Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
File: Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json)
Hash identifier: t0N+/BXPcezvWuQQFrROM8qs1Y4oh5V0+1eZ76K2prw=
Subject key identifier: A0:AE:C5:2F:45:11:B4:F9:B4:01:79:53:47:85:D9:8E:4C:71:36:D9
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Certificate issuer: /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial: 0199FAD867470A9274D4E3D388453AFAB77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 05:01:50 +0000
Manifest this update: Sun 19 Oct 2025 05:01:50 +0000
Manifest next update: Mon 20 Oct 2025 05:01:50 +0000
Files and hashes: 1: BLUnMEvzOCDdig3vAOJNkanKcVQ.roa (hash: FOxz1hyJdKlYisYef78m6hR6cwVT1BQH7/wecUVrCqc=)
2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: 1jL383Nu9y52zudNHQF4H7EvgW0y0zrKpnBNh/Cnow4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:67:47:0a:92:74:d4:e3:d3:88:45:3a:fa:b7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Validity
Not Before: Oct 19 05:01:50 2025 GMT
Not After : Oct 20 05:01:50 2025 GMT
Subject: CN=a0aec52f4511b4f9b40179534785d98e4c7136d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:dc:67:4f:3b:f8:e3:56:05:6d:38:3a:3e:
f8:e5:04:db:95:52:fb:bc:07:8f:44:a6:ec:97:7c:
90:90:49:8d:57:e6:ae:61:da:34:02:51:01:dd:65:
29:69:c1:e0:0c:27:12:7a:78:9c:ef:a8:5f:36:30:
f2:14:13:0f:4a:89:cc:5b:98:28:e3:25:61:22:81:
19:98:2b:1d:1d:af:62:e2:f4:74:b1:0d:8c:30:cf:
68:86:c4:dd:f4:49:03:56:d7:70:2c:78:9e:bf:3d:
85:ba:b7:c2:ca:ea:e8:ea:b8:fb:fa:fa:f4:47:59:
32:dd:aa:ed:51:c0:83:6f:d3:d7:e2:dd:65:fe:80:
25:36:55:6c:a1:f3:c3:04:cc:a0:f1:e9:21:b9:b1:
03:6b:e8:7d:58:2c:2f:b4:8b:26:13:e5:d1:9c:8c:
2a:c7:41:a3:bc:8f:83:04:98:5e:c7:57:c7:c9:c5:
89:06:8d:36:e3:a3:54:95:9e:45:9f:7f:e9:c7:15:
3f:0e:95:5e:8d:f0:f2:31:b5:ca:39:4b:9f:f8:53:
78:6b:18:d9:d8:a3:09:ab:1a:12:98:75:8f:cc:3e:
cd:70:8f:03:f6:7d:48:74:4f:6e:b3:b1:64:c7:87:
22:82:67:23:37:84:97:0f:d7:c0:9a:b7:14:b0:d3:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:C5:2F:45:11:B4:F9:B4:01:79:53:47:85:D9:8E:4C:71:36:D9
X509v3 Authority Key Identifier:
keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:af:4b:7e:20:78:84:03:eb:68:5f:81:24:c5:3d:01:21:c7:
e6:51:5f:f3:4c:40:5e:42:c8:80:4e:28:89:99:f8:19:af:5c:
77:62:8c:ac:51:29:1c:b2:f6:4b:66:2c:0a:97:f4:ba:ca:1c:
3d:27:b2:19:56:c1:47:bd:62:02:5c:f9:a6:9e:c9:81:d0:a5:
0c:50:e6:36:2e:7a:90:6e:ba:d3:8c:54:08:4e:ba:af:eb:7e:
ad:0f:4e:60:8b:6b:d4:14:70:ec:e3:18:6a:f6:47:0a:56:e4:
9d:d0:63:0e:a8:ad:e7:94:7e:b0:2a:d6:b8:32:55:1a:8d:87:
53:54:ba:96:9a:cb:b8:35:90:1e:75:6a:ea:ae:87:f4:df:fa:
17:3b:34:8c:36:cf:d3:fa:45:5d:d3:f7:8d:52:0c:73:8a:1f:
5d:68:cb:42:4e:ba:18:d0:ad:b1:69:df:c2:29:00:a0:b8:23:
c0:3c:db:b4:e6:27:e1:40:8a:c3:39:70:ed:bc:ff:c1:d0:e0:
12:b5:03:63:c6:c2:42:d6:8d:26:4c:a8:27:b8:72:17:5a:1f:
90:db:18:c7:15:c0:f5:6c:50:90:8d:d7:c5:43:f7:c5:22:15:
ab:5c:eb:91:4a:21:4c:62:a6:77:0f:ff:09:57:0d:32:29:79:
38:e1:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:48 2025 by rpki-client