Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: 7cjJzmKFEgr9wM6ERae8+I3sOIXXcdwojR1vWSUoJHM=
Subject key identifier: 67:FD:42:EF:93:25:98:DA:16:AE:0B:8D:93:F7:5B:1B:C0:12:AF:07
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 019A01B5216D51685AFD812C3BE70D5AADB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 13:00:38 +0000
Manifest this update: Mon 20 Oct 2025 13:00:38 +0000
Manifest next update: Tue 21 Oct 2025 13:00:38 +0000
Files and hashes: 1: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: qIT/Hj999cH3Mg76AV4V0TyGiFSEFneVSRdsLqmKmsQ=)
2: zr3t3IA44QoorxZIsw1MTeuie_g.roa (hash: ompX8t7N2TkHWnLirBbMhvCUBmfybfJcK/n6fwWr0hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:21:6d:51:68:5a:fd:81:2c:3b:e7:0d:5a:ad:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Oct 21 13:00:38 2025 GMT
Subject: CN=67fd42ef932598da16ae0b8d93f75b1bc012af07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:94:f6:d6:c0:a8:0b:f8:a0:13:10:ac:a7:
0a:54:52:a8:a1:c6:98:6d:4b:55:b0:92:4f:75:54:
ad:cc:3c:4a:e9:e4:9d:c2:e5:af:2b:c3:8d:e0:f4:
96:f4:88:1f:f5:69:ea:04:04:6e:4e:8b:f3:59:51:
07:0b:be:f7:38:6a:19:4d:4d:c5:7e:42:8b:d3:c2:
1d:a7:e8:f3:78:60:2f:bf:14:66:ab:a0:81:f9:5c:
2b:96:e5:76:30:1f:e7:cf:67:7b:11:c9:44:ee:c4:
b0:a8:1a:0b:49:7e:93:db:ba:4b:f8:d8:44:20:f9:
b3:d1:2d:05:81:82:ee:8b:ef:a0:4d:a9:f5:97:bf:
fd:92:99:54:21:82:c0:8a:b9:38:95:0f:ee:c7:17:
d9:a3:29:02:35:21:88:4e:8e:9e:23:8b:00:4b:04:
e5:89:25:fa:13:2b:c9:03:a7:b4:bc:7d:90:b9:5b:
33:08:29:01:4e:02:b5:84:ba:dd:42:37:77:d8:26:
8a:84:bd:9f:54:f5:c0:03:e7:f7:c4:dc:7a:89:69:
aa:21:b9:89:7b:91:49:91:61:e7:51:f2:5b:1d:93:
0b:a7:b2:29:12:b6:39:f8:12:49:e5:41:4e:e9:85:
ec:c0:70:3b:9e:c7:51:30:0a:53:98:c2:94:31:27:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FD:42:EF:93:25:98:DA:16:AE:0B:8D:93:F7:5B:1B:C0:12:AF:07
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ff:4c:f0:9d:2e:57:b6:2a:8f:74:43:44:19:88:7c:1d:f5:
75:9f:70:bf:75:a4:86:61:5c:b5:52:8f:e1:1b:1d:71:fd:e3:
f2:fd:93:82:c0:0e:a3:4b:7b:c3:a5:9d:eb:e9:fe:ff:c5:4b:
4a:42:68:f3:93:15:f0:cb:cc:74:9f:d0:81:63:50:3d:89:66:
c9:fd:5b:63:77:f8:62:28:58:b6:48:b1:3e:39:7a:0a:a7:ea:
a1:d5:1b:8c:ba:4e:0e:12:4b:6b:0d:11:a4:02:69:6c:b8:6d:
b0:b9:6f:6e:f4:d7:23:9d:3b:8e:d1:75:0f:7f:42:3b:ad:cf:
f7:72:e4:f3:08:a5:19:5d:04:1c:fb:41:32:bd:aa:4b:23:00:
e9:64:33:fd:e6:1d:f8:36:f7:da:62:2b:98:4d:f0:44:76:75:
18:f3:0a:ae:25:d1:ad:40:4b:e6:f4:3b:72:a7:7d:fe:ce:38:
99:09:df:86:77:90:49:cc:03:4d:7a:57:2c:aa:cd:13:db:24:
2d:8b:09:6f:f3:31:fd:09:6c:8e:f9:95:32:7d:65:da:d3:a1:
3c:35:db:ca:5d:8a:54:86:4f:c5:d5:32:47:ef:44:40:dc:d6:
82:dc:bb:18:70:0f:d2:e4:10:74:66:3c:3d:3f:28:43:51:e4:
73:60:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:08 2025 by rpki-client