Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier: ONHy0UjYnO+nYtJFTgovo2e0Gc4b6R455XtTqvRAulM=
Subject key identifier: 21:99:CA:C4:99:7F:C9:83:52:CA:56:38:E9:F9:D2:9E:6F:A6:AD:3E
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial: 019A01B588B3A0C72368ED69A747AB8B561D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number: 1677
Signing time: Mon 20 Oct 2025 13:01:05 +0000
Manifest this update: Mon 20 Oct 2025 13:01:05 +0000
Manifest next update: Tue 21 Oct 2025 13:01:05 +0000
Files and hashes: 1: 526G98YrX5YRgU8kSVFlOR-68SU.roa (hash: EfmIyH+1frBE08mLPE+N4lUdJCEbw7QSSljLZgrUP1M=)
2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: PZynyMYomJBOpeJjOC+zUOGPdH+04GseP9d13ICH9+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:88:b3:a0:c7:23:68:ed:69:a7:47:ab:8b:56:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
Validity
Not Before: Oct 20 13:01:05 2025 GMT
Not After : Oct 21 13:01:05 2025 GMT
Subject: CN=2199cac4997fc98352ca5638e9f9d29e6fa6ad3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:9a:ee:cb:a8:a6:75:b7:09:a0:31:5b:ec:
99:85:dd:4b:e9:4c:97:1b:28:a6:69:76:62:26:a9:
a6:ca:20:40:84:b4:99:d2:29:67:ff:e3:56:a5:75:
2b:ff:18:60:a6:8a:fc:00:83:90:b8:f7:fa:ee:33:
f3:47:3f:5e:81:79:af:91:41:f3:0b:5f:0a:7b:32:
e5:92:40:8f:0b:b4:75:41:16:76:45:47:3f:98:2b:
81:c8:80:09:f0:25:56:39:a5:d9:13:ab:49:2b:3c:
96:bb:29:54:96:93:6f:bf:85:37:d5:b0:c2:3c:8b:
40:21:b6:df:b5:d7:aa:01:ef:98:47:00:af:f3:3b:
7b:8b:33:3d:a0:05:a1:ba:97:5f:5f:e7:af:b2:e0:
1c:7d:23:74:b8:dd:b7:5c:ac:27:d1:05:67:77:db:
3d:16:cc:56:e9:b5:ae:51:bc:9d:61:30:c8:60:67:
b1:51:7f:84:02:ae:07:b2:40:2d:8e:a3:a6:54:a2:
ea:92:ed:23:f0:78:63:c2:b8:a9:de:23:60:0e:e5:
03:b9:10:bf:24:c6:2e:47:72:ea:97:19:a5:09:71:
8c:55:bf:04:29:84:37:84:97:72:2b:93:5b:59:e6:
1a:e4:83:58:d5:23:5b:8b:3f:63:47:83:9c:57:ce:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:99:CA:C4:99:7F:C9:83:52:CA:56:38:E9:F9:D2:9E:6F:A6:AD:3E
X509v3 Authority Key Identifier:
keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6c:aa:55:09:a1:95:11:94:24:7c:6e:cd:82:82:87:b0:e1:
da:02:64:fe:fd:7e:e5:b9:9c:f6:32:fd:6a:1c:dd:3d:c8:b3:
48:3c:21:77:11:7b:80:e8:51:e1:6b:29:84:3e:28:ad:7d:fb:
e6:45:c6:9e:ca:ec:85:22:9d:ff:bb:49:0d:1d:db:5f:13:82:
6b:c1:65:1b:44:ac:6a:a8:f8:0e:b9:c3:03:e8:c6:1c:55:10:
4b:c7:66:5d:dd:80:9b:14:93:d3:32:d5:07:08:ee:17:50:26:
a4:ad:98:f4:54:58:b9:85:60:ff:91:78:2f:01:c5:91:f4:92:
88:df:ba:72:14:60:30:d9:10:d2:54:d4:21:37:c0:3f:04:9f:
14:bd:d2:87:10:69:2e:20:f8:df:cd:71:16:25:2d:16:88:1e:
05:b5:f1:fd:27:e6:ff:40:ff:5b:59:75:a8:e6:9e:d5:2a:c7:
93:a7:86:d2:82:fe:23:44:eb:d2:49:4a:5d:d1:29:73:f9:6e:
d6:31:b6:08:54:0e:60:af:b1:62:d9:ff:4e:3e:18:97:45:62:
a8:ce:3e:21:6c:5f:15:b3:d2:e7:c2:8b:9f:68:f2:bc:91:90:
7b:1d:3d:52:60:78:c9:b5:67:c8:91:87:5e:84:b4:f7:3e:38:
94:da:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:54:28 2025 by rpki-client