Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: ev7dUsHQnxuNksrGdJPcTspQPT01mX/mYU09SF0sqOM=
Subject key identifier: 5A:E3:31:1F:AF:51:B9:C7:20:97:7C:98:5A:08:7A:11:7E:DB:41:6B
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 0199FE7E0BADA1597C7F8D382730145035C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 22:01:37 +0000
Manifest this update: Sun 19 Oct 2025 22:01:37 +0000
Manifest next update: Mon 20 Oct 2025 22:01:37 +0000
Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: mUbRtZoWTaRIpo174OhbJPZ+yqQRpkV+LacuKosidLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:0b:ad:a1:59:7c:7f:8d:38:27:30:14:50:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Oct 19 22:01:37 2025 GMT
Not After : Oct 20 22:01:37 2025 GMT
Subject: CN=5ae3311faf51b9c720977c985a087a117edb416b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:c4:d1:10:cd:00:a7:5e:4c:4f:85:38:ba:
12:d6:20:3b:ee:53:41:7f:81:05:d6:ea:ad:fb:62:
e5:ee:6c:f9:95:78:3d:9c:aa:48:f7:e1:de:bd:e9:
d8:b4:c4:20:00:98:fd:09:97:58:16:51:2f:7a:3d:
76:6b:68:2b:b5:d4:01:27:bb:4f:bf:f8:1f:cc:ce:
42:9b:45:aa:fa:3e:eb:b8:93:f7:4b:b8:cd:ab:b2:
a5:39:e7:b1:8a:9f:2d:d7:09:49:5e:5e:38:c6:e3:
e8:c3:91:78:c8:95:d1:e3:6b:44:4e:07:36:00:31:
07:d4:4f:cd:69:07:e2:75:16:be:8d:71:cd:49:f6:
86:54:b1:ae:a6:22:ab:03:20:07:34:94:99:f8:b7:
34:b8:19:25:5b:58:e2:5c:61:40:f0:a5:be:28:4d:
c4:de:27:f6:37:dd:a7:d0:c1:ab:18:0c:ac:00:1f:
57:1f:08:f0:1f:5d:00:87:67:6e:ff:6c:06:5b:e6:
21:b0:0a:fb:58:01:a0:66:ba:b8:9f:a1:c5:42:fe:
c0:1a:12:b3:98:e8:68:dc:f8:02:2c:b6:eb:66:3d:
ab:66:9c:fb:08:c5:fb:73:11:98:0c:86:4f:50:f9:
d0:ee:d6:12:b3:2c:e4:c4:ed:e7:74:9a:97:49:c2:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:31:1F:AF:51:B9:C7:20:97:7C:98:5A:08:7A:11:7E:DB:41:6B
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:94:2f:06:81:62:48:da:cc:79:4e:86:ad:e9:95:68:a4:1e:
06:46:52:ec:77:30:ba:d7:00:16:21:c7:bf:c1:a9:2b:50:20:
cd:55:1a:28:83:e7:69:67:46:13:1a:8e:c3:cc:6d:a9:1c:5e:
ec:0d:45:91:ec:54:22:7b:e6:21:6a:5c:cf:02:99:ba:fc:a1:
1a:26:db:6b:df:43:84:4d:d9:ee:cf:1c:a3:b3:3f:e2:00:38:
9c:10:f1:36:7b:54:86:d4:99:d8:34:4a:d2:87:aa:0a:fe:cd:
9b:0b:8b:e1:b5:e4:44:bc:10:0b:64:b2:b4:88:56:65:55:37:
04:72:ca:8e:b9:35:51:51:5e:eb:47:82:fb:12:01:88:a1:a0:
c6:19:4c:85:88:d7:aa:46:37:e5:65:1a:e4:b8:9d:4f:44:23:
d5:38:70:ee:7d:aa:68:da:07:5a:bc:86:dd:62:f6:aa:1f:78:
82:73:41:e2:69:20:9b:43:c9:68:9e:f6:67:3f:81:2c:ee:78:
60:2a:e8:ce:cb:fc:39:59:eb:3c:53:75:44:d4:71:e9:83:65:
e7:32:c1:dc:5d:9d:d3:46:69:d3:65:76:a6:91:07:f7:05:83:
d0:90:50:42:76:8e:70:d4:ac:22:93:58:97:11:dd:9f:6b:31:
01:87:3a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:55 2025 by rpki-client