Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
File: yalITKcIq3cesduQuvyKEUwsPXk.mft (raw, json)
Hash identifier: QXSJSmWMTukwsjSqmJkgBabkza8Gh+iSz7m188iiiug=
Subject key identifier: C4:46:1A:39:02:C2:AB:EE:C3:32:3B:89:23:16:68:C4:6F:82:F8:B2
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 0199FC58F125B6BB0B6A3235D5C4C80CEDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:51 +0000
Manifest this update: Sun 19 Oct 2025 12:01:51 +0000
Manifest next update: Mon 20 Oct 2025 12:01:51 +0000
Files and hashes: 1: __KLjvjgMO1LuKrx6zZXZJBcRtk.roa (hash: kZSjdOtgx956Q9WcOxsnl5QBMbkPJAPdg2gED1ZbQy4=)
2: xmOvbRNpbfTNvGRi0NGmoChwF8k.roa (hash: 7oU4y3FJaTZ6zlZMUwxbLqzJR9lqEVzJSwfHVW5xI4s=)
3: yalITKcIq3cesduQuvyKEUwsPXk.crl (hash: 3muqb9O8xcbJzLIWLLe4aT1FI3ysA9DuDb17IV3wK8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f1:25:b6:bb:0b:6a:32:35:d5:c4:c8:0c:ed:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Oct 19 12:01:51 2025 GMT
Not After : Oct 20 12:01:51 2025 GMT
Subject: CN=c4461a3902c2abeec3323b89231668c46f82f8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:e7:79:20:a1:bb:f3:58:a7:33:f1:d1:f7:
71:2d:a5:f0:0e:ac:eb:a8:33:a5:df:c9:37:d8:30:
f2:32:67:2b:1f:26:9a:d1:8d:35:d4:a7:a5:26:06:
b4:9d:47:06:cf:52:33:3b:65:46:9e:5a:16:59:d7:
e7:87:fd:1b:25:d5:db:64:23:d2:df:b0:e0:11:fa:
ea:31:ef:3f:c6:4e:08:f2:13:76:a7:56:f6:8b:50:
b8:08:95:eb:d8:90:9c:a4:40:60:62:1f:3a:77:c6:
3d:c6:9d:a8:ce:df:7f:b2:60:05:e0:f2:76:1d:1b:
16:44:1c:76:05:1f:30:28:2a:40:62:ca:5e:d3:72:
e1:8e:84:92:1a:5a:03:55:68:39:48:62:80:34:b1:
2c:54:43:84:c9:bd:91:bb:da:9c:13:0a:d1:71:f2:
c8:97:ec:25:2c:62:01:30:8f:a1:60:90:89:f1:bf:
18:8b:f9:fc:a2:01:4f:9d:6e:ac:ef:74:6c:59:d8:
51:b8:5a:27:16:d1:d5:13:5d:2b:cc:19:7a:b1:ab:
d8:c4:ff:be:7a:fd:13:bc:a7:28:56:f5:83:c0:06:
1a:c0:a3:90:30:f4:01:b7:a1:ef:63:3f:2a:82:fa:
68:4c:65:03:5e:9c:a0:e4:3a:9d:57:72:1b:50:ad:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:46:1A:39:02:C2:AB:EE:C3:32:3B:89:23:16:68:C4:6F:82:F8:B2
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:34:5f:a0:06:2b:1d:85:0e:9b:e2:6f:d3:ee:ab:3d:96:
c7:83:4d:1b:42:14:bb:c7:42:83:f9:bc:1c:c1:dd:86:46:98:
5b:3b:f0:cb:42:b7:3b:03:f3:68:b1:03:fb:c2:3b:92:2c:e7:
83:0e:0e:c5:62:c8:64:48:7d:9b:1b:db:6c:4c:c5:b2:3e:ae:
6f:77:a1:0d:90:86:ae:7c:76:f5:6a:22:61:24:43:14:19:9c:
e4:38:bf:a5:93:13:03:62:1d:dd:79:c2:67:af:03:59:2d:69:
d5:5c:7b:1e:75:fe:99:ca:f6:c2:e8:38:20:8a:9f:0f:50:f3:
14:6c:06:3f:f5:ba:11:2f:e9:02:3d:9b:37:b9:81:f8:1e:4a:
7a:7d:28:ac:53:f7:99:80:b6:9a:7c:45:f8:9b:81:19:f4:7a:
e4:d7:91:27:75:e6:65:fa:0c:05:cd:ce:fd:9d:2e:0b:5f:1d:
dd:61:af:23:1c:1c:a4:52:f1:04:ef:a4:41:70:39:ca:10:ce:
c3:0d:b2:2c:6a:9a:a3:90:10:2f:60:47:93:bb:35:a8:28:93:
1b:cf:35:1f:c7:dd:3e:75:65:c9:6a:38:b9:68:d8:8e:9e:5a:
e8:81:41:b6:d7:84:f1:9b:ed:43:59:17:e4:48:be:af:33:cb:
6b:68:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:31 2025 by rpki-client