Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier: 7DB8Pznp3OuLjmLAFOUQXt+aeAALcwbUIPL9978qBE8=
Subject key identifier: D1:92:14:D1:EE:E3:C7:D3:E6:7D:9E:1C:39:DE:9C:18:6D:BC:40:23
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 0199FB7C981280B8B81357CCDF462472E4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:10 +0000
Manifest this update: Sun 19 Oct 2025 08:01:10 +0000
Manifest next update: Mon 20 Oct 2025 08:01:10 +0000
Files and hashes: 1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: m/hWYH191Z3l+Dgqs8PUji6FjHXT974OD/6Ay+mRa5s=)
2: YP_ojssdziwcanJcHJab_qTOmuY.roa (hash: U3A2fg6Wi6oAAnLmfskViTy7rAEB6sn2k8/iuWaNKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:98:12:80:b8:b8:13:57:cc:df:46:24:72:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Oct 19 08:01:10 2025 GMT
Not After : Oct 20 08:01:10 2025 GMT
Subject: CN=d19214d1eee3c7d3e67d9e1c39de9c186dbc4023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:4e:68:0f:86:82:ea:fe:03:5b:2a:c2:eb:
6a:52:90:64:2e:3e:dc:2d:e8:a2:75:25:5b:21:4f:
9f:f3:be:63:20:c0:18:ea:cc:6c:c2:b0:60:a5:6b:
3b:54:67:5d:78:a7:e3:ae:9e:67:65:5f:f7:a0:4a:
db:f0:e5:00:ca:4a:b4:80:dd:83:c4:fa:82:27:0a:
01:4c:00:15:53:88:a6:9d:2e:dc:a6:33:fc:4a:aa:
4e:bc:0e:72:9b:be:9e:e9:b2:9d:b6:17:6a:62:72:
6d:90:a3:9a:33:68:c6:52:2a:d5:59:77:24:c1:4d:
d4:0d:c3:b2:f0:6c:3f:a1:52:60:ed:5a:77:a5:6a:
ca:a3:04:a6:a2:f5:34:e5:21:be:df:93:ee:bb:75:
45:09:78:75:95:68:36:26:08:fe:f8:4b:9b:61:df:
f6:e8:db:08:76:42:2e:2a:e9:e7:3e:70:95:29:c2:
68:7c:7f:ad:b4:ff:bb:0f:83:0a:34:dd:7c:fd:56:
9c:7c:27:a6:73:6b:ff:21:9b:e3:fd:e6:e8:82:a3:
9c:0d:44:e1:fe:66:fc:98:32:89:2e:b3:94:7f:ee:
1e:78:2f:15:59:b1:c2:d1:77:ec:f9:4c:19:79:9f:
57:32:b3:6a:bf:20:5f:04:12:7a:71:fe:31:92:80:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:92:14:D1:EE:E3:C7:D3:E6:7D:9E:1C:39:DE:9C:18:6D:BC:40:23
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5f:51:18:43:0c:d7:0d:63:02:cc:16:e3:0a:41:de:ee:c1:
e4:62:30:08:b6:6d:2c:d6:39:04:76:e4:23:e3:af:09:2f:03:
f8:a4:e3:4f:a0:b2:a4:74:f0:7f:9d:7f:e6:9f:89:1f:b5:0c:
96:43:a2:76:cc:b2:4c:aa:71:b7:1f:c8:9f:32:b7:dc:e9:6b:
d5:71:96:a7:2f:a2:f8:39:9d:d3:97:67:80:bf:af:da:c7:62:
f2:9d:2a:25:56:60:ed:99:c2:24:29:3e:1a:f9:4b:3e:69:f4:
53:16:c5:67:ce:1e:51:52:08:78:57:ff:84:35:8b:4e:db:6c:
ec:45:3e:ad:86:09:1c:7f:ea:19:f7:50:37:9b:36:de:3e:70:
ed:f1:cb:e0:ae:45:50:f5:ac:1a:41:09:7f:8c:97:d8:58:4c:
b4:02:09:2d:39:8f:b8:f0:92:97:fc:8d:1a:e6:32:fe:31:85:
c8:3e:13:b6:f1:94:43:d9:4a:5f:86:ef:21:80:d4:51:cc:19:
e1:60:c9:91:8b:fe:9c:3b:00:1c:dc:04:5a:3a:32:73:0c:af:
09:9a:69:18:03:b7:98:17:d7:e3:fd:ef:33:79:41:fa:7e:41:
81:b7:6e:dc:b6:fb:11:85:77:41:7e:52:f2:5e:8e:a7:55:3f:
3f:c8:b7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:33 2025 by rpki-client