Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
File: yPJYziA-BKM_TpBlEVOyWc_6Pog.mft (raw, json)
Hash identifier: nFE4v0e4O9lbkzchdOkQhSVS9eBhW83WLNNkVgOmWtg=
Subject key identifier: F2:14:EF:78:AF:6D:3D:A4:04:B4:12:23:2B:62:F5:21:AD:62:42:59
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial: 0199FBEB26205A0274C12F1E97363939FDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: 3OPKqlzsdO_6FnnigdjEBtH5MGI.roa (hash: TGXodn+4ZnMS0vB8YcYqILiualGqtvptFZ+aYltyIls=)
2: DSP2YiR4WzjHqSWGSS08rUQRgbE.roa (hash: wRqBcz801mLsMlnqTiS+wIo1U44VP4wBktKdtKLPifQ=)
3: L-DhFAOlHk5rFENU35v4H6Y8kC4.roa (hash: es/wTE6LdxRXaEI3U8d6ZJo/4QzkGb/m+lXYCfWMDmo=)
4: yPJYziA-BKM_TpBlEVOyWc_6Pog.crl (hash: 9gtF0eWbdnO3K9skSk/ogSGbOSMdXMlEuIDjjbVQ0/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:26:20:5a:02:74:c1:2f:1e:97:36:39:39:fd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=f214ef78af6d3da404b412232b62f521ad624259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:2d:0f:c8:a8:10:21:20:fb:5e:7f:5e:6e:
2b:77:68:f2:17:8f:d8:fe:b8:df:d6:8a:cb:d2:1b:
b0:88:93:17:00:d4:bd:45:e5:83:c6:4a:c2:96:a5:
4c:16:ed:54:81:d3:93:1f:65:38:24:72:17:5c:0d:
74:60:d2:81:81:89:fa:10:e7:46:46:ee:f4:11:0f:
69:5b:c8:05:b6:67:44:ea:59:77:78:d3:d0:e3:0f:
06:65:75:e5:ef:cc:6e:94:08:e3:06:b6:5b:69:59:
db:9e:73:8e:8c:c2:35:97:95:17:48:a7:c1:35:ed:
f5:1d:fb:b4:9a:d6:81:2d:4a:22:f0:17:de:f1:ec:
ed:bb:a2:8a:71:71:d9:fe:de:df:4b:ab:bf:ab:4f:
eb:be:88:ff:f0:df:3b:b8:5b:4b:0a:c4:7e:ac:af:
1d:e9:cd:86:d1:28:6b:1e:cd:da:ef:62:0e:40:d5:
15:e1:d7:fd:4b:c8:a9:02:15:6b:5c:71:bc:e7:e4:
9a:2c:ff:4c:75:f0:15:c3:4c:45:b0:85:a6:15:d0:
86:45:38:a5:a5:0f:cd:ba:d1:98:41:5c:44:3b:58:
d0:3a:2f:b7:a5:a7:fd:8a:c1:99:3b:14:60:08:45:
fb:ef:18:7a:de:9f:3f:4a:6b:3c:dc:2f:82:47:db:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:EF:78:AF:6D:3D:A4:04:B4:12:23:2B:62:F5:21:AD:62:42:59
X509v3 Authority Key Identifier:
keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9a:dc:02:8a:de:60:f3:a1:7c:6e:69:1b:b9:b1:1f:1e:0c:
ed:ac:48:5c:0a:6d:84:17:97:52:4c:88:74:67:0b:a0:66:c3:
95:ad:26:3e:ea:af:68:99:8a:44:78:bc:57:46:15:52:53:af:
9f:c9:0c:8f:5d:83:c5:9a:1f:e5:d9:01:49:33:66:a7:34:93:
b5:07:45:81:4b:a4:62:60:a9:f7:25:d5:1d:6e:df:66:90:f1:
64:85:0f:49:2d:b0:b0:80:38:c6:61:6e:87:44:e1:72:04:b2:
ae:98:14:1c:53:f1:14:21:92:9f:95:d1:3d:03:fd:ec:2c:74:
9e:e4:a0:4e:11:41:3b:53:f1:c9:a4:b2:17:17:c6:69:c3:1a:
48:6a:08:97:4d:9b:6f:21:66:cb:05:44:c1:2b:92:32:3f:d9:
d4:ab:e6:e2:e5:aa:af:52:a7:0a:d7:49:c5:d8:a0:c2:15:77:
42:ab:08:00:8f:68:4b:f7:02:67:ca:85:ce:66:7d:fd:9b:7b:
45:21:c7:d1:b4:22:e9:34:d8:d0:84:fa:9f:94:2c:8b:8d:15:
43:01:e2:dc:b7:a7:3a:eb:25:e9:03:5e:5c:f1:6a:52:a1:e4:
a0:d1:22:e9:f7:d0:66:4f:23:84:fc:82:42:ef:20:cd:0f:f5:
5d:b0:80:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:23 2025 by rpki-client