Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier: ho03VXkpLto0jR4x+YspZn0wgKNirgRbo6eeX+Nw/TE=
Subject key identifier: DA:1A:CA:AE:EE:35:35:34:61:20:9C:9A:29:AB:1D:C2:2E:95:C2:78
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 0199FB4625E26A12A0D7A4689CD0065BD42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa (hash: rqwF60FwzB+zZQwtQI8AX0k6qPeHy+PObyrOxNB5ovY=)
2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: FSDKf4Y7J3S60AYF0hq7forInf28c73MJOWm+oaED4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:25:e2:6a:12:a0:d7:a4:68:9c:d0:06:5b:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=da1acaaeee35353461209c9a29ab1dc22e95c278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:84:ae:0e:78:d2:dd:d6:60:79:3f:26:9d:
3b:d3:42:32:88:9b:bb:ec:36:8e:47:f6:47:91:b2:
50:e4:bd:a0:6e:92:d0:db:0f:69:32:61:f0:fe:85:
25:88:77:6a:27:80:c6:f0:a8:7b:0d:df:73:25:dd:
2f:f3:13:f5:45:77:67:26:d1:13:62:87:fc:f5:da:
10:94:46:91:a4:6e:4e:90:e0:30:d4:c5:0a:17:0b:
b8:8c:0a:7a:9d:90:56:b9:e3:95:6b:78:9a:f7:f4:
c1:b8:6e:73:ba:cc:24:7a:21:ab:36:c5:e9:43:b3:
97:29:a9:16:c0:47:0f:ba:dc:5c:39:a6:c7:18:05:
04:c5:e2:d8:18:98:ce:4c:c4:c9:55:6a:a7:9f:35:
aa:02:c2:62:ba:3f:48:91:88:2e:0c:b9:48:33:9b:
b2:5c:03:0a:14:3e:f6:d6:f3:90:12:39:aa:dd:98:
74:74:32:6b:02:94:45:0e:c4:43:b4:bc:44:f0:88:
d1:6c:93:77:3e:47:ed:54:34:ef:f2:0d:28:9a:63:
79:65:50:4a:9d:78:ad:61:e2:f1:2f:30:5f:ac:b8:
50:76:c7:9b:d7:58:e2:92:4d:7b:56:09:dd:af:4d:
b9:a9:7b:6b:32:95:fb:e7:2c:ff:6a:35:47:bc:22:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1A:CA:AE:EE:35:35:34:61:20:9C:9A:29:AB:1D:C2:2E:95:C2:78
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:46:14:7e:19:76:13:77:b1:62:97:33:54:a6:e1:f4:ff:0d:
75:62:6a:9c:77:2d:c6:bb:e8:8c:ae:d2:c0:86:b5:6a:a9:33:
16:79:f6:37:af:1f:69:8a:aa:19:96:30:bc:2a:65:9c:2a:29:
aa:7c:3b:80:c7:ea:58:7b:0e:ac:6f:e2:f2:76:df:54:e2:6a:
84:c9:ac:19:2c:82:69:b1:11:90:a4:17:48:79:5b:e4:8b:ff:
9b:31:27:b4:42:03:59:67:64:c9:12:65:75:ec:09:1e:58:c2:
1f:32:c9:3f:cf:ea:ac:38:6d:78:57:ce:64:3d:ba:5f:7d:24:
00:9f:c1:7f:a5:ae:7e:02:44:af:bc:82:66:95:7f:b1:9d:1b:
37:fb:2d:79:c3:a3:51:43:49:3d:16:cf:3b:56:51:96:29:e2:
3e:d1:1a:c2:bf:53:d3:c6:cb:49:2d:6a:24:42:d7:fb:dc:6e:
7c:84:bf:04:1f:c2:cf:81:65:14:92:5d:71:2d:75:23:e0:85:
fc:ed:dd:a5:37:c1:98:4e:35:9e:7d:63:7c:50:c0:50:f3:d3:
9e:53:e2:30:1c:c4:6c:bd:6f:73:ea:6c:3d:f3:b9:96:c8:b3:
03:a6:91:20:f8:11:1c:8c:b4:67:08:3b:8a:b2:2b:cd:42:9b:
a0:40:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:50 2025 by rpki-client