Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: G19vMiIAa/nhDmdR8+JSzfjdW0J31nP8y90k3ZDKamM=
Subject key identifier: 30:B8:EB:6E:F4:42:BB:A6:99:76:CF:18:92:D6:BC:28:21:61:51:0D
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 0199FC587571EBEDCEB50C04A138D88FE623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (hash: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=)
2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: IpDvzkNLtb6X58bTayXyunVhoHbe/vy0JM6vxvl0IfI=)
3: t987O0pDHzvcsP9c7cARqX9qeU4.roa (hash: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:75:71:eb:ed:ce:b5:0c:04:a1:38:d8:8f:e6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=30b8eb6ef442bba69976cf1892d6bc282161510d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:27:5e:76:46:9d:82:63:3d:a6:5d:dc:74:
aa:b4:02:a3:e8:62:9d:7d:85:3e:5b:b5:b5:25:0d:
73:08:28:77:20:39:15:3e:43:1d:eb:7f:18:ae:de:
70:1a:08:41:5f:db:f6:cc:95:a3:2a:20:6e:b0:5b:
4f:e3:69:77:a0:13:d1:ac:ba:2f:69:aa:a0:eb:15:
f1:37:b4:04:77:c2:3a:0f:95:c3:fe:71:4f:d9:6c:
eb:22:90:1a:49:28:26:3a:01:93:46:de:6b:51:36:
cc:5f:d6:be:75:58:14:0b:62:4b:22:b0:06:03:f6:
bb:88:f7:cd:2f:da:e3:0c:dd:a6:cf:e9:36:db:12:
58:21:f7:2e:46:f3:d0:f8:49:ef:7d:26:89:18:a4:
41:16:09:92:d2:26:44:5f:ef:33:80:88:67:b0:7c:
6b:6d:15:fc:ca:c4:7d:fa:05:2f:19:ad:3b:ca:96:
75:77:e8:a3:da:36:3d:62:72:07:21:53:a0:ec:28:
32:68:05:6d:25:18:b7:82:02:0d:fd:da:b9:74:0e:
aa:f0:ae:12:26:5e:b6:a6:6b:c4:2f:f6:5f:f9:84:
67:d2:db:2c:be:cf:d3:12:13:cc:03:75:2d:0d:b2:
bb:d9:a9:29:bc:8e:5f:66:db:f3:ca:93:00:e2:53:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:EB:6E:F4:42:BB:A6:99:76:CF:18:92:D6:BC:28:21:61:51:0D
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:55:56:10:f1:25:c1:a1:77:90:19:c9:02:ef:43:1c:b9:7a:
de:b6:e7:1f:7f:df:4b:44:2e:db:e3:49:41:3b:54:c1:fd:99:
ef:23:36:87:42:c8:57:40:58:d4:5d:20:42:5e:88:ae:1f:16:
64:26:39:c9:62:46:30:73:e9:64:21:ba:33:c0:65:d6:e5:82:
26:74:5d:1b:b2:82:8b:9f:86:85:a7:cd:2e:6c:c0:fd:d2:65:
3c:6f:d3:68:40:70:82:80:47:62:9b:c1:88:d1:ff:26:31:23:
c6:dd:8b:82:ce:1e:b5:f4:b6:68:84:d7:e9:94:05:13:c9:a1:
5e:05:5f:a0:d7:5a:5b:ec:a6:20:b5:cf:b8:63:82:88:08:43:
b4:f8:a9:bc:28:d2:e2:e5:1d:d4:9e:4f:85:9f:46:25:1f:39:
cf:f9:36:1e:a2:9a:1f:6d:5b:7b:10:ad:72:4b:a6:8a:22:3c:
c8:68:14:69:33:5c:d7:bd:6e:7b:97:5e:2a:e1:8c:88:fc:21:
42:9c:52:34:f0:43:f9:47:10:b6:35:d7:13:1d:07:96:97:8f:
45:6e:22:1d:16:2a:1d:90:09:33:bd:36:4a:2b:30:af:bd:29:
f0:6d:43:01:b7:80:73:ff:ee:61:eb:d0:98:55:4b:38:53:5f:
9f:a0:23:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:36:17 2025 by rpki-client