:20:e6:9b:b4:a5:e9:f4:83:6b:
15:c9:1c:96:d5:4a:cc:6d:01:ee:bf:ba:7d:39:76:67:63:71:
e7:82:8e:88:89:3f:37:74:df:66:7c:f5:6e:70:44:d8:27:09:
15:d7:4e:fe:2f:b2:fc:b5:99:fb:98:93:ac:12:97:d1:02:fd:
70:bb:85:d7:09:39:22:b9:4b:b7:e7:8d:b0:6a:8a:f0:df:1d:
02:85:e1:af:14:20:1c:10:06:26:6d:54:ea:d7:d5:28:26:be:
6a:81:7a:6c:6d:3d:b4:ec:63:09:9e:2b:49:0b:da:1a:7a:14:
72:ca:9e:44:db:81:17:9e:3d:a8:c3:64:f2:9e:d4:0c:1c:0b:
56:55:04:4b:55:ee:c9:71:75:0c:68:9b:be:e1:b2:4e:e9:37:
2a:48:52:ba:4a:8d:07:dd:aa:e2:60:30:34:e7:ef:71:46:a9:
36:0c:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:15 2025 by rpki-client