Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: V9Rbvtdx0W1a57Qzp7H23IhlVzmUuPmCErSRlFQP6ko=
Subject key identifier: 5E:90:1B:2F:23:0B:A7:AB:36:B8:AD:B2:3E:D4:38:DE:87:42:98:F5
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 0199FD6ACF2A52E8D42D7361546DB9908599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:00:59 +0000
Manifest this update: Sun 19 Oct 2025 17:00:59 +0000
Manifest next update: Mon 20 Oct 2025 17:00:59 +0000
Files and hashes: 1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: VsaB/zd1Gb5wa6mBbU/tLCJSDFzKY8jFSKy1TkxuysY=)
2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:cf:2a:52:e8:d4:2d:73:61:54:6d:b9:90:85:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Oct 19 17:00:59 2025 GMT
Not After : Oct 20 17:00:59 2025 GMT
Subject: CN=5e901b2f230ba7ab36b8adb23ed438de874298f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:a2:ed:58:92:59:29:6a:2e:2e:4e:42:e7:
b9:f3:bc:26:58:10:6b:9a:90:e3:18:0d:fc:3d:b4:
bc:d6:d2:08:77:12:92:d4:9d:0e:32:0f:66:a5:f3:
61:5a:7d:19:85:73:34:28:fd:40:84:87:b7:18:a2:
24:2a:49:f5:dd:42:0c:83:73:b9:2b:87:d8:30:53:
15:4b:4b:02:b1:79:88:a8:80:e7:07:0a:48:0a:41:
3b:de:a9:2b:be:34:f3:dd:fd:48:e5:6a:b0:38:1e:
06:14:f6:44:93:a6:c0:1f:74:76:45:d6:13:3e:ab:
9b:2b:8d:61:fd:65:d5:98:17:86:de:0a:fe:85:f2:
75:bd:3e:eb:c2:ec:6a:79:ba:20:4e:b7:14:59:dd:
81:53:6c:b1:10:c3:2e:30:ea:7c:95:fb:89:8a:3a:
7f:85:11:e4:07:5d:07:ba:71:02:43:55:60:af:0f:
c1:ae:93:9e:13:9d:97:a5:69:5b:de:26:d6:c3:70:
72:c1:ea:e3:7a:13:bf:4b:9b:61:9e:04:35:5c:b6:
80:3c:07:23:7d:ef:6c:b5:5a:5c:de:7d:ad:eb:3d:
7b:38:a8:39:1c:c9:71:0b:74:89:10:c5:fc:6e:2b:
8d:3a:d5:b0:c9:f3:4a:39:b9:ef:1c:e6:6a:82:12:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:90:1B:2F:23:0B:A7:AB:36:B8:AD:B2:3E:D4:38:DE:87:42:98:F5
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c3:6b:1a:6f:b2:d7:d1:e1:12:2a:34:38:78:78:dc:41:7d:
bf:94:02:83:4c:53:68:f0:72:f4:ad:8b:70:8c:45:a8:49:32:
22:d0:7d:5e:ca:43:cb:8e:3d:1b:cd:fa:4b:d2:a5:e5:e9:46:
0a:a6:e7:4e:a1:98:9b:65:4c:9c:4f:d0:be:d9:93:8c:43:ce:
aa:b9:67:d0:24:26:01:8d:11:c6:ad:4e:68:e8:a9:4c:42:3f:
bd:b0:19:36:ba:ca:da:cd:1f:2c:bd:66:b6:c9:36:df:99:94:
bb:07:bd:17:f3:af:4b:ca:4a:91:05:83:00:15:9f:43:21:6a:
2c:43:e4:a0:57:e6:91:49:1c:01:5e:4c:14:8a:e3:c8:41:0a:
c5:2c:20:17:4a:11:9f:0d:a8:55:4c:18:05:4b:b7:3e:58:6c:
82:bf:65:a3:5b:4f:6e:7b:81:9a:4f:ce:74:97:8c:48:9e:4a:
ef:4a:0b:bb:99:9c:41:29:6f:79:33:79:35:e0:20:23:3b:86:
52:8e:87:05:37:61:ca:51:18:ba:f7:a4:9b:c3:70:4d:10:9a:
2c:61:fd:9c:45:ff:7e:4d:81:ad:dd:a8:32:5f:5b:04:78:10:
d1:4f:fd:fa:79:ef:08:3d:a2:35:6a:69:e2:e9:57:28:11:3a:
9e:4a:ad:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:37:30 2025 by rpki-client