Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: atx9gDGm19sEWqqycbXivMU71pS45uem5b7wvMWehhk=
Subject key identifier: 8A:34:F5:53:02:8C:1F:90:BD:28:B6:B1:C0:D2:74:4F:EE:01:D6:DB
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 0199FC582746664EB969882F9F1BB2533083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=)
2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: jy7CHyOvQzikyyYRb50ndxmW6f/fdmLuScUn5KcKztI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:27:46:66:4e:b9:69:88:2f:9f:1b:b2:53:30:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=8a34f553028c1f90bd28b6b1c0d2744fee01d6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:4f:9b:2c:58:a9:38:b3:46:e1:2d:9f:ca:
cd:29:f0:e1:64:4a:a9:78:fe:2d:10:e3:c9:8c:08:
c7:79:bc:b7:de:c4:fc:e6:75:1e:05:b6:ac:90:fb:
43:e3:be:e3:3d:4f:53:c8:c5:f2:81:87:5e:df:b2:
4a:97:ee:1c:5f:b5:0b:46:e7:a4:7d:d8:2b:6c:a7:
b6:8b:4c:61:b2:43:a9:eb:53:a1:a4:17:2a:98:28:
c3:78:27:95:07:e2:19:3a:b6:60:c6:45:3e:b3:5a:
31:db:96:45:83:90:e3:e0:40:cd:bd:74:11:8b:6c:
6e:12:aa:4a:a9:1c:88:3a:56:f8:b2:2c:dd:01:cc:
ea:c7:6e:f2:f1:7c:0b:5c:bc:ff:f6:f6:b8:60:0a:
e3:ac:6e:bf:12:bf:29:e9:ee:4c:98:34:45:d6:d9:
60:ae:14:9d:ad:ba:c9:97:bb:db:c7:08:b1:6e:15:
c3:2a:35:f0:3b:d0:e3:63:63:5a:7b:0c:41:66:a8:
86:f9:98:ff:a6:56:e6:1e:0d:38:5a:cb:05:1e:19:
e8:14:c5:03:63:54:6f:23:f9:ed:1b:8d:a1:04:6a:
9f:65:12:ce:09:ed:fc:db:b8:0b:b2:78:d2:ee:67:
dd:68:ec:e0:ad:26:1c:44:7d:c0:4e:99:26:d8:5b:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:34:F5:53:02:8C:1F:90:BD:28:B6:B1:C0:D2:74:4F:EE:01:D6:DB
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:31:ef:30:89:8d:45:b1:85:a3:42:66:d7:da:6d:ab:ae:69:
58:c8:f6:bf:7f:2c:25:26:3c:65:c6:e6:c2:d2:a7:75:07:ad:
e7:f4:db:e7:a0:2a:63:68:e6:30:db:06:44:11:77:7d:7a:f3:
78:b3:11:06:7e:6c:25:ea:71:50:9a:9c:4d:cf:d3:74:88:44:
f4:26:de:2b:25:57:82:cc:69:0d:10:7d:bd:d6:c3:2f:a2:67:
70:0d:0e:e5:1e:2a:54:1f:0c:6f:4a:64:66:46:6e:26:d0:5c:
b9:a9:a6:4f:83:ba:59:5f:58:e1:7d:25:0a:99:d8:5a:4e:e6:
f3:11:e6:18:16:57:77:aa:c8:ac:5a:fd:c9:2a:81:0e:79:e9:
98:47:6d:ca:8c:3b:25:0b:58:12:96:39:1a:20:a2:71:d4:75:
9e:6b:15:c9:2b:67:57:c2:38:af:4e:bf:19:21:05:e1:4d:2b:
df:06:ad:c1:cd:10:e0:3e:4e:58:8b:d6:4b:5d:d2:d1:75:1e:
6a:c8:18:6c:8d:24:f9:9f:d1:23:08:bd:fd:1c:c3:c0:a7:64:
7e:17:9c:60:dd:8d:5e:76:43:73:7c:01:ba:96:e6:1f:e1:1e:
18:de:d2:a0:a6:f0:f9:2f:55:8c:a8:c5:69:7f:b1:6a:e1:97:
4b:62:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:18 2025 by rpki-client