Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: taUaJIx320qPtusu5gMlzllTm77ZmfZgZ5tN20b+pP0=
Subject key identifier: E8:A7:29:8E:AD:8E:8B:D2:93:15:F2:96:30:DF:21:0B:D3:B0:A6:9C
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 0199FC584C1E988DA956C29074676DBBAC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 15B7
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: 0TtFz6wVP0jqaQNw01V55drmS3k.roa (hash: TMVD5m2P0IJi74IF8JJhCFdWfhDxP8MQCO9QQGNNZr4=)
2: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: qBeJWjfFkEj0fBzebxDLeNvTtnBk1TZTHNfzTmQ/1u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4c:1e:98:8d:a9:56:c2:90:74:67:6d:bb:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=e8a7298ead8e8bd29315f29630df210bd3b0a69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:47:41:b5:00:ff:0a:12:e8:07:04:06:18:
ee:b9:24:b3:92:45:56:e0:95:9c:c9:9d:29:fb:31:
e1:5c:6e:49:1a:e7:37:b6:ea:c3:ae:cd:4b:f3:7b:
68:33:41:2f:8c:ae:c9:43:29:f5:c3:3b:01:cb:59:
1a:0c:3a:d7:64:c0:32:31:b3:e6:85:b8:d7:25:1e:
07:e0:5b:29:cc:0d:43:48:c9:bf:b1:0d:82:b3:2e:
85:26:a1:e1:9e:e4:c5:d7:76:79:27:3b:50:04:4e:
7c:c8:b2:1b:f4:4a:ad:82:c2:d8:47:56:32:b4:a6:
64:08:74:d2:9c:a1:fb:ef:4d:6f:b2:d6:0a:3c:9d:
64:2a:09:57:aa:09:f1:86:f0:8e:4f:93:2c:5a:40:
71:aa:8d:7a:d4:70:f7:14:86:5e:b4:9f:5f:43:8e:
7d:5f:de:da:6f:e9:02:31:e6:4a:ff:6e:cb:db:50:
c9:2c:75:62:41:db:7d:a3:6c:c6:44:50:10:8b:d9:
59:9f:9a:69:20:96:bd:2b:7c:e6:19:b9:e0:1c:03:
c3:89:96:f0:a7:c9:76:1d:5d:6e:2e:08:bf:52:b0:
e5:80:19:68:11:b5:90:9e:13:2f:d1:e6:54:12:dc:
d7:0c:d4:76:7e:b8:ae:f9:ab:ca:4a:e4:56:34:85:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:29:8E:AD:8E:8B:D2:93:15:F2:96:30:DF:21:0B:D3:B0:A6:9C
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2a:98:18:73:37:6d:c5:c7:e4:21:ac:02:9f:6c:f8:49:c1:
99:75:8d:53:29:03:09:f2:3a:ba:83:e3:75:39:2e:d0:78:75:
29:df:4c:d5:15:bf:05:d7:5d:d9:33:1c:ea:29:b9:17:35:1f:
59:03:f0:a2:09:e8:49:84:22:00:65:e8:79:ac:dc:ea:4e:bc:
b6:b8:a1:0c:cf:ef:6e:70:41:31:66:93:6b:06:9f:a2:9f:01:
67:26:77:09:2a:5c:8b:04:03:9b:4e:b0:d3:00:d9:ca:d3:7e:
5c:9c:75:18:86:80:1e:20:c4:28:7d:2a:32:8f:ec:6f:cb:fc:
b0:bc:78:e1:90:aa:73:9d:15:e6:e2:a8:d4:23:8c:a9:37:77:
bb:74:2e:78:6e:eb:79:d4:99:fc:d6:55:7c:df:37:af:09:bd:
df:ac:c6:fa:4e:03:c9:c1:cc:9d:57:e8:be:69:5b:b1:8e:50:
4f:f2:44:a5:ac:ae:19:03:23:42:f1:9c:eb:96:30:3d:fa:29:
89:f9:46:46:8f:d8:4d:b9:32:b1:1c:01:31:07:b8:34:ae:83:
42:4f:bd:e8:9b:4c:e8:f9:c7:96:e4:7b:ee:a5:91:53:5c:e4:
62:eb:5b:1a:6f:3e:de:71:0c:8e:b0:75:3b:53:2d:3f:55:29:
12:a9:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:00 2025 by rpki-client