Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: zoen/xqym5DzOE+ClCRjLo22Ua19XvunLccrBYXa08U=
Subject key identifier: 44:5C:7D:69:2C:48:8F:BF:E7:C8:FB:9E:E5:21:F0:B2:22:86:CF:D9
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 0199FDD9A9DC66BF164F5F5D8ABBE820EB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:04 +0000
Manifest this update: Sun 19 Oct 2025 19:02:04 +0000
Manifest next update: Mon 20 Oct 2025 19:02:04 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: jBuxgh4ZQoVYb3Tj1QudJ4PiOIzS+wvlveKYx+UHBZ0=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a9:dc:66:bf:16:4f:5f:5d:8a:bb:e8:20:eb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Oct 19 19:02:04 2025 GMT
Not After : Oct 20 19:02:04 2025 GMT
Subject: CN=445c7d692c488fbfe7c8fb9ee521f0b22286cfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:88:21:40:51:24:38:35:2f:be:51:cb:2a:
17:4c:34:f1:0e:a4:4f:9d:dd:60:97:2f:3d:bd:88:
07:12:0c:e8:aa:38:ef:99:54:ca:dd:1a:c8:07:61:
24:65:60:e8:b7:ee:89:0d:a2:d7:e1:4b:99:21:9b:
8d:c0:4f:4e:6a:eb:fb:ba:b3:9a:14:2a:8f:ed:ea:
26:be:d4:87:b4:49:51:bd:30:fd:8a:31:2e:41:2d:
70:6e:f5:ae:4f:57:d1:d4:4d:8e:06:5f:a4:f0:3c:
14:e6:b1:45:9b:a9:09:50:67:5a:aa:1c:aa:b7:1b:
ac:84:d7:88:17:8a:8e:9b:f3:52:51:5f:f0:b7:f9:
be:81:fa:c4:b3:b0:4b:76:f2:8c:46:77:b6:34:d2:
87:bd:a9:d5:c2:42:2d:e5:65:5d:49:2a:97:4a:68:
c2:f3:6e:01:67:e2:3b:43:d4:80:0b:fe:1c:60:f6:
44:08:79:78:db:22:80:83:15:2c:c8:52:18:75:11:
59:71:ea:d7:02:b2:66:2d:c6:15:11:1f:8b:60:14:
11:58:e4:1b:56:c0:89:2e:b8:f5:84:80:d9:ab:31:
42:e4:1d:89:8a:41:6f:5f:cc:bf:5f:8e:69:d1:cd:
5e:30:3a:e6:b1:6e:74:3c:6d:04:de:77:71:ca:6c:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5C:7D:69:2C:48:8F:BF:E7:C8:FB:9E:E5:21:F0:B2:22:86:CF:D9
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ee:8d:06:7c:82:98:79:b3:3f:75:b7:aa:f9:78:d4:e8:fd:
ce:85:11:b8:3f:e2:f3:d5:c4:38:b8:49:88:1a:a7:e5:7c:08:
8b:83:04:19:db:e3:b4:af:6a:97:66:ae:1b:4e:25:24:6d:40:
f7:87:fa:f8:1f:3e:e3:98:a8:6b:3e:1e:61:a2:e3:d2:b3:3a:
fd:92:77:7a:38:7b:0e:54:72:8a:24:4d:e6:eb:7a:66:f3:87:
75:ee:5f:84:ef:05:fa:7e:c9:6b:46:54:7f:c3:80:08:ac:ce:
cd:09:03:90:fe:9e:d4:5d:db:c1:3c:85:ba:3d:00:53:64:cd:
30:a5:29:20:4a:c7:a8:c3:54:58:3f:6f:6b:a6:b5:06:2c:37:
bc:bf:b2:66:57:66:46:51:e7:e5:02:77:23:de:c6:29:8d:a1:
e5:b4:a3:7d:0b:fb:94:3a:65:cc:de:59:6e:c5:4a:aa:42:f1:
d3:52:2d:6d:ed:f3:9e:7c:b2:2f:7f:2b:1d:f7:8c:c3:26:4d:
eb:34:f1:4c:db:62:69:df:96:76:66:ba:80:14:eb:35:cc:5a:
76:08:00:d0:8a:02:f6:a9:d2:20:bc:a4:77:14:35:91:e7:9b:
37:f6:3e:b4:2a:98:c6:5b:55:7a:de:b1:6d:cb:d3:68:be:9f:
9c:45:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:10 2025 by rpki-client