Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier: 2CweaGJDOc5IRHirO04JJSxqmwAZTu2L8683W3AuTIw=
Subject key identifier: 73:03:9E:F0:35:56:7F:9C:35:AD:A7:1C:B0:CB:02:64:AC:31:80:4A
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 0199FC58B1BB02342FB3CF37EBAD39A8F2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: 924u1xvlcpu6ia/wLwEdmpdM9XR4xoYNMg9pekPUKrk=)
2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=)
3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b1:bb:02:34:2f:b3:cf:37:eb:ad:39:a8:f2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=73039ef035567f9c35ada71cb0cb0264ac31804a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:05:95:47:37:9b:64:a9:0f:bb:60:24:98:
1e:63:6e:e8:0d:57:da:45:c3:f6:09:de:56:d9:ff:
36:cb:15:b4:d8:b1:52:59:5b:a0:07:6b:a0:f4:27:
86:26:00:bb:3a:9d:8a:44:3d:1d:c7:77:82:d6:21:
96:5c:0f:ee:14:66:f6:7b:b3:66:36:ed:17:e1:04:
f0:06:3f:56:84:4e:8e:da:f5:52:55:96:38:6b:02:
87:68:3a:00:85:2d:2e:db:96:86:98:74:6c:80:4f:
ed:b6:67:14:20:a9:d4:43:d6:31:9e:ee:84:f9:d2:
2e:3a:c9:a2:0e:99:b9:24:32:0b:db:a9:f0:33:6b:
7a:f8:a8:d3:8b:61:44:09:50:d0:5f:d5:1d:09:e2:
3f:07:fb:37:ff:20:19:b5:61:c7:43:ec:b6:3d:53:
ab:3b:67:ff:7d:66:44:b9:ea:a9:d1:8a:93:5d:6c:
ca:c1:36:b9:aa:66:95:02:f3:de:60:9b:7d:2d:40:
20:ae:5e:cf:46:65:2e:be:c1:ba:36:22:46:53:e6:
0e:de:d7:69:55:98:16:bf:c5:80:d5:1f:3a:ea:64:
2a:2b:7b:65:d0:79:0d:11:10:2e:88:e1:e8:68:40:
a0:3d:8e:e3:7b:10:95:27:b3:36:a7:82:f0:64:35:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:9E:F0:35:56:7F:9C:35:AD:A7:1C:B0:CB:02:64:AC:31:80:4A
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:24:3d:b4:3f:16:87:69:af:a4:0c:82:59:72:d3:88:76:e2:
02:76:14:e4:c5:08:5b:79:43:9a:94:5e:59:55:87:66:12:d7:
52:5d:e8:45:72:52:83:80:86:c7:9f:6d:61:83:f6:96:6c:7d:
d8:5a:4b:35:30:0e:76:9e:76:c0:22:39:6b:e7:15:b8:99:44:
48:d8:82:fa:0c:4b:c7:04:70:3d:ba:cb:0f:2b:20:c9:01:37:
ef:34:d4:f7:04:8e:47:ed:bc:6a:a0:3d:e7:a5:ac:c6:ad:a8:
c0:fe:c8:73:48:37:2d:b7:be:f0:da:a4:e0:89:60:a3:37:dd:
3a:99:4c:bd:8a:29:9d:87:ae:f2:3f:76:a6:a5:e7:03:06:8a:
bc:59:df:31:28:47:ff:22:cf:8a:bd:54:0d:11:67:b4:1c:3e:
22:4b:87:7a:ff:91:fa:9d:ae:04:20:76:0a:c5:e7:0b:83:74:
07:bc:c4:aa:d5:e7:3a:d1:86:18:48:04:b5:c9:e8:ad:69:4e:
39:f1:ee:a2:41:77:7c:f3:e5:19:a1:fb:a0:af:b2:dc:72:68:
8a:d9:5d:d8:e9:d4:6b:19:52:14:fa:de:b3:47:59:0d:bb:51:
50:da:85:77:f9:c4:85:45:f8:43:2a:5c:40:39:28:a9:00:11:
4b:3d:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:46 2025 by rpki-client