Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: Y0bEgvvaPdFICp/ANsuQws8XUdwFe766n52Q6yPJHEM=
Subject key identifier: 70:BB:BD:82:F7:55:5F:D7:35:71:0C:44:07:C0:60:89:F3:82:20:E4
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 0199FC8F2C7DDCE01486CDBB2449FAD25522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: 1Q2AdJGsi+YjHD4Q9h/WJkmLU/3hG/3W7mwuqON4viI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2c:7d:dc:e0:14:86:cd:bb:24:49:fa:d2:55:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=70bbbd82f7555fd735710c4407c06089f38220e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:37:bd:83:f9:bb:47:ce:0f:32:5c:86:5e:
cc:2a:3b:f1:64:49:ca:96:a2:36:bf:b3:45:c3:38:
a7:3a:37:1b:9f:14:e7:ba:7e:ff:89:0c:be:c8:94:
c8:9f:d7:4c:3d:ae:a4:64:56:b4:a6:3f:22:e4:18:
36:85:de:7d:9b:5f:58:51:6f:9b:97:7a:73:76:32:
ea:6c:6c:bf:ae:1a:e3:f5:80:d9:ec:b0:ca:b8:9b:
7d:93:80:54:90:74:a0:b7:0f:e8:21:96:6e:50:a0:
9b:77:e3:ce:74:48:a7:d5:1e:c8:cd:09:ba:85:68:
de:4e:a2:71:02:27:9b:57:07:67:04:00:80:c6:70:
50:db:8b:48:a8:ea:14:23:ab:df:d0:34:bc:9b:7f:
e6:36:15:b5:9c:dd:31:7d:39:82:a7:1f:e9:e2:8d:
a2:76:09:20:eb:85:ba:74:d3:9e:e7:eb:7a:2b:d9:
bf:47:4e:3b:a0:1d:8a:f1:ad:e3:e5:70:f6:27:4f:
67:1a:8f:21:94:41:30:d8:28:26:4a:51:e2:41:d1:
11:a5:9c:0d:47:2e:00:4f:5a:bc:68:cf:59:50:7a:
d9:7a:65:d7:4d:29:45:41:0c:be:68:53:8b:e4:3d:
dc:5c:37:e1:c3:6e:75:f9:1b:03:62:e4:15:50:37:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BB:BD:82:F7:55:5F:D7:35:71:0C:44:07:C0:60:89:F3:82:20:E4
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:92:82:0a:65:e3:6e:bc:40:fb:df:93:da:e6:c0:e7:1f:36:
3b:fc:9c:ae:f3:21:6f:eb:a8:87:c5:09:b1:53:97:e3:66:f9:
73:46:c7:78:4e:16:5e:c5:ad:24:1e:bd:a5:1e:47:a4:e5:1b:
2d:78:ca:47:f8:87:59:c5:96:9d:b6:ef:b9:1c:d4:6b:a8:48:
b2:e5:0d:22:51:ad:bb:b6:f2:d1:03:d0:1e:41:f4:cc:a9:e2:
b3:17:86:e2:51:f6:4f:f2:df:cd:53:af:17:58:77:82:67:00:
d2:78:03:8e:1d:4d:19:77:d7:aa:81:ec:fd:46:71:39:b5:cc:
a3:d4:51:d9:05:0c:f5:5f:01:fa:f8:d4:8f:d0:22:f4:b0:19:
23:be:b0:b3:3c:94:b9:42:f6:6d:dc:97:f3:69:8d:35:3e:35:
7d:52:8e:b3:19:41:73:ec:87:e8:05:5f:8c:90:fc:86:f6:9d:
72:7c:d7:3a:03:eb:4c:54:bd:d6:eb:93:10:00:6a:e4:fd:42:
b8:af:69:cf:02:c0:f9:4c:b2:17:8c:aa:7b:c9:5b:fe:81:c7:
b4:b0:5f:25:3a:16:9d:24:1a:00:82:ac:ec:81:24:83:b6:28:
27:90:52:0d:54:18:5c:66:35:6d:12:21:1d:89:93:a4:68:91:
e8:10:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:19 2025 by rpki-client