Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: F7mLdIdL/QqAGCPcQ4bPAHfqug50gD9tWl8Eg17w008=
Subject key identifier: 18:C8:22:D8:DC:DA:3B:07:C1:5B:2E:AB:88:E5:DA:D3:2D:04:CE:10
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 0199FE46BFA2FEF88D39E24FC5F6C43B2395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 15AC
Signing time: Sun 19 Oct 2025 21:01:13 +0000
Manifest this update: Sun 19 Oct 2025 21:01:13 +0000
Manifest next update: Mon 20 Oct 2025 21:01:13 +0000
Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: JYYG9YKomm3l2iFeo+COJiQlToLAxqJSwZI7HEJieHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:bf:a2:fe:f8:8d:39:e2:4f:c5:f6:c4:3b:23:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Oct 19 21:01:13 2025 GMT
Not After : Oct 20 21:01:13 2025 GMT
Subject: CN=18c822d8dcda3b07c15b2eab88e5dad32d04ce10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:dd:af:e3:41:da:32:84:0b:59:c4:af:5d:
37:8f:01:67:b7:a5:08:26:83:c5:9e:8d:41:9f:d1:
63:38:a2:b6:5c:45:3d:56:1c:90:35:f3:b3:d4:0d:
f7:ae:9c:45:f7:7b:a4:62:6f:b0:ff:50:60:c7:49:
59:4e:9c:49:f4:cb:41:29:28:3e:f9:00:97:e5:51:
7d:00:d8:ec:2e:67:df:ad:3e:35:4b:e5:fe:05:90:
20:82:a8:00:1a:ab:05:6f:fd:94:a8:a6:8b:a6:08:
a0:da:21:13:a8:d3:12:50:04:48:7b:dd:81:35:41:
c5:88:49:e7:d0:4c:10:b7:6b:4b:f0:ee:3f:52:54:
59:cd:e1:a8:e0:e1:99:2e:1f:4a:f0:13:e8:f6:3f:
33:11:25:0b:e2:41:d2:fa:a1:61:c3:be:0f:11:b3:
bd:e7:d6:b2:4f:4c:5d:26:e3:7a:62:44:17:44:45:
5f:fe:88:91:8d:f7:4a:08:4e:f4:f5:d1:8d:1c:86:
f1:98:c2:0b:e3:32:59:a7:b0:1a:ca:51:8c:92:72:
cd:e7:4e:a4:16:cf:b3:df:50:08:3d:8e:2e:27:fb:
af:3f:c9:3b:fe:56:e1:5a:ba:af:a6:8d:0c:1e:05:
c8:59:95:fb:77:26:15:ac:40:55:0c:19:18:62:72:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:22:D8:DC:DA:3B:07:C1:5B:2E:AB:88:E5:DA:D3:2D:04:CE:10
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a9:6a:7a:98:32:5c:f1:34:c6:fa:7d:cd:4b:44:54:89:02:
7a:82:65:b5:e6:d2:3f:8e:b7:fa:cb:37:96:16:c2:d7:f4:e0:
88:ad:ce:a9:4c:90:8d:a8:99:aa:e2:0b:7e:30:8a:bd:c5:d9:
f6:67:81:99:9c:9d:68:d8:fe:c2:41:90:50:45:5e:da:8f:92:
63:e3:b2:d9:ee:6e:fd:81:33:03:4b:2e:19:e8:e1:41:ee:41:
58:5c:66:22:fe:10:02:4f:eb:53:b6:be:02:f8:fe:06:5e:da:
61:28:f1:64:3b:d7:01:4d:5e:42:2b:99:10:f5:1c:a1:09:f2:
f9:90:1d:17:fc:2b:0b:e0:ab:3d:c1:01:1a:b2:c8:a2:ba:9f:
c2:22:53:53:be:aa:84:88:fd:98:0d:08:2f:55:41:fe:bd:39:
64:ac:9a:4f:a4:ee:02:58:26:81:9c:5e:16:c8:55:c8:8a:cc:
35:7d:40:cb:89:a0:10:4d:67:78:f2:33:c7:ba:41:49:cf:bb:
ad:66:c0:ff:ad:27:75:db:72:2f:5d:28:cb:86:b8:36:d3:1f:
96:b0:74:80:78:b5:1b:7d:96:df:c5:8f:62:1b:a7:63:06:97:
2a:26:cc:d5:e7:df:18:6a:73:dd:01:72:7b:d9:c1:e2:18:31:
d4:86:5c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:21 2025 by rpki-client