Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
File: YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json)
Hash identifier: 5Yu1PWFUf+crUVQM2v9/Dkwu+nROwPjbn0CUfHq3W3g=
Subject key identifier: 89:C8:53:6A:1C:8D:C5:4E:C1:B3:2F:A8:80:E0:14:20:33:AC:12:D8
Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
Certificate issuer: /CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Certificate serial: 0199FB0F2D3388AB10B3191EA23BA5B975EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 06:01:39 +0000
Manifest this update: Sun 19 Oct 2025 06:01:39 +0000
Manifest next update: Mon 20 Oct 2025 06:01:39 +0000
Files and hashes: 1: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: hrVutFqWhWRS/JoOCY+nRXtDfreVFeLQ105t0v+DOn0=)
2: syKB6zisduN4C3cAJozjgCCO0PY.roa (hash: 0Vdx4RjEX6ZtXLCLRmfeUBESEOKss3f6Va2BIWn7LcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:2d:33:88:ab:10:b3:19:1e:a2:3b:a5:b9:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5
Validity
Not Before: Oct 19 06:01:39 2025 GMT
Not After : Oct 20 06:01:39 2025 GMT
Subject: CN=89c8536a1c8dc54ec1b32fa880e0142033ac12d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:33:63:7d:3e:74:ed:32:30:57:00:1c:ae:
24:39:cf:3a:e7:ca:a2:ce:94:fe:97:cf:0e:bd:40:
25:4a:2a:8d:c7:4b:22:2f:a4:99:14:9d:97:c3:9b:
ee:41:cd:99:3e:1a:ed:9f:49:ea:27:2f:17:76:77:
fa:f8:d2:b1:a8:16:77:26:dd:4a:ee:6c:de:bb:e6:
a5:0b:e8:45:45:2a:66:d8:c3:db:6f:95:b8:18:f2:
87:9c:2f:e1:53:f3:16:c5:c0:e4:b0:ef:41:20:d6:
c3:0d:73:bd:5e:cd:1f:0d:be:83:f3:11:25:da:da:
27:5c:2b:a6:aa:41:52:3b:b9:0e:4c:29:de:34:00:
a6:e6:1a:9b:15:e5:1b:aa:4f:16:c9:f3:ba:3b:72:
d1:9e:1b:62:77:4e:f7:78:07:02:6f:50:c1:37:c9:
6b:dd:20:99:b7:3d:02:ec:39:2b:70:56:40:5b:01:
77:e5:a4:8c:99:31:ba:e5:28:48:98:a6:0e:52:f1:
1c:fc:6c:e1:1a:06:ea:10:ee:cb:c3:ca:c0:5f:5f:
6a:44:9c:8b:6d:ec:d6:5b:e2:a3:46:e4:1c:a7:8c:
a4:43:78:1f:8d:07:d2:ce:bf:25:d9:c4:a4:ae:73:
15:1b:2e:df:fa:a9:8b:68:b8:3e:57:99:b7:2a:83:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C8:53:6A:1C:8D:C5:4E:C1:B3:2F:A8:80:E0:14:20:33:AC:12:D8
X509v3 Authority Key Identifier:
keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ff:94:be:72:32:09:92:ae:0c:b0:37:5e:75:ca:de:55:7f:
2b:ff:6f:25:c9:84:ce:b2:1b:f9:8e:41:cd:c0:d0:f9:19:a8:
cd:89:9f:12:3c:6e:9a:40:3b:88:7e:ba:ad:38:ac:16:0f:f2:
28:9b:69:24:b7:b2:d1:fd:aa:aa:67:bf:af:5d:96:77:7e:0f:
30:fa:d4:6e:27:aa:2b:49:7e:ae:cb:1f:9c:5e:33:73:37:94:
a7:b5:0c:cb:e4:7c:93:e5:fd:f2:d4:12:68:29:e5:df:ee:c1:
dd:95:93:a0:c8:5a:f0:d2:3c:97:eb:fd:12:67:cd:1d:9c:f6:
e1:5a:70:40:e3:31:94:57:c5:d2:97:c1:db:45:ef:ce:6d:47:
f4:a0:7e:0f:4b:84:7b:aa:30:a0:09:7f:12:72:04:58:fd:7a:
84:4f:ff:65:54:ba:6f:cd:b8:66:13:9e:42:ad:86:68:97:cb:
7d:a4:bb:c9:3a:27:d6:28:c9:4f:05:88:1e:f1:20:80:53:07:
cc:ea:cf:26:c9:f7:01:95:08:65:ff:ad:c1:6d:19:34:7e:47:
6f:33:59:21:7d:f7:ff:3f:20:41:ca:02:a5:fd:72:99:4a:b9:
36:de:16:55:ea:be:4a:51:08:a9:b5:31:3b:d0:41:18:57:9f:
f0:47:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:23 2025 by rpki-client