Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: VJw6GbIpOOfSVs7Uo7jBUXFJewYYefahmOdNmRY+/NU=
Subject key identifier: 13:4A:87:56:58:8A:BD:7E:85:D5:39:12:EA:EA:A4:AF:10:52:CD:3D
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 0199FC216CE64243D67472D50789A1BD6FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: 5xPDXzdTfsrYzoxYU6QlvENCfzv/gd4lOLlvVZ35iaQ=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6c:e6:42:43:d6:74:72:d5:07:89:a1:bd:6f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=134a8756588abd7e85d53912eaeaa4af1052cd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:6f:2d:11:88:33:67:8d:4e:87:97:fa:97:
18:63:78:9e:97:ad:2c:55:ae:8b:c6:fb:26:9d:33:
d5:57:0d:b4:16:0c:7b:3d:3d:7a:b3:ea:90:a0:bf:
ea:7c:6e:59:12:fc:9c:53:92:7c:c9:ac:0b:5a:f3:
bd:72:58:65:55:99:54:53:82:24:8b:60:31:fa:ce:
53:df:49:d1:9a:a0:4c:3e:46:46:96:0f:59:73:24:
7c:b8:a6:68:08:7f:40:9c:8c:8b:52:df:85:10:37:
24:63:12:78:8f:d8:9c:53:14:12:c3:30:fa:61:40:
4f:c2:c7:26:0a:4a:fa:12:3c:31:dd:8c:d6:ad:1c:
38:c9:19:1a:0b:fe:75:dd:ca:72:1d:46:46:6e:9a:
76:e5:68:c7:fd:cf:3e:fc:2e:71:1b:e2:f0:6c:6a:
21:94:cf:34:6e:21:7c:99:d3:f2:b4:15:0b:d7:58:
38:14:ae:2a:d6:75:c4:bb:ac:54:2c:ab:f8:92:b7:
98:41:c4:0c:43:e7:9b:89:fb:8f:7a:e0:32:b5:db:
bc:2e:92:42:24:9d:97:9e:9d:ed:b6:29:67:11:fc:
94:b8:b7:5c:78:02:53:8e:c9:93:d1:10:f7:8d:ae:
65:5c:c4:16:04:30:b0:2b:23:7f:ec:54:06:0c:4d:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:87:56:58:8A:BD:7E:85:D5:39:12:EA:EA:A4:AF:10:52:CD:3D
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:07:71:be:bd:c0:19:92:bb:ca:6a:3f:5c:f5:48:23:2d:f4:
d0:dc:dc:9d:08:f7:13:9d:b1:71:1b:38:7d:46:87:d0:01:9c:
2f:c4:68:94:75:21:2f:98:34:ca:cd:96:58:46:a5:81:42:42:
23:b6:25:22:a0:9a:36:58:be:6d:e5:87:95:21:64:c3:1f:c2:
48:9c:0a:93:6f:5c:9a:07:77:13:0a:e5:d1:2e:f1:54:2d:3c:
bd:00:de:6b:66:fa:c9:57:11:ca:69:52:18:db:d7:ac:cf:10:
9c:68:5d:43:d9:8c:88:0b:9c:01:4c:fc:38:0a:ca:da:10:da:
00:b3:0e:7a:da:8b:67:b7:6f:ec:56:de:d8:51:6b:b2:28:c5:
d6:d4:4d:ba:46:44:d8:89:d2:2c:30:53:60:e2:cd:38:bf:5d:
26:56:27:f2:b4:2b:20:1e:c4:9c:5f:d1:72:08:59:ca:d8:2b:
f6:7b:67:06:f2:ce:b2:28:33:f6:c1:7b:19:1c:ee:61:33:6f:
20:ae:7e:c4:74:ad:4b:3e:d4:46:b6:94:cb:5f:68:a1:20:28:
ac:12:fa:24:fd:06:bf:5d:0d:c0:2f:b2:a0:70:57:06:ab:03:
de:75:3a:c1:7e:f0:1e:3d:c8:42:49:6d:73:fd:2d:e9:84:79:
09:f6:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:14 2025 by rpki-client