Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: pWZNf7nuD9O/UNItxYXnfY5mDN2Be43uH7Qh1KcOB3o=
Subject key identifier: 5E:9A:BA:02:96:29:0D:61:6A:66:65:BC:06:78:16:3D:92:3B:A8:52
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 0199FD6B5DD1C4CEF69E51388B468FD83935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:35 +0000
Manifest this update: Sun 19 Oct 2025 17:01:35 +0000
Manifest next update: Mon 20 Oct 2025 17:01:35 +0000
Files and hashes: 1: WhKy2xbRKPMUqHbNxaU8wqbOrig.roa (hash: D12/ehSmYFcNAL5zHVyUB4wCp9NF+Juiz/ym/wvx6Xk=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: mUkJYurlWU399soKqIbgAeG3vFEvwlBaLhPYZTTl3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5d:d1:c4:ce:f6:9e:51:38:8b:46:8f:d8:39:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Oct 19 17:01:35 2025 GMT
Not After : Oct 20 17:01:35 2025 GMT
Subject: CN=5e9aba0296290d616a6665bc0678163d923ba852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:e8:a8:a9:6d:47:c3:99:36:c4:5e:59:fd:
68:42:ab:90:cf:c5:fa:9e:e1:26:9e:a0:af:08:e3:
8d:32:e1:41:67:02:8a:ff:a3:60:78:05:78:50:6d:
9b:ab:67:e1:f5:f8:9e:c8:27:f1:bd:d4:8a:9f:08:
af:19:4b:3d:38:61:58:f5:c0:af:35:17:39:53:9e:
64:da:f9:aa:94:b9:b6:58:ee:0b:fd:94:8d:26:1f:
53:ad:fa:57:da:b5:25:c5:37:f3:80:74:65:6b:28:
95:31:82:35:93:e3:73:34:b9:bf:d5:5a:58:2a:b3:
75:c1:c6:c5:fc:12:8d:9b:f1:a2:98:5a:3a:d2:3e:
9f:40:b7:39:6e:70:70:c7:71:a5:3b:c9:0c:59:c7:
f4:bf:98:ca:68:73:48:16:92:83:c9:12:af:18:fb:
20:b5:fa:16:55:61:53:d9:d5:5c:34:7a:c2:46:a3:
39:89:6d:f1:79:78:14:4e:e7:cc:bc:fc:12:69:bc:
f2:dd:2e:3c:03:e6:92:e9:41:8e:e9:86:02:f9:31:
4e:8e:f0:a7:b0:00:59:99:36:08:4a:d5:6d:03:2e:
87:a6:4b:a5:35:50:3d:bf:20:9d:97:da:fc:b2:42:
0c:75:16:3b:54:48:56:d4:7e:a3:b3:e8:74:84:fa:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:BA:02:96:29:0D:61:6A:66:65:BC:06:78:16:3D:92:3B:A8:52
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ee:90:09:bd:f2:fe:15:ea:11:2b:81:04:e4:ae:f6:18:f4:
fd:aa:45:e6:22:75:14:dd:6f:31:8a:0a:bb:9f:a7:67:24:81:
ac:5c:49:b3:67:fc:dc:0d:2f:8b:96:f2:fe:32:2b:7d:2f:7b:
17:79:5d:2b:0d:b8:45:b3:ac:9c:b8:f3:57:68:22:cc:a2:d5:
5e:42:08:7f:5d:14:29:5b:5e:74:6c:33:f6:1d:c8:06:06:14:
18:cb:d8:db:4a:32:ae:06:77:9c:99:33:9a:d7:d9:e0:e2:57:
11:74:a0:6b:5f:91:12:b3:63:74:f5:b1:43:0b:3c:7a:49:43:
50:72:5a:d2:17:da:32:98:01:4b:74:f4:0c:a7:5b:f5:f9:51:
1c:17:70:a3:15:e9:8e:d6:28:b8:d6:b8:62:73:5f:0a:f7:08:
9e:e2:b1:58:d7:4b:bd:4d:56:0b:41:0f:f8:82:b9:7c:cf:c4:
e3:43:8d:e6:ec:c5:b4:09:e3:df:bf:ce:18:f4:55:2e:cc:25:
a3:92:7a:4a:72:95:71:8a:7b:cc:62:f3:3c:3c:20:79:03:c3:
bd:4e:f8:a3:53:49:5d:9b:0b:11:f6:cd:46:b3:e5:16:fb:4f:
ec:b0:09:24:88:ca:fa:18:fe:3d:28:68:05:f7:c8:8b:8c:4b:
8b:dc:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:36 2025 by rpki-client