Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: y1Gy1e1kYR7Y62j3jH24qOYvuFEm04EXsR+rAkyCdJQ=
Subject key identifier: A4:88:0C:98:79:D4:A0:37:82:FE:B3:4F:C5:0B:F3:28:DE:96:C7:07
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 0199FDD9DB4C266FA1ED2C3BAA9CA000FD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:17 +0000
Manifest this update: Sun 19 Oct 2025 19:02:17 +0000
Manifest next update: Mon 20 Oct 2025 19:02:17 +0000
Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=)
2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: QPMRyYkACZFghcv6t27ox2ReTiHOd2S3O36xFD70fIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:db:4c:26:6f:a1:ed:2c:3b:aa:9c:a0:00:fd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Oct 19 19:02:17 2025 GMT
Not After : Oct 20 19:02:17 2025 GMT
Subject: CN=a4880c9879d4a03782feb34fc50bf328de96c707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:92:0a:f9:d2:91:0d:70:9b:b2:ea:f9:e3:
95:20:3d:89:bf:7c:66:a7:64:10:67:e2:3c:c1:2c:
22:76:20:34:b3:52:ca:85:97:11:c4:08:94:f0:cc:
fc:35:8e:11:b0:b0:4e:b4:d2:3d:9f:a3:59:33:fc:
65:02:4f:81:37:49:a5:a8:ab:86:47:8e:4a:bc:37:
3f:25:92:dd:1e:2e:1d:d1:b9:32:d6:66:2e:24:cf:
b0:d9:bb:a5:10:da:88:5e:7e:44:33:fd:c3:66:2f:
97:15:1c:22:99:c7:4f:05:cc:62:89:4a:24:47:6d:
31:56:9d:72:51:ed:c1:df:b7:f5:a5:50:36:f9:20:
cf:fc:1e:50:d9:cf:ad:30:68:1f:33:55:69:f1:68:
ce:fa:8a:7c:30:4a:9b:78:33:70:72:22:0d:07:7e:
25:3d:10:ce:4b:81:a3:7f:55:4c:9e:bb:04:85:f3:
10:00:87:35:d3:1c:65:01:a9:8b:5a:2f:33:3f:d3:
27:70:42:98:33:00:2a:59:f2:b2:cd:25:93:10:a4:
93:e8:ed:5c:86:92:88:68:dd:fa:f2:0e:2a:91:d1:
74:77:eb:21:85:fc:d6:c3:b4:83:ac:c3:5b:fb:cc:
dc:7f:d2:ce:df:0d:c2:ad:2d:52:0e:5b:6a:f7:6d:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:0C:98:79:D4:A0:37:82:FE:B3:4F:C5:0B:F3:28:DE:96:C7:07
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:69:28:52:4d:f4:70:3d:bb:e6:d9:0f:60:ce:ab:1d:32:40:
a1:51:b3:47:14:3a:22:7d:6e:0f:c3:af:7b:1c:84:05:4b:bf:
1c:d7:60:63:62:40:1e:f1:f3:33:1b:0c:24:40:0d:ec:09:62:
47:be:c6:9d:9f:27:98:e9:e2:d5:51:27:ef:b9:e8:a5:15:2d:
fb:32:34:e1:29:53:0e:ac:0c:ad:4e:91:aa:ef:07:2e:eb:ec:
8b:4d:64:bd:6f:dd:65:3f:70:b7:c2:78:26:fb:84:bb:31:67:
32:95:84:59:27:1c:f1:27:05:27:56:ab:02:da:ad:43:a4:8e:
60:c0:82:d3:37:6c:e5:73:6f:11:2a:92:81:c3:d5:c3:1e:ed:
ea:a9:92:be:2a:50:d6:1d:d3:28:06:66:ef:e7:73:64:f2:73:
a3:cb:e0:81:1a:02:cd:fe:89:3d:f2:ff:da:3e:5b:61:27:54:
ef:b3:15:6d:c7:87:7b:c3:21:39:f5:9b:5a:3f:bf:94:9a:54:
d0:1e:d0:92:4c:bb:ab:76:90:26:99:10:95:ef:45:72:ee:5a:
d8:aa:2e:6a:8c:f3:7c:31:96:67:aa:d0:98:ca:cf:b5:82:8f:
d7:be:c5:d6:fe:43:45:09:41:dd:e1:af:bd:15:2c:3f:fb:13:
0f:63:dc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:14 2025 by rpki-client