Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: WDLBpt9mFnGuRGnxY0sNkIpedWK3YhGrXS4bUgnSmSA=
Subject key identifier: 45:FF:F2:9B:04:77:C6:B5:9B:80:F8:AB:FC:4E:D1:B8:46:57:31:F8
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 0199FBEAEDB3E93D67BFEF73CF0C5E2DC1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: w1LGCdbigfeOXVSstidW/WBA4x7/JgBZqq78sthoWEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ed:b3:e9:3d:67:bf:ef:73:cf:0c:5e:2d:c1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=45fff29b0477c6b59b80f8abfc4ed1b8465731f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:66:6e:40:3e:d5:81:26:8d:03:1d:02:41:
6f:42:39:3c:57:8e:11:94:f3:f4:d6:8b:e5:03:07:
24:e5:ae:c1:02:1e:42:17:22:f8:b8:26:f3:37:69:
23:7e:78:e6:fd:fe:ed:f7:de:72:ef:bd:94:c8:fa:
d8:b4:76:dc:ea:44:06:f9:a3:3f:0c:a0:e0:53:bd:
21:f4:fa:04:76:0a:f8:81:28:31:29:f7:43:0c:a0:
93:70:68:c1:b4:6c:e7:a6:6b:9d:80:17:7f:5f:52:
8f:3f:f9:af:82:ff:bb:52:06:f4:70:f8:d0:f4:49:
4d:b0:4b:5d:f4:10:25:0e:af:bd:f9:f8:2b:9c:1d:
d5:fb:4f:92:64:fd:a6:e5:fc:ba:32:b5:d9:12:40:
ba:9a:ed:40:89:cd:98:6c:5c:74:74:58:4f:b5:6c:
0f:33:c7:6b:d6:d4:59:dc:7f:c2:29:b8:15:fe:8e:
80:92:cf:6d:1a:6b:fa:b9:4f:af:c8:1b:57:71:52:
06:41:4a:80:97:55:21:e0:28:7b:01:cc:81:90:1a:
40:c2:c6:72:a2:f5:f0:00:fc:89:bb:b2:eb:18:e3:
07:4e:4e:88:bc:34:68:39:5b:d5:54:00:06:6a:4e:
65:ac:c8:95:b4:8a:cb:c7:c0:dc:ca:cb:78:63:c8:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FF:F2:9B:04:77:C6:B5:9B:80:F8:AB:FC:4E:D1:B8:46:57:31:F8
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e0:8d:35:cd:eb:c3:74:67:78:be:bb:af:6c:bd:4d:ea:dd:
a5:e0:ec:6a:85:0a:8f:7a:f9:80:b9:c8:2e:89:ea:76:64:f3:
62:cf:96:fe:d6:7e:59:ca:5b:c3:bd:8b:68:5f:d5:04:1b:78:
92:6d:37:83:e4:c2:1a:b6:ce:27:30:a6:d1:8c:59:25:5b:0b:
88:5f:d0:6e:7c:27:60:59:38:e9:5f:19:6a:0d:57:39:6b:a5:
00:23:f7:34:01:6a:26:bf:93:da:80:7f:66:8d:51:46:87:ee:
7f:3a:0a:3d:1b:40:20:4e:a4:81:89:7d:19:81:e2:ca:f1:4d:
fd:3d:94:a9:3a:07:a0:ee:fd:c2:14:dd:c9:4a:fe:46:9f:9b:
be:d1:60:84:c7:ed:d1:12:f4:5a:7e:dc:9f:32:c0:52:49:2b:
ba:f4:52:14:a4:3c:8d:64:1a:ca:2e:60:6f:6e:c1:5b:98:a1:
86:eb:93:ef:11:38:fb:93:96:d3:de:c7:c2:cb:10:1a:be:b0:
90:8b:23:de:95:3b:a7:da:0b:16:53:3a:0f:a7:f3:99:59:d9:
af:c5:c0:3f:9c:83:b2:19:9e:96:dc:da:4e:59:09:11:e4:62:
4a:08:d4:74:46:5f:86:32:1e:f5:ca:30:cb:ac:7b:1b:21:01:
38:82:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:23 2025 by rpki-client