Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: HpQarmxEQfnwc2QA2edRRdTZrHTPIl64VD+BLndRFrc=
Subject key identifier: 48:A4:D6:8B:F2:0D:9E:10:83:18:4E:18:E5:DC:8B:A5:0A:46:F1:08
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 0199FCC6793CA302FCD33F8F1343AE95D386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=)
2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: gfBw+VKDF8m9iAbDL3vCzMjioQ77QwC5f0lAY/rUiqs=)
3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:79:3c:a3:02:fc:d3:3f:8f:13:43:ae:95:d3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=48a4d68bf20d9e1083184e18e5dc8ba50a46f108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:5f:23:e5:88:b9:a4:39:b4:06:1e:64:b9:
e5:2d:aa:0c:e5:c2:64:c3:bc:09:9a:5e:fd:da:bc:
bd:df:8d:5c:99:c6:62:51:6a:c8:24:a3:29:3e:40:
c3:79:10:8c:0e:d4:c5:7d:bb:bc:83:95:52:c4:f7:
20:73:1b:0c:70:fd:da:df:dd:0e:18:a7:3f:b6:4a:
32:91:63:63:fe:79:da:ae:7f:b2:7e:7d:43:04:6d:
39:1f:ca:e2:eb:ae:55:cf:37:81:70:75:27:e0:56:
4d:60:a6:a6:09:0a:14:61:22:6a:2e:2e:7f:60:d8:
af:2b:69:e0:9b:c5:0e:df:75:c3:9b:dd:23:52:a8:
41:4e:c9:51:2e:bd:0d:ac:31:84:06:65:c8:d9:1e:
c8:7b:31:c4:85:c8:69:b9:a6:2a:7e:d6:db:f6:e7:
50:58:40:dd:79:0b:ae:b5:d8:72:28:a5:cf:63:2f:
9d:d6:13:15:97:0c:53:f0:ce:11:d9:ea:31:66:b2:
38:ca:13:b3:f8:22:0d:ae:37:4b:4f:b2:49:7b:3d:
90:34:da:0a:01:62:7c:87:cc:4e:73:74:1e:5f:01:
47:83:7e:af:b7:fa:77:62:a7:e5:84:10:a8:35:53:
c5:89:f1:23:57:88:f6:ee:10:7d:ff:e3:a6:49:50:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:D6:8B:F2:0D:9E:10:83:18:4E:18:E5:DC:8B:A5:0A:46:F1:08
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0c:86:cb:d5:41:65:a1:41:ca:44:aa:50:b8:51:4d:ed:41:
c9:32:63:63:c3:7f:14:c4:78:da:44:f0:b2:c4:81:e2:a0:38:
3b:91:85:de:f5:2b:de:fd:e2:84:c3:dc:c4:c4:ff:b6:1e:a6:
f3:3d:22:d9:9a:b1:fb:c3:e5:37:de:d2:ff:23:cb:2a:95:8f:
5e:45:6e:46:ba:97:00:1f:73:7a:24:c2:13:94:a7:57:cc:4e:
de:e0:7b:2f:57:8f:44:d6:ba:be:e3:fb:ed:81:2a:37:fb:bd:
a2:2f:3e:9e:b1:01:25:08:5e:8f:3e:2b:e0:e2:2a:05:9c:5c:
40:5e:a7:f3:90:96:0b:82:3f:7c:79:10:b8:6f:db:03:29:08:
90:a2:35:fc:8f:5b:29:6f:2f:71:ed:a3:d7:9e:4d:2d:30:12:
61:ad:76:33:72:29:d2:81:03:75:0f:9b:b8:e2:c8:cc:00:79:
48:99:07:cf:4a:e6:dd:51:0f:b1:ac:dd:b0:8d:bc:6c:e4:d3:
10:67:18:46:3c:bf:d3:99:18:9f:c2:a8:ee:7e:d5:5e:d4:ae:
1d:0b:77:c9:eb:98:5d:6e:67:67:a6:e8:25:e6:82:f8:a2:dd:
35:a3:46:72:b4:df:b5:0e:d3:f5:62:1e:f9:9a:ce:87:8e:3e:
c0:28:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:10 2025 by rpki-client