
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: tyj33Ib6qQd2tGHNUOIvFL3jfFrKZOMbOblynjc2txI=
Subject key identifier: B1:E3:0F:4E:70:84:F4:DD:67:9A:DA:74:C9:17:B8:B6:F0:C3:27:64
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 0199FD6AFA4C98E5174B6F394C12DD1C4055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:10 +0000
Manifest this update: Sun 19 Oct 2025 17:01:10 +0000
Manifest next update: Mon 20 Oct 2025 17:01:10 +0000
Files and hashes: 1: XCar8SNrGHj7mUVHaBXEnUvq1KY.roa (hash: p4pcecBBeg+02FW19VP+ZJ5O31/pLj9QyP3szv9c6Sg=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: Im9VeMykkvOgmSLfRW0NPe2shtT/d78WHryvXH9UH+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fa:4c:98:e5:17:4b:6f:39:4c:12:dd:1c:40:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Oct 19 17:01:10 2025 GMT
Not After : Oct 20 17:01:10 2025 GMT
Subject: CN=b1e30f4e7084f4dd679ada74c917b8b6f0c32764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:11:5d:c5:38:b3:24:2e:03:39:e4:33:ba:
78:24:01:2a:33:83:d8:20:90:d6:0f:25:e6:18:db:
e9:c0:de:f5:01:f7:8c:d4:e1:5d:e8:2e:bd:fe:7b:
2d:f1:42:77:e2:44:7a:92:3c:a6:5e:25:84:8c:47:
ca:4d:9c:f1:d2:68:fa:cd:2d:83:8f:82:bd:3f:dd:
49:32:01:ec:b9:ba:74:0f:cb:95:1c:ad:5f:f2:db:
a0:75:84:60:38:a6:99:03:51:0d:2c:fa:f6:66:86:
dd:e4:d9:9f:ea:16:e4:42:93:86:fe:75:45:ec:1a:
a5:31:66:ce:16:02:4c:6d:af:21:2a:93:c7:b0:14:
15:55:b8:ce:0b:5e:cb:e3:ef:a4:ff:cd:b2:d0:c2:
7c:0b:ee:c2:94:e2:52:17:93:e0:66:a4:db:13:5c:
61:56:3e:97:d8:0f:c9:4d:ae:c4:a9:62:fd:de:bc:
98:b9:f0:af:96:eb:96:08:2f:2f:d7:32:eb:70:15:
dd:77:b0:53:99:0d:92:59:07:2a:26:21:c6:85:ef:
69:0d:0f:a4:3f:e2:9a:ba:5c:29:ea:2a:e0:b8:52:
85:1c:53:af:c6:1a:29:fc:ea:8e:e3:cf:a1:31:6b:
ba:c3:48:4b:19:2b:ae:2f:a4:4b:d7:7a:03:54:73:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E3:0F:4E:70:84:F4:DD:67:9A:DA:74:C9:17:B8:B6:F0:C3:27:64
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:07:87:97:48:3c:8a:b1:fc:9e:80:93:be:66:7a:fc:d4:aa:
9f:a5:44:51:68:c9:89:c6:b7:5a:3f:fd:df:c6:bf:c8:5d:a5:
ec:36:75:d8:df:3d:d0:20:b2:30:bb:f5:7e:3d:92:89:37:70:
ce:1e:09:56:28:23:67:dc:e3:c7:10:44:46:7e:39:a0:3d:8b:
a3:3c:c8:4b:03:98:07:28:b6:d9:15:7a:39:7a:0f:a0:b8:75:
e8:c5:89:83:62:53:d7:75:75:6d:ae:e5:32:40:b8:1a:05:4a:
98:8f:b2:8e:82:bf:fc:44:ec:b0:87:29:34:c2:8a:ac:61:2b:
cb:d9:8e:6a:da:2b:4e:07:d3:24:96:ba:30:a9:7d:c3:a8:55:
fc:c3:75:c0:b0:a5:af:e1:d7:c9:9f:0d:d1:3b:77:1b:18:e3:
f0:40:84:4c:b4:8d:55:67:f3:f6:81:07:bf:1b:38:f3:ae:7e:
c3:6c:dc:58:dd:04:b2:25:4f:8d:1f:4a:e4:01:9b:d4:c1:20:
68:ec:82:c3:8b:cd:88:1a:85:1b:3d:86:47:c6:f4:6e:f8:88:
56:05:04:94:54:ec:93:44:ae:63:a5:ca:15:a0:4f:88:fe:13:
43:8d:46:12:04:76:ac:b8:cd:4c:33:d6:42:68:f2:e1:79:01:
8a:04:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:02 2025 by rpki-client