Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier: dMSRClcq+J2DQpi1F2tNvOkY3qqKNT3K4Gm/mltC7j8=
Subject key identifier: E4:9B:02:4C:0A:B8:02:78:3C:B4:1B:12:39:61:58:1D:1E:DE:95:4C
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 0199FC8F397AF1897B77B937449A8EC90C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: 1hMpXEk-3MWaN_1A5D8V9EPMUFk.roa (hash: CWNT05GFaywUZSs5xqqgNA+kl89pNKE3DHnIiDI2iJE=)
2: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: jLkm3ysoNrtNv96T2h/4qqRPgUtJ2IH+tcUvBte15pE=)
3: rWHh4mQ0uaKggoKTpG34xhoULNA.roa (hash: E9+8lA/ClMI1O0rcr+QMuqVLJyMAlgl6OS/N6XXdTOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:39:7a:f1:89:7b:77:b9:37:44:9a:8e:c9:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=e49b024c0ab802783cb41b123961581d1ede954c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:db:27:69:14:d1:b7:aa:4b:de:0f:39:d1:a6:
4c:90:60:78:e1:a3:cd:d8:b9:77:ac:1c:bb:3a:b0:
66:8e:6c:84:a5:84:50:11:a0:cb:85:24:1f:31:52:
12:3d:c7:95:13:f4:0a:1d:34:ad:6c:03:a1:2b:71:
a7:80:55:67:bc:dd:af:5f:11:0c:a7:e3:9e:3b:bc:
36:64:b5:60:7c:24:a4:39:22:e0:e3:78:19:25:28:
ee:d1:67:2a:c1:13:ce:18:4c:81:6e:67:f0:e3:79:
59:c1:7a:f7:f0:c0:a3:0f:d3:6e:55:10:32:0f:4d:
5f:7f:ba:36:4c:ad:b5:7b:13:24:bd:28:47:e3:25:
fa:80:ab:14:19:52:79:7b:2f:e4:31:db:6b:87:f2:
83:60:a5:aa:95:80:f1:7e:b8:9c:11:5a:c3:c3:b5:
78:a8:2f:8d:2e:75:cb:70:c8:df:d5:e0:04:5b:56:
a4:e2:3d:12:eb:3b:89:fb:7e:6d:67:8d:cd:66:f2:
b3:a5:44:10:d9:dd:7a:31:55:64:28:2b:fe:a1:b0:
bb:87:5a:a5:3b:fd:52:02:28:7a:ce:da:72:d2:2b:
3d:d1:43:d8:08:1b:d3:9a:69:12:f9:69:e1:de:18:
4e:34:40:fd:f7:1c:ac:99:20:25:27:42:58:f8:9b:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:02:4C:0A:B8:02:78:3C:B4:1B:12:39:61:58:1D:1E:DE:95:4C
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c2:2b:86:47:04:ec:a3:08:9b:b1:01:08:07:39:ab:82:7e:
53:99:c2:69:4d:e9:10:7b:5d:ef:05:d4:b8:64:c0:1e:17:5f:
cd:2c:4b:08:d1:8e:43:2e:04:14:d2:52:7f:12:42:5b:50:ef:
d7:0c:61:cb:b2:0d:46:5d:a7:d1:b6:25:4c:90:e9:e6:4b:d2:
fa:ac:af:96:ff:50:e2:db:d0:b4:01:5b:bf:c2:6f:41:f8:b6:
96:f0:a4:75:14:eb:d6:d5:f6:99:cf:c6:37:4d:de:13:82:41:
2c:c4:16:cc:ec:4e:20:d7:51:91:65:81:c1:a8:d2:92:92:09:
a9:dc:da:48:ae:be:26:89:d5:67:9e:ea:0f:86:23:5d:43:01:
ee:51:4c:03:91:5f:ca:f7:c7:a5:84:df:21:6c:41:0f:91:98:
a7:5f:f8:8b:2e:dc:06:a1:da:c6:49:73:f4:aa:05:a3:a3:55:
11:04:45:6e:69:8c:c7:e9:78:f7:58:2a:89:30:bd:54:08:c2:
b5:ff:d8:88:96:06:28:a2:d5:5b:fa:27:68:f2:22:61:55:9e:
6e:1c:d1:54:78:66:ea:d7:70:a5:b8:e4:e4:f2:65:2d:48:db:
6d:ab:06:05:dd:71:99:ad:30:51:ae:23:51:d4:47:31:62:ee:
0a:6c:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:58 2025 by rpki-client