Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: 0bdD+ee/TLnBISc9QnjJ1VoRcJ21XOlnzz3tY0SJEoA=
Subject key identifier: 97:E6:8E:1E:B6:92:B2:27:ED:16:7E:EE:1E:A6:E5:5E:AB:A0:16:9A
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 0199FC58A44E1EED6C4D8C85B62A9D5F1113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 0ED9
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=)
2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: N8vbgc9nCiwGaUi84III5uUM9sWn0NSewKknhBzSY0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a4:4e:1e:ed:6c:4d:8c:85:b6:2a:9d:5f:11:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=97e68e1eb692b227ed167eee1ea6e55eaba0169a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:10:f2:f6:5a:01:8f:60:17:46:d5:84:d5:
ad:59:15:b7:0d:7c:61:cc:77:96:2c:6d:b1:34:33:
37:a5:06:c5:4f:53:5f:f7:61:2e:a0:91:9f:38:26:
c5:42:67:2f:66:54:0a:ee:c3:78:75:11:34:9a:4e:
20:cb:24:41:5c:4f:90:42:d9:4e:45:18:31:ca:10:
b4:38:75:4c:11:36:00:1e:76:f4:73:3c:06:fe:3d:
a4:d6:55:98:23:ca:c5:80:e7:d9:51:01:6a:8d:ab:
2c:28:5d:fd:67:42:02:fe:10:98:01:33:ab:3d:d0:
5d:c6:96:e6:ef:9f:fd:a8:08:75:9f:ec:f6:af:40:
42:8e:c0:99:46:6e:89:38:da:7b:59:e3:62:34:d7:
1f:0b:57:06:9a:ff:30:2a:d2:f8:aa:a0:cf:da:50:
f8:f2:91:cf:4e:37:73:df:d4:56:91:67:17:06:c7:
f8:9a:55:11:10:da:aa:96:61:f2:9b:83:62:77:86:
9a:f4:51:fd:23:39:6a:bc:f5:fd:46:4f:af:6a:1c:
89:47:a3:1a:10:87:3d:be:ee:b5:7e:90:3c:de:5d:
36:1c:9b:82:ae:34:d8:9f:51:bd:3e:0f:9b:ce:b7:
3a:74:30:15:32:08:06:de:e4:2a:56:a1:41:00:99:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E6:8E:1E:B6:92:B2:27:ED:16:7E:EE:1E:A6:E5:5E:AB:A0:16:9A
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:39:18:7f:d8:6e:55:1b:fb:0f:43:df:7e:5a:e2:92:94:26:
5e:c4:41:b1:44:1c:42:fe:83:2a:33:4c:21:2c:a1:60:54:d4:
af:8b:e6:4f:89:40:5c:d7:3a:c4:87:a6:38:75:30:c6:a8:20:
ba:e0:26:b9:7f:a6:c4:ac:5f:e8:5e:51:d0:3f:47:5b:6b:c1:
95:8e:74:84:4b:65:53:1d:85:d0:4a:9f:21:9d:20:7a:1f:26:
7d:2e:ab:8a:dc:fb:b5:ad:47:e8:55:12:d7:5d:16:08:41:5f:
a9:71:20:66:4a:71:77:90:46:f5:19:80:51:cf:1a:bc:f6:ab:
e0:e0:99:12:70:11:46:29:b3:b6:b3:23:27:98:22:cc:d3:e6:
85:ee:7d:a6:0d:9e:37:61:ec:67:9f:30:98:e3:dc:a6:55:9c:
be:c6:53:31:4e:fa:ea:f4:28:97:9b:d0:9f:a2:e9:d8:b8:38:
b7:8c:f1:15:e4:05:a1:f1:a4:b4:c8:20:47:64:9b:b9:71:9a:
42:7e:e8:d0:40:ac:48:00:65:f4:ed:2b:64:ef:c4:45:fb:8f:
da:3e:00:e4:45:a7:4b:f3:28:e0:fa:13:74:d4:d9:d0:1b:aa:
e2:40:25:85:cc:bb:e5:49:94:91:2d:45:fc:12:4a:68:cb:d2:
ef:53:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:24 2025 by rpki-client