Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
File: yXKq7Icz1F96AANRAYC0ri1Lvo4.mft (raw, json)
Hash identifier: nnJcrjMJMn66xCR4B/R335qKTzApmEI7HDhbP/oR4/E=
Subject key identifier: D9:1F:4A:FF:F3:47:7E:8F:78:08:60:FB:77:E7:54:60:84:A5:04:B6
Authority key identifier: C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
Certificate issuer: /CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Certificate serial: 019A01EBA4F4211F682E70AA4234C7C8C229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 14:00:11 +0000
Manifest this update: Mon 20 Oct 2025 14:00:11 +0000
Manifest next update: Tue 21 Oct 2025 14:00:11 +0000
Files and hashes: 1: iEYRoHL_x--Q-PC_QmRkLatna0w.roa (hash: 5s1E+tOqSuT9Il26pYgrASE0LBQS+wYadwRdpb6ASa8=)
2: yXKq7Icz1F96AANRAYC0ri1Lvo4.crl (hash: dY4hX30rXSsJoCvImfLXmzkhXAKJgukQa370VoImm3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:a4:f4:21:1f:68:2e:70:aa:42:34:c7:c8:c2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c972aaec8733d45f7a0003510180b4ae2d4bbe8e
Validity
Not Before: Oct 20 14:00:11 2025 GMT
Not After : Oct 21 14:00:11 2025 GMT
Subject: CN=d91f4afff3477e8f780860fb77e7546084a504b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:64:7d:8e:36:80:ca:db:87:21:46:a2:ba:
b1:67:49:bb:3d:06:db:5d:02:ce:a8:2b:b6:97:89:
5e:7c:01:3b:8a:4c:82:de:f7:44:40:e5:39:b5:60:
fd:5e:04:fb:3a:b3:44:56:0a:10:af:6f:cb:9b:db:
75:a6:f5:3c:35:50:93:62:e8:22:cc:e1:e6:44:a8:
75:d8:1e:0d:64:e0:4d:b3:c7:e0:5d:34:8f:61:d6:
53:05:da:84:a4:ef:a5:54:75:fc:f8:00:cd:1d:5e:
6e:19:98:6f:f9:0d:25:d0:89:96:93:84:d3:b6:f8:
91:fb:16:57:56:b1:58:f8:ad:27:68:1c:a8:13:44:
81:f8:d5:24:b0:87:3e:3e:f2:86:69:21:04:71:f3:
8a:48:a2:3e:3d:70:bf:a7:be:08:7d:72:90:6a:75:
39:58:04:e3:92:31:62:2d:19:ca:96:de:e8:ce:eb:
60:39:e9:f0:c9:44:4b:10:86:d0:3f:b7:63:91:21:
f9:f5:15:17:13:c9:0b:0e:13:9c:1b:2d:9b:06:c7:
92:fb:4b:0d:62:8c:b5:e5:dd:26:fb:39:74:48:66:
06:78:c2:6e:0a:92:e1:40:4d:11:2f:8e:06:ed:7a:
88:0a:91:0c:b8:2d:85:92:c5:ce:8f:0e:07:9b:2f:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:4A:FF:F3:47:7E:8F:78:08:60:FB:77:E7:54:60:84:A5:04:B6
X509v3 Authority Key Identifier:
keyid:C9:72:AA:EC:87:33:D4:5F:7A:00:03:51:01:80:B4:AE:2D:4B:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXKq7Icz1F96AANRAYC0ri1Lvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d6eafb-b329-4e12-825c-eb5b9a7da86b/1/yXKq7Icz1F96AANRAYC0ri1Lvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cd:28:ec:c4:0d:f3:7a:fa:91:f0:a4:b0:8e:e8:ce:35:35:
ea:5b:ae:54:36:bb:57:65:5d:fd:f5:be:7c:be:71:d1:9e:f3:
39:65:a8:b3:48:f5:6b:79:12:02:69:f3:cc:ac:7b:69:53:a9:
24:09:b6:10:48:88:0b:a0:7e:8e:a1:1b:c5:49:70:47:fc:18:
e2:a4:bc:98:c1:df:d3:d6:6e:0e:ce:f1:f2:76:28:ea:1e:cb:
75:e7:3d:19:29:de:75:1f:4c:eb:1d:a3:66:9e:00:aa:7d:05:
bf:24:fe:6c:62:ba:84:9c:50:d1:9c:0e:8c:82:8e:32:4a:84:
35:b3:b1:2e:28:26:a7:c8:b8:56:f7:fa:db:d5:70:d2:6f:14:
eb:f2:44:4e:1c:f5:e0:b6:1a:c2:eb:8e:8a:89:52:84:64:02:
2d:80:9e:78:8a:23:52:1e:4a:c5:84:30:ee:e1:cd:ff:59:0c:
b5:f4:64:32:55:96:c5:77:ab:7b:69:d1:4c:63:5b:d5:e1:3a:
de:94:64:b3:a0:5e:71:bb:04:ec:8c:46:96:28:6c:b0:15:90:
d4:85:b8:15:38:84:31:85:23:7c:57:03:df:76:ef:36:6d:98:
63:ec:0a:6d:ad:5e:86:9a:88:28:17:e4:48:dd:44:b9:6c:39:
5f:aa:81:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:55:14 2025 by rpki-client