Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: Sa9lJsK3A3fje4stFvwgTEWuzrLQZP5d2rqU8en8L00=
Subject key identifier: A5:C2:E1:27:4D:50:19:E6:F7:3F:9F:19:9F:D4:2C:EB:BE:30:09:F1
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 0199FCC66D4DBB380847B45598E910785718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 14:01:26 +0000
Manifest this update: Sun 19 Oct 2025 14:01:26 +0000
Manifest next update: Mon 20 Oct 2025 14:01:26 +0000
Files and hashes: 1: HnblzgjRhv7ohFCku2dgX5Jr7vw.roa (hash: o9K0gGCxUA0R4sGgN9lj9M6IzHoNtSXBjdq46DJlaa4=)
2: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (hash: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: rqXFhnziK1OWmv1xxTzS1n2KPtYYIjt0hgBME0jxM+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:6d:4d:bb:38:08:47:b4:55:98:e9:10:78:57:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Oct 19 14:01:26 2025 GMT
Not After : Oct 20 14:01:26 2025 GMT
Subject: CN=a5c2e1274d5019e6f73f9f199fd42cebbe3009f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:fc:e7:d4:2f:8c:d6:ec:17:15:bb:13:ba:
f8:29:5e:87:9a:a9:8d:84:6b:70:e5:12:63:c4:b7:
8b:06:37:79:ed:96:e5:8b:8b:06:8b:c5:d1:12:85:
8b:3d:8f:c6:97:31:8b:7b:93:5d:22:b7:3f:83:5d:
91:8b:4a:3a:b5:54:86:87:ba:5b:f4:97:d7:93:9a:
36:13:45:f1:4e:60:80:5e:f2:24:05:8a:e0:7b:09:
fd:26:f6:0e:d7:de:a3:fa:69:dc:38:28:71:41:a4:
4c:f6:83:f3:d8:31:b1:25:e4:ee:0c:45:e6:13:a8:
d2:19:f2:81:18:cd:a1:c1:a9:0a:9a:5b:30:67:6b:
73:b5:1c:80:35:59:c8:7d:60:32:e3:1f:d4:9c:0f:
a0:0d:35:7f:e3:3a:c7:07:ba:6b:f7:42:5b:ad:11:
e5:fd:96:4b:73:de:38:2c:f2:6c:59:51:ee:27:ff:
3d:61:84:11:e1:3e:56:02:05:99:90:6a:75:b8:56:
02:ea:b2:af:a6:5a:1a:ac:c5:df:08:15:cb:61:05:
7c:72:f9:a5:f2:f7:89:cf:8d:4c:52:d0:0b:7e:2d:
83:87:c7:60:07:64:92:78:1c:b9:c4:1f:bf:98:69:
c2:f9:85:50:e4:f3:3b:58:72:05:4e:27:84:27:f3:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C2:E1:27:4D:50:19:E6:F7:3F:9F:19:9F:D4:2C:EB:BE:30:09:F1
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2a:64:33:5a:d8:9e:0b:10:1c:ac:f2:64:d1:83:21:7a:d9:
47:7d:16:83:99:7b:ec:59:9c:e9:62:b5:a4:20:24:2d:53:39:
55:92:9e:25:9b:82:2a:2b:e9:be:62:68:5b:d2:01:8e:fd:e4:
ba:68:5c:35:1f:ec:07:b4:1e:0d:80:fe:72:73:89:1b:95:8f:
73:8a:9b:cb:12:f4:32:9f:2e:32:f7:02:78:de:cc:62:da:ef:
1d:cc:fb:ad:87:03:3e:3f:98:12:fe:3b:c4:55:72:d1:2e:59:
05:6f:49:12:54:6b:b3:06:7a:a9:3f:7f:42:73:82:23:51:1b:
21:f9:4b:33:a4:8a:b6:56:1d:50:d7:14:a5:94:73:e3:c4:57:
c1:2e:c1:25:d1:45:d2:43:54:0d:89:2d:d5:9e:81:d5:69:a8:
76:c1:51:3e:2e:33:16:6a:91:6a:a5:59:68:c2:5e:04:4c:cf:
70:60:a6:60:3b:8b:cc:ab:d5:d0:83:72:47:e7:62:23:75:a6:
b8:0c:4b:5d:75:bc:21:16:e3:a9:77:50:1d:92:fe:46:4b:2e:
e2:11:9e:fe:0c:f2:0a:cf:5b:6e:51:be:11:00:1e:51:1d:3b:
84:c6:83:e0:a6:e2:d1:e8:5d:64:0d:65:17:3b:6f:c4:82:61:
dc:59:1a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:28 2025 by rpki-client