Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: o5AfJV6v7aoUYXh0k6zdOLyxSg7vvAIwLFru4VqjI00=
Subject key identifier: 14:8E:5D:E3:9D:49:8C:57:85:BA:17:7D:71:43:17:95:C6:B7:96:F2
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 0199FA69DACD0086CD7105710479B18FA251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 03:01:05 +0000
Manifest this update: Sun 19 Oct 2025 03:01:05 +0000
Manifest next update: Mon 20 Oct 2025 03:01:05 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: Lzc5MV2U+1q816bh/vDD4b0LwTIe4SM0uzSYwdiazhc=)
2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:da:cd:00:86:cd:71:05:71:04:79:b1:8f:a2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Oct 19 03:01:05 2025 GMT
Not After : Oct 20 03:01:05 2025 GMT
Subject: CN=148e5de39d498c5785ba177d71431795c6b796f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:d2:b5:56:47:bc:9d:80:5b:fb:52:e6:9b:
d4:c7:6e:49:b4:c0:cf:55:8d:8f:b2:d3:6c:ae:f7:
c0:b2:be:84:34:b4:a2:92:b7:db:79:29:3e:85:73:
65:ed:76:25:51:d0:09:86:9f:0e:8d:74:d9:16:01:
7c:dc:96:1f:cd:5d:fc:86:bc:3f:33:4a:11:56:c9:
f1:ff:e4:49:12:15:a0:ed:02:6d:62:79:8c:5f:2d:
35:ee:e6:20:d1:42:6b:cb:9c:f5:eb:51:24:48:50:
25:b0:4b:e2:e5:32:43:99:b7:d1:cd:81:e3:86:1d:
10:c6:ae:5d:4e:bb:e4:a0:ae:b3:32:9b:48:a9:3a:
3f:87:3c:93:1b:47:13:ee:e1:c5:b6:50:77:7e:99:
c6:7e:91:04:65:8a:2e:e7:f6:66:ae:95:40:43:56:
4c:90:21:d2:aa:16:d1:35:3b:e4:3f:59:b3:cd:70:
4c:b0:f3:9b:a1:fe:bd:b9:78:70:a5:62:f6:6b:1c:
0a:45:7f:b0:9b:ee:77:6b:a8:e5:3a:4e:e9:51:e5:
56:81:b7:da:14:02:69:a6:62:3f:6d:01:70:ce:43:
cc:b8:1a:7a:0b:58:43:96:c6:d0:c7:17:19:fe:7d:
03:80:1d:74:07:96:07:66:24:e9:ba:90:e5:5b:b6:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:5D:E3:9D:49:8C:57:85:BA:17:7D:71:43:17:95:C6:B7:96:F2
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dd:14:bf:bd:1f:d3:da:5f:59:9f:c7:52:d3:7c:32:2b:a0:
6c:83:b1:fd:3c:fe:6e:6d:11:b2:b0:86:0f:9c:eb:06:2e:c7:
ef:cc:af:16:21:21:69:cd:94:cd:cc:ec:13:d3:df:e1:7c:98:
a6:17:16:94:02:d0:54:17:64:95:60:ef:88:44:38:8d:06:4f:
f3:32:c4:1c:59:07:e8:4d:a7:56:c1:91:75:86:c5:59:0e:8c:
de:7c:0b:00:9c:cd:4e:a3:28:3e:55:5f:8b:de:35:8d:59:06:
89:7d:62:8f:9a:89:58:0c:f8:14:15:00:75:72:44:a0:14:47:
f6:6a:e3:ef:70:f1:7f:2e:85:73:ef:c1:13:cb:93:9a:93:ba:
c1:0d:59:bd:fe:f1:27:51:bc:17:b2:3f:67:fa:26:60:9a:90:
5d:8e:32:bc:d7:e5:8b:d2:b8:88:e1:f1:e7:ae:86:d4:43:01:
d8:18:ce:78:b6:45:b3:81:54:d8:9b:17:3b:43:9d:ef:0f:36:
7b:f2:63:7e:23:b6:e1:ae:c1:c9:6f:2f:cb:5d:1c:2f:a1:41:
2d:47:c3:21:e8:58:60:16:67:1f:5a:1d:56:be:9a:3b:87:d2:
99:c3:3a:bc:62:4b:c1:80:5e:83:72:bb:7a:33:b1:48:01:16:
20:54:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:59 2025 by rpki-client