Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: a6HBZMUmxEhG0XeSyzTaFFzOrRqKIPOqDdpfFZS3dVU=
Subject key identifier: 75:31:78:E9:ED:CC:69:5E:20:12:93:2D:08:3A:5B:B9:19:39:9F:75
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 0199FBEC2BC81BEA8FF66ADC569B90CFF18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:03:02 +0000
Manifest this update: Sun 19 Oct 2025 10:03:02 +0000
Manifest next update: Mon 20 Oct 2025 10:03:02 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: yhRVMaMHDztLbJXVEvuaOxp8hRPLX1bZDzdxlCuFGzQ=)
2: aQpN_AazwsYK521EYwQJi9M2iSk.roa (hash: GQsuDZdcScHpctBuVbdbtj6CCFBXdaH1ubDgAN0EZ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2b:c8:1b:ea:8f:f6:6a:dc:56:9b:90:cf:f1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Oct 19 10:03:02 2025 GMT
Not After : Oct 20 10:03:02 2025 GMT
Subject: CN=753178e9edcc695e2012932d083a5bb919399f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:d2:e9:ea:3f:87:98:00:48:88:d4:f0:b4:
1d:76:26:f0:58:f3:e6:3d:dc:28:5b:53:a5:05:9d:
8d:51:cb:75:63:b7:10:be:de:09:01:5e:9c:6c:61:
16:29:46:45:79:30:e5:39:c1:14:1c:6e:e2:33:56:
6c:ac:8c:5f:c0:31:20:83:97:86:1a:94:b3:35:45:
2d:57:9f:f9:b0:80:93:a1:50:e6:94:7f:d5:aa:31:
14:de:e8:a4:5f:ac:1c:a5:67:7e:f9:63:a3:40:e5:
fc:bf:fe:72:0c:a1:03:e7:ea:e3:52:3f:af:94:b0:
8d:97:25:29:5a:4d:30:eb:08:d9:c3:9a:4b:39:ea:
1a:9a:af:af:39:a6:15:06:e1:73:11:25:54:ea:14:
47:e2:1b:60:af:00:1a:4f:fd:13:78:b6:34:9c:a3:
8d:8f:25:ec:c3:57:7b:80:96:6a:e8:72:27:54:9a:
9b:35:58:5a:a4:00:08:54:9e:02:96:f2:bc:28:df:
af:86:2c:d0:60:c8:d6:b6:20:98:ae:5b:c7:db:58:
93:74:c0:4b:1e:3c:0f:14:a0:61:0d:99:b1:55:ca:
00:1c:2e:ad:6d:2b:7a:56:2c:3e:c8:16:30:f7:a9:
61:a7:bb:d5:fc:56:4a:f3:92:4a:6a:5c:47:cb:4d:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:31:78:E9:ED:CC:69:5E:20:12:93:2D:08:3A:5B:B9:19:39:9F:75
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:66:94:0f:1d:53:52:66:e5:11:78:55:d1:44:e5:05:0c:cb:
64:87:08:f1:a9:ea:c7:ba:47:94:c8:11:f8:b4:23:d0:98:03:
a3:0c:59:1a:56:8e:4b:f7:eb:f7:2b:0b:a5:76:89:13:76:67:
0d:0f:1c:be:fd:11:e9:7d:a8:a6:45:24:37:36:17:15:d6:47:
56:04:85:7f:4d:88:e9:44:1d:ff:2c:f5:b0:43:56:5b:98:6f:
1b:04:05:e5:2e:20:e6:62:bc:a5:39:74:59:d3:ca:3a:ad:43:
da:8e:5b:43:05:68:36:9e:56:a3:bf:46:77:73:4a:f7:7a:c2:
39:3d:9f:be:18:e1:d8:40:1b:2a:38:6c:f8:44:a3:ff:c4:e8:
1d:c2:3d:6d:97:66:1f:46:3a:61:e7:a7:0d:0e:3e:50:6c:d4:
97:32:18:8d:6b:bf:3e:b5:67:e6:65:6a:db:f8:62:3a:6e:62:
a2:fa:ff:1d:34:36:ab:a7:89:26:23:49:48:79:08:3c:d4:6f:
f2:a1:b5:b5:41:be:7f:52:cb:7c:f6:6f:6e:40:a5:a9:21:25:
d4:19:33:95:cb:cf:76:12:f5:5a:19:99:81:b6:33:ec:ba:93:
44:02:10:b9:13:d2:aa:71:b7:1e:a6:3f:d9:e9:73:02:8c:b8:
11:f3:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:17 2025 by rpki-client