Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
File: yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json)
Hash identifier: jG3zcPTv71KLYD7+Ft9X0lWRb7UK2SGbo2R3WmnFI8Q=
Subject key identifier: 03:B0:94:EA:06:49:A2:7B:9F:16:0D:06:95:89:FA:82:AC:83:44:E3
Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Certificate serial: 0199FCC69C048E1547C5529A77C1276CF286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: 4aW2wKCZJHKdaC2dMSiuzWhCfmM.roa (hash: tmaMv+cdlIL60LuV9hVyriQ5fK7vMtVKvDnmNSyFkzU=)
2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: HQ4JYIRojS+DBdpyM2Aye/qny2VuYOltP25PDXool7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9c:04:8e:15:47:c5:52:9a:77:c1:27:6c:f2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=03b094ea0649a27b9f160d069589fa82ac8344e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:1c:aa:66:86:98:f1:1d:c3:ae:d5:11:79:
3d:35:25:76:e4:b2:bf:e4:b4:cc:36:12:6f:16:20:
44:94:0e:e2:a8:8c:a0:9e:4a:1e:b1:77:cd:cb:1f:
d8:dd:22:30:c2:ea:7b:1a:3c:af:a4:e9:f5:81:74:
97:e4:21:38:e9:85:00:20:75:47:44:45:e1:4c:16:
bd:2f:f8:24:b3:8a:40:96:1c:d3:7c:ef:58:01:ba:
a4:f6:43:ac:ba:ff:27:fb:6d:af:92:f4:d3:59:bb:
5d:56:e6:2d:23:51:16:21:62:8d:8e:51:e8:93:07:
80:b9:ae:f5:be:c5:a0:f2:d9:46:f3:5b:da:68:15:
e7:a4:17:a9:3a:98:40:43:db:6e:7c:38:0f:87:d6:
59:0b:24:ec:65:89:c2:8d:ae:99:d5:f7:17:b2:a6:
32:15:8f:72:96:a6:7b:df:07:70:20:e1:01:ee:ef:
65:b5:9c:69:b0:be:24:6d:5d:7d:95:86:e7:a5:9c:
0c:f4:b4:48:89:74:2d:25:bd:dd:3f:eb:84:13:97:
69:04:a8:d2:e1:68:df:34:d2:f4:fb:ad:d4:7c:ed:
44:f0:2f:96:f2:c6:b2:e3:f3:cd:69:46:20:d3:f3:
5a:3d:2e:f1:7e:ba:82:89:02:8c:56:60:eb:d7:d2:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B0:94:EA:06:49:A2:7B:9F:16:0D:06:95:89:FA:82:AC:83:44:E3
X509v3 Authority Key Identifier:
keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e6:48:04:05:9a:3c:a5:ed:0f:fc:e4:fb:da:ef:b6:95:8a:
d6:a4:41:1f:12:0c:23:3e:d6:47:32:56:e1:ad:37:77:7e:a0:
e7:a2:4f:9d:72:a9:0a:e5:be:f9:c0:ce:1c:9f:c7:f4:b5:a2:
e2:e4:c2:2d:2c:07:4e:f1:f3:09:84:c1:86:2c:8a:cc:ee:ad:
0e:d6:fd:92:f8:72:1b:67:73:e6:e3:6a:26:dd:af:f1:11:a9:
d8:86:2a:92:ba:89:8e:49:db:b8:02:56:77:21:14:cd:4f:40:
17:39:6f:b2:9b:39:6b:43:36:57:3b:66:c6:6d:12:32:ce:7b:
db:c3:c4:48:1f:53:35:38:78:55:d1:23:b5:f8:8c:46:c7:50:
b4:dc:b3:62:c8:69:e5:02:ad:3f:20:9c:45:08:0f:a9:0f:02:
3c:63:c3:74:97:00:f0:1d:b9:cb:cc:de:dd:1f:ae:05:d6:63:
6a:3c:0a:c9:ed:69:e5:eb:e3:e5:b5:db:40:c9:b8:29:93:36:
eb:17:7c:9b:da:f3:78:e2:b9:15:f5:93:ae:7f:02:9e:8b:46:
bf:aa:ba:42:ad:0b:89:70:a5:41:9f:60:e1:56:0a:ec:1b:36:
31:a3:81:7d:5f:d7:7d:b6:9f:0d:90:21:d3:30:62:e3:13:59:
05:cd:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:33 2025 by rpki-client