Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: w5Qkax0byaRL+k1hCJcj0JVGWypocu2XibH8LvY7bzI=
Subject key identifier: 13:F9:C0:E5:8A:EE:D8:5E:98:9F:27:7A:B3:73:07:AE:A9:B8:56:1A
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 0199FDD9359E4DA110F3515791C3CDAC9DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:34 +0000
Manifest this update: Sun 19 Oct 2025 19:01:34 +0000
Manifest next update: Mon 20 Oct 2025 19:01:34 +0000
Files and hashes: 1: UGjGolH12_x3cCDDDs-wfhhaN4U.roa (hash: FV6D5mk0nwiH6BRySmQ169aN1Z1SEVl4Kc/yfJEULos=)
2: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: m2dZU5lRATcvRJ4L1a5dR9ELCkgoi53e9Zn/bHxDsN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:35:9e:4d:a1:10:f3:51:57:91:c3:cd:ac:9d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: Oct 19 19:01:34 2025 GMT
Not After : Oct 20 19:01:34 2025 GMT
Subject: CN=13f9c0e58aeed85e989f277ab37307aea9b8561a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:80:f5:cb:8c:f9:75:50:48:67:75:b8:24:
f1:bc:42:44:af:93:53:de:38:fe:dc:9c:4c:71:01:
31:5f:0a:5a:08:16:7e:47:41:ee:57:27:0d:fd:ba:
54:41:17:8f:02:c9:b6:12:47:fc:f5:d6:a9:0a:9d:
20:9c:5e:ee:7a:32:47:eb:32:fc:18:21:17:93:d4:
42:1c:6a:94:24:d4:1b:5b:ca:14:2f:0c:60:fd:9d:
db:f5:24:a3:e0:55:28:65:dc:31:1a:4d:ad:25:ce:
f6:fe:10:43:9a:69:f7:db:2f:d1:bf:d2:a7:59:5a:
c7:03:68:d5:94:8f:e6:8b:0c:07:e1:7f:71:7d:be:
bd:98:d8:04:8d:cf:fb:8d:8d:5d:47:bb:82:23:fc:
23:11:d8:39:4a:8a:6b:f2:b3:f6:92:ef:31:e7:61:
42:3b:86:90:cf:76:8c:0e:a9:fd:d3:8d:5c:f7:ea:
e8:56:1f:92:85:52:64:2b:0d:19:30:95:55:15:be:
39:8b:1e:e5:83:9b:c2:12:16:21:53:43:34:a5:66:
ca:a5:4d:19:97:cc:44:81:ac:89:ff:ef:0f:a6:37:
e6:b5:17:3b:2f:e2:0d:6b:33:9e:e2:eb:75:0a:18:
3d:78:7b:4c:39:8a:f2:bd:02:4c:1f:c6:16:5f:07:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F9:C0:E5:8A:EE:D8:5E:98:9F:27:7A:B3:73:07:AE:A9:B8:56:1A
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bf:f7:0c:f7:84:1a:a5:e9:dc:86:0a:5b:bd:00:36:3b:13:
02:ad:0d:c1:1e:1a:37:1e:70:44:87:99:fb:af:4e:85:f2:d6:
20:3a:e8:77:97:e7:5f:25:48:ef:3a:d1:cc:18:09:68:26:71:
c3:d9:5e:37:81:f9:52:dd:7e:07:07:20:60:54:4e:75:f0:2b:
b0:8d:8d:36:1f:bd:78:19:9e:ce:d1:22:f5:73:04:4d:48:f1:
99:b5:8f:9e:9e:68:15:31:bb:54:98:2b:5d:7e:e7:6e:e0:48:
cc:3f:31:ea:2e:8b:d6:27:ee:da:ce:fa:11:42:40:d7:04:38:
90:10:4c:7c:09:a2:b6:d0:e6:d8:00:9b:93:9c:78:cb:5f:9e:
1f:f7:f8:24:b6:f6:97:bb:6d:7e:08:7d:cf:50:64:c7:2c:ca:
4d:97:8e:d4:5f:bd:64:49:70:ac:6f:5d:ab:88:e3:3f:6f:0e:
8a:16:a3:dc:d1:a6:98:42:cb:f8:9d:7d:d8:73:5c:3d:66:ab:
6b:55:f6:65:66:e7:7d:c1:ad:2c:63:48:74:60:61:77:38:86:
2d:30:cd:8d:22:0a:11:6a:62:c4:3d:4a:d9:c3:b1:7d:b0:e7:
ac:3b:98:6f:68:fc:8e:7a:7a:3b:c2:b8:96:b9:69:40:3a:58:
ab:62:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:05:45 2025 by rpki-client