Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: D+azSGxUyCLZ5oFdsvT+Oqi1+MNL3cYH72XExWbf1fA=
Subject key identifier: 18:76:36:A9:35:81:78:6F:07:DB:F2:17:D8:C5:A1:62:B3:41:B9:8C
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 0199FB0EC618B02B75ACC762BDCFA48BA26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 06:01:13 +0000
Manifest this update: Sun 19 Oct 2025 06:01:13 +0000
Manifest next update: Mon 20 Oct 2025 06:01:13 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: AZoGFbhuRHk4yP/nwQYM4ojZrSIND6kT50rti9yEk/s=)
2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c6:18:b0:2b:75:ac:c7:62:bd:cf:a4:8b:a2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Oct 19 06:01:13 2025 GMT
Not After : Oct 20 06:01:13 2025 GMT
Subject: CN=187636a93581786f07dbf217d8c5a162b341b98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:c8:69:af:ee:b1:a9:63:34:80:95:f0:51:
70:6f:82:2e:96:5a:a3:04:1b:70:47:d9:ce:7d:3b:
48:3c:c6:2f:02:65:bf:a6:f1:93:2f:a0:aa:c6:04:
81:a0:e3:21:7c:b5:8d:58:b4:98:7c:c9:89:4c:61:
9f:29:48:9f:61:9c:83:b8:43:af:c9:de:31:6d:4b:
b2:7d:ab:8e:d1:38:d4:64:ac:c6:f7:d5:8f:cc:b2:
6c:98:98:7a:99:1c:9e:99:6e:58:dd:36:a6:af:2f:
54:3e:73:aa:a1:e2:4f:6a:7a:99:43:53:e6:ba:b2:
40:8a:cc:b3:1c:c8:52:6a:42:08:9d:fd:d6:3a:66:
df:de:29:14:16:b7:34:bb:d7:34:25:8b:e3:07:92:
a5:b7:1a:66:f7:4b:f5:c8:15:32:71:b6:66:34:9c:
7c:f6:79:82:68:91:19:00:43:44:0d:be:84:e8:5f:
3a:d1:ad:c4:a8:00:ef:5d:b7:d5:a6:5d:eb:a9:2f:
ff:2f:00:dd:fd:dc:d5:78:34:42:be:12:95:33:db:
18:7f:26:a5:79:7d:6f:fa:4b:72:98:28:b5:8d:b4:
f0:ab:84:71:fa:01:1c:ed:65:5f:3c:5b:32:4c:11:
63:f7:d3:8d:e3:c4:91:a2:6e:25:a0:d1:07:34:f5:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:76:36:A9:35:81:78:6F:07:DB:F2:17:D8:C5:A1:62:B3:41:B9:8C
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:df:4b:0e:6c:c5:be:74:5a:6c:2b:8a:c8:87:da:df:8b:76:
96:15:39:05:a4:97:44:0e:4d:e2:ad:90:90:fd:95:24:04:e0:
15:a2:39:46:5c:a7:44:e2:31:0f:aa:39:10:35:fb:7d:8c:74:
d9:90:2f:e0:51:6b:16:f8:5a:dc:d7:ac:5e:0c:92:2b:3f:09:
44:cb:a0:ef:e4:9e:a5:e3:29:0f:ae:e3:fc:f2:44:2b:d7:ef:
83:22:f5:07:07:85:25:ec:fb:d3:80:5a:4e:7c:62:64:a6:d6:
4a:7c:ae:ab:0d:7c:81:5a:30:8c:ee:47:4a:9e:0f:e9:b1:6c:
3a:b2:c7:03:28:de:8a:56:b2:d0:31:1a:81:fa:99:1e:7c:27:
64:96:ed:a5:02:36:98:73:4e:4b:ac:46:96:fe:49:99:90:bc:
2b:b9:9d:80:38:d9:e0:30:90:23:60:04:ab:c0:30:c2:f5:e7:
40:7b:20:27:0a:06:02:5c:1e:9d:e8:44:e4:fa:49:63:ad:00:
d0:e5:43:89:67:9c:26:9f:53:48:66:55:9a:c9:33:b8:d7:99:
b7:2e:18:38:d7:7b:e9:13:40:b2:c0:23:3a:7b:1a:dd:dd:fc:
e7:16:80:64:3b:10:3a:9d:01:e5:d7:4c:fb:d4:b7:d3:7c:a5:
15:0b:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:40 2025 by rpki-client