
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: przqWOYkHxFOatJYW5dla/aebcpcnLfZn1+oDoUupks=
Subject key identifier: A2:B2:80:7A:FC:98:B1:93:3D:BE:AA:DF:14:DC:39:41:E5:6F:A5:80
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 019A0335ACB8B011C165FF4D41C487A77D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 20:00:40 +0000
Manifest this update: Mon 20 Oct 2025 20:00:40 +0000
Manifest next update: Tue 21 Oct 2025 20:00:40 +0000
Files and hashes: 1: 8gQzPchz9vCwdjVN_ZBPueH3G6Y.roa (hash: Z7w2/N0mbKOYhB3ua7HBgoWG65DoIXePIy8hWS+i+vg=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: TkAoY2feZ7yrhDaWUwUxyMX6fo5GrXADzWv6+jJJ1qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:ac:b8:b0:11:c1:65:ff:4d:41:c4:87:a7:7d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Oct 20 20:00:40 2025 GMT
Not After : Oct 21 20:00:40 2025 GMT
Subject: CN=a2b2807afc98b1933dbeaadf14dc3941e56fa580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:35:c3:f8:fb:7f:d5:39:49:54:6f:0b:53:
0f:6f:15:0c:54:d1:84:b7:af:c4:62:99:b0:0d:e1:
14:75:80:21:b6:d0:f2:0f:af:7f:81:aa:88:9b:8f:
97:5e:0a:31:0a:9a:9c:d8:99:d8:eb:c5:e4:d6:e6:
d3:05:bb:ab:e1:8b:b2:ff:fa:45:cc:a4:75:41:b5:
4b:8d:7a:23:12:ca:7b:72:a7:cf:af:68:cc:7d:0c:
11:ef:26:c2:57:02:5e:f4:b1:3e:87:9b:7d:29:f2:
f7:5e:4a:37:0e:35:6b:2b:3c:62:7c:9f:64:8c:07:
ce:38:2c:c7:4b:5e:a3:9b:63:3b:09:70:a3:d1:89:
9c:81:5f:50:4a:c1:3b:77:78:5f:e2:c9:c0:40:93:
9e:cd:3e:e7:e3:7f:f8:68:05:01:f6:aa:58:68:26:
68:18:4f:d4:a9:aa:cd:fa:47:9a:65:d9:ae:f9:ad:
8b:fb:b1:87:85:2b:ef:d2:24:94:9b:63:bc:01:83:
c7:f1:87:63:d5:23:a5:12:42:9a:7a:e7:a0:53:6c:
a1:2b:10:4d:9b:bd:54:1b:63:6f:91:95:13:16:79:
ff:43:80:b0:3b:1b:29:c3:d9:c7:d3:ee:02:ed:a4:
ba:f7:31:7b:1c:96:92:4a:96:25:51:0d:e0:72:c6:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B2:80:7A:FC:98:B1:93:3D:BE:AA:DF:14:DC:39:41:E5:6F:A5:80
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6f:21:c3:e3:ca:e4:0e:69:6f:d8:44:13:f8:3e:dd:93:ee:
a6:cc:04:0e:ad:d2:e1:ca:de:29:dd:10:02:5f:74:88:b5:b7:
e5:68:74:15:d0:18:d3:26:5e:ba:38:6a:7f:27:fe:9e:05:65:
ea:25:0b:3f:51:9e:4f:18:54:86:11:37:10:a2:5e:69:a0:97:
f6:a4:41:0e:48:a6:44:d0:f7:0a:fb:cb:a4:c6:3d:11:1f:e7:
e8:59:04:d3:b2:09:9b:26:19:bf:7a:e2:ec:f7:4e:5c:d4:5a:
10:30:0d:20:5f:29:5a:d9:67:6e:20:30:09:49:c8:8b:af:35:
89:0e:0a:eb:22:0c:03:41:f1:83:45:76:7a:3e:fd:1b:5f:23:
cc:0f:7b:e4:5f:94:f0:a4:35:77:47:46:57:e6:1b:56:1a:3d:
b0:4b:2d:c9:85:e6:5d:27:74:a6:7a:37:1a:54:98:5b:dc:dd:
71:d6:c5:54:42:2a:79:36:b8:a1:61:ea:9e:a7:14:9f:f9:63:
4c:04:a6:16:6c:75:34:f3:c2:6b:4a:6b:11:13:25:c8:fa:a2:
15:d5:b5:c5:b2:b0:c3:4e:48:7b:e1:8d:5f:54:ac:f3:8b:d6:
b4:a9:f4:d9:9a:cf:35:fa:96:21:85:f4:ad:9d:e5:43:6d:50:
26:67:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:59:11 2025 by rpki-client