Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: BV4QDmPxaIqAid8FzRqTuvsGz357KDeATIibqd53u3E=
Subject key identifier: E6:A7:BF:8A:3C:5C:66:96:1F:DE:2E:1D:D1:E4:0D:0F:5E:82:2F:33
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 0199FE7DFD0A6E95E518A28DEDAA45B5CD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0DD0
Signing time: Sun 19 Oct 2025 22:01:33 +0000
Manifest this update: Sun 19 Oct 2025 22:01:33 +0000
Manifest next update: Mon 20 Oct 2025 22:01:33 +0000
Files and hashes: 1: E7M-AYn157coR3NcaUllny2UPvo.roa (hash: V3zuwIj7KMTNA/2kj/Rg0T1KwXF19AZk9pNIoN8T7eM=)
2: I6C9OUy79kypN0-jFqEW807fCi0.roa (hash: 1Hel0O7FmPuldt5t71KSS/2qCERXV6+QisRzagvf8w8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: EayMG+DTCE2+EBw08znCuyJ5Wyvy1fZV+kYORx+hGDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:fd:0a:6e:95:e5:18:a2:8d:ed:aa:45:b5:cd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Oct 19 22:01:33 2025 GMT
Not After : Oct 20 22:01:33 2025 GMT
Subject: CN=e6a7bf8a3c5c66961fde2e1dd1e40d0f5e822f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:80:38:60:6e:b5:cd:cf:33:66:7b:14:fd:
17:f4:09:84:52:0e:83:91:44:9d:65:91:25:21:58:
f0:6b:d9:50:1f:02:d0:f3:60:ff:ff:f9:9b:fb:57:
6b:48:e3:c3:47:d3:04:38:6b:00:64:4d:68:a0:98:
8c:9b:03:58:18:56:e1:95:22:37:40:c7:a2:1a:04:
46:25:44:c6:0c:5f:55:0f:67:f8:2c:f1:e5:c4:63:
36:d9:a8:2a:e0:43:8a:8b:7a:bc:e8:73:0f:18:a4:
88:b0:86:99:51:45:7b:c8:45:aa:fa:5b:fd:cf:ed:
d6:92:3c:53:f9:ea:01:c7:b3:cd:1d:7f:53:5a:4a:
f9:c4:90:fc:84:b6:8c:69:c1:8c:2f:d5:1b:e5:4c:
6b:10:03:af:18:68:fb:2f:a6:65:f2:76:c1:95:4c:
05:70:f1:68:0a:64:1b:56:9a:e5:58:60:52:18:5c:
d7:b1:c6:51:56:15:38:73:51:88:46:85:35:86:cc:
26:a8:17:68:7b:70:f2:cb:be:ce:0f:7e:b3:04:5f:
8d:45:6d:ce:e1:b9:f8:07:4e:c4:3a:18:22:77:bf:
7b:b7:b6:62:8f:ca:70:6b:a7:1b:f1:46:fc:b2:79:
4e:dd:50:aa:c2:02:b2:91:09:eb:22:b8:c4:7a:d2:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A7:BF:8A:3C:5C:66:96:1F:DE:2E:1D:D1:E4:0D:0F:5E:82:2F:33
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9e:56:ec:51:12:b8:4e:14:9c:47:23:bd:33:c7:13:f7:8b:
39:72:f0:a3:4f:f6:59:df:36:cb:72:7c:0e:54:94:e1:e4:b6:
c1:a1:24:5e:d8:ad:c1:66:27:b3:51:d0:5c:0d:c6:a4:2b:6a:
5a:41:ee:49:0d:24:eb:5b:43:e6:97:d0:ad:bb:cb:a2:dd:09:
78:5d:60:d4:54:9f:2e:8c:ee:83:c5:4f:a7:19:c3:1e:1d:0f:
47:33:06:72:d0:6e:88:89:df:f6:3b:b8:bf:9d:e8:80:fe:93:
8d:99:19:20:0d:81:98:40:fd:ca:cc:6b:bc:d3:56:e7:bf:81:
92:28:d8:e0:f7:e8:e8:33:fd:7b:c3:c7:9c:8a:5c:1e:20:36:
a9:c8:53:c7:c2:2b:77:73:31:9c:a9:8b:9d:4c:6e:93:bd:49:
80:85:dc:e1:7c:9f:cc:4d:bc:e3:63:7c:d4:e2:98:e2:85:26:
89:6c:b1:ce:fc:74:84:90:86:11:d5:14:e0:6b:ff:98:a4:b4:
52:ff:9e:94:c0:5b:0d:53:74:21:df:84:d6:56:f9:34:88:01:
d5:f3:43:73:04:17:39:9f:58:e9:c9:e6:1f:7a:ce:09:9c:4f:
41:42:ed:d5:93:95:3c:00:de:a7:95:54:5c:ab:e2:33:fd:b9:
25:92:de:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:18:16 2025 by rpki-client