Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: v6NngVGhbJrlaDh0w1vXtXEpfxakTq15B7bXEEsY5Ig=
Subject key identifier: C2:83:09:42:57:B6:86:01:2F:34:F9:F2:E7:96:92:E4:2C:BF:FE:3A
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 0199FE103636829BE4C054C4245C3A30A893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 20:01:39 +0000
Manifest this update: Sun 19 Oct 2025 20:01:39 +0000
Manifest next update: Mon 20 Oct 2025 20:01:39 +0000
Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=)
2: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=)
3: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=)
4: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=)
5: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=)
6: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=)
7: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=)
8: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: 0KRahz6iLQpDLm57ClMQG+X+/h8hKXz41pT2ijgv+Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:36:36:82:9b:e4:c0:54:c4:24:5c:3a:30:a8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Oct 19 20:01:39 2025 GMT
Not After : Oct 20 20:01:39 2025 GMT
Subject: CN=c283094257b686012f34f9f2e79692e42cbffe3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:19:d6:59:ad:60:2a:9b:59:74:eb:ae:87:
cf:67:27:c3:70:59:e2:16:fe:fa:3f:cc:6f:81:5a:
6b:c1:eb:c3:84:20:8c:0c:a4:de:cf:61:ea:2f:a7:
e4:6e:d1:25:d6:25:d9:09:a1:d7:a2:1c:43:01:d9:
6c:81:e2:3c:80:be:b6:5a:d6:2c:b6:55:50:f3:07:
70:70:a5:66:7a:3b:6a:5b:8a:57:d2:5d:84:a5:2e:
8e:6d:d0:6a:f2:c0:22:e1:f5:21:d4:46:cd:44:ec:
d7:53:1d:bc:2e:14:1c:a7:31:c2:fe:c3:0b:d7:bb:
80:e6:af:a3:ec:e4:31:c4:c9:2d:7a:87:b4:b9:88:
52:7d:ef:26:1f:40:50:e3:2e:bb:b3:07:c8:68:28:
fa:7a:56:94:65:cf:dc:ff:5f:4f:3b:2f:6b:58:50:
bc:10:89:c8:75:8a:5d:cb:52:85:be:66:25:e9:5a:
62:8f:b5:14:ac:c3:c7:d1:9b:ac:05:2c:d8:56:9d:
6a:b4:05:14:a1:ed:cf:d2:ca:03:25:59:4d:98:04:
c9:e3:b5:10:cb:3f:a4:18:38:7a:91:69:db:9b:1d:
a9:60:e0:28:bc:16:95:28:4b:97:2f:44:5f:82:ea:
49:62:10:fc:be:60:27:fc:a6:0e:36:27:38:ff:f8:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:83:09:42:57:B6:86:01:2F:34:F9:F2:E7:96:92:E4:2C:BF:FE:3A
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5f:4f:52:40:bc:f6:8d:ef:17:14:e0:9d:06:00:0c:35:c1:
49:ea:62:5b:4c:7b:87:9e:65:88:55:fd:d6:ab:93:e7:c3:c5:
ca:f5:c1:52:8a:49:3f:32:3a:7d:9e:a4:a6:7d:ad:e2:65:ae:
9a:aa:bc:ef:2b:10:22:96:30:57:82:1a:2f:1c:12:fd:1a:74:
6d:42:97:cf:79:c5:ef:63:0d:e2:5f:e0:bc:56:12:73:80:71:
e8:e8:cd:e2:6f:c2:54:da:96:f8:83:30:4c:bb:13:5a:66:d5:
13:98:d0:94:5c:e5:a2:8b:f3:fb:40:fb:d8:bd:e3:4b:cd:3f:
aa:a5:10:eb:f6:73:24:74:53:80:24:b3:92:f6:54:25:b9:a2:
26:b1:6e:9c:ad:50:e0:3e:31:1a:85:13:23:81:e2:6b:c6:1c:
0a:d7:3a:5d:cc:bd:77:85:52:cc:92:c1:39:11:79:e6:a5:09:
8d:b7:d3:ca:28:d2:22:5d:63:97:d8:66:a5:72:63:2b:4d:b3:
84:17:0a:9d:5b:ee:e8:27:0c:c0:65:94:f5:35:dc:07:c0:81:
16:b6:fb:97:ae:38:7f:93:9c:5c:a6:aa:99:75:5f:e6:23:41:
ab:8e:95:53:b5:c7:e3:93:96:2c:ba:c3:c5:4f:22:53:b5:91:
e9:a4:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:17 2025 by rpki-client