Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
File: YXe1tkvknoGZlf7n8-NiG9ymrow.mft (raw, json)
Hash identifier: 91S4mwzjQEkYJ3EWTmJVSBbyGgssq2A5rViHrmikzoQ=
Subject key identifier: CE:AE:8A:1E:14:D2:39:51:8C:03:70:EB:80:09:80:45:2C:D9:6F:92
Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
Certificate issuer: /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Certificate serial: 0199FB7CBE3AA7ECA73EA0F2087D3E0B248F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: YXe1tkvknoGZlf7n8-NiG9ymrow.crl (hash: K4mXWjBTjha5epah49tYcriEYzkQRkXbSpAXJidaONo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:be:3a:a7:ec:a7:3e:a0:f2:08:7d:3e:0b:24:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=ceae8a1e14d239518c0370eb800980452cd96f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:7f:32:59:70:c2:92:24:82:e1:46:36:82:
2e:41:ff:3d:17:ce:e8:87:eb:56:00:c6:1e:ad:24:
77:88:01:df:5a:c3:05:62:ce:5f:09:d5:dd:06:5e:
79:0b:49:b0:85:29:7b:1a:59:12:8c:6e:2f:c1:1a:
6c:f6:98:d7:e4:bd:42:aa:3a:c9:d5:7b:af:c6:a4:
04:6d:a4:9d:cf:3b:6e:fe:91:07:0e:fa:42:b0:83:
43:d6:bc:ac:21:d7:ca:05:4f:16:c9:54:f3:d6:28:
e7:83:18:60:8a:cb:21:1a:cf:14:53:fc:da:69:2f:
fe:78:d1:3a:0f:6f:d8:51:43:1f:cd:fe:e3:4b:b7:
bb:e3:6d:3d:fa:df:d5:21:90:2c:10:14:5d:64:8c:
64:8f:1e:16:ca:da:93:5c:25:03:41:f1:8e:18:e8:
f4:ed:02:9a:7b:59:f8:94:15:ab:f2:9e:45:d4:50:
32:f8:9f:ae:26:0e:cf:c0:a8:f2:3b:e7:06:30:cc:
88:50:82:92:b7:bc:68:0e:69:8e:ca:38:88:fd:1b:
eb:79:72:77:41:9b:c9:1c:67:e6:68:e8:f1:6d:5a:
58:63:ac:2b:fb:8b:a2:59:83:b7:9a:ae:06:be:19:
4f:23:18:97:a1:2c:71:0c:d2:cf:cf:20:9e:e7:18:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:8A:1E:14:D2:39:51:8C:03:70:EB:80:09:80:45:2C:D9:6F:92
X509v3 Authority Key Identifier:
keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0d:d6:6a:66:d6:fa:5c:1a:9d:ae:53:d9:2f:52:65:26:35:
40:e9:55:95:22:82:7d:a9:43:a9:be:f2:13:6a:d1:0b:c6:54:
74:f1:ad:47:3a:56:25:7a:d3:8b:07:71:b9:43:e2:e3:ca:7a:
fc:69:8c:f1:49:cf:5f:13:a0:22:66:29:7c:97:fb:55:5a:85:
0e:23:94:0f:fb:b6:1d:5d:fa:4d:d0:62:af:a4:0f:a6:5c:c3:
35:40:52:6d:b1:c6:86:d6:2e:a2:ea:4d:85:78:a7:6f:a7:01:
50:4d:15:21:40:45:0a:ff:b4:4c:16:cf:b1:60:9b:7e:f0:34:
5d:4b:b3:28:f4:31:95:0f:8c:bf:0c:f9:05:8b:e7:74:c8:bd:
5d:0c:8e:24:7e:5e:c9:60:41:e0:1f:d6:f3:e7:6e:e8:f5:07:
11:be:c7:30:71:90:f7:c0:24:93:a3:b8:22:c4:0c:59:5a:82:
c7:d1:07:23:f4:54:28:02:a2:3b:c7:ab:25:3e:80:eb:38:86:
7a:9e:a1:e1:ab:8d:20:ed:84:9e:09:51:96:29:f2:bf:83:e1:
e7:dc:b9:2e:4c:2a:5c:08:6b:fd:c6:3c:7c:b9:9a:e9:13:98:
03:6d:b6:cb:a0:66:3c:d9:68:dd:6e:42:54:80:b8:1d:4f:8a:
48:35:bd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:13 2025 by rpki-client