Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: LsNEO1S1IAlh4A7gN/Vqbg9IpSGP+65vSlPefxnWbEY=
Subject key identifier: 4C:16:B2:05:54:5B:14:93:BD:C2:57:3D:4C:36:C0:60:22:8B:E6:C0
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 0199FB7C710A1CCE49BEE28777B72E9989BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:00 +0000
Manifest this update: Sun 19 Oct 2025 08:01:00 +0000
Manifest next update: Mon 20 Oct 2025 08:01:00 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: 0TnZ+z3SsgYFtZ/C/dw2PlvUbj/o9k9070ldmkKS488=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:71:0a:1c:ce:49:be:e2:87:77:b7:2e:99:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Oct 19 08:01:00 2025 GMT
Not After : Oct 20 08:01:00 2025 GMT
Subject: CN=4c16b205545b1493bdc2573d4c36c060228be6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:2e:2c:7e:3f:ca:9c:21:5e:e9:62:50:08:
a9:93:3c:79:3e:5e:a3:d2:84:e1:60:68:a4:73:b7:
0d:86:40:ec:83:4a:57:5e:82:fc:a7:29:15:38:2a:
dc:01:8d:65:55:ee:2b:4c:8d:d5:0e:79:bc:05:2d:
4c:ea:43:a1:fb:93:09:c0:d8:c4:77:ec:71:8a:b9:
54:84:67:7b:53:39:f8:b6:84:82:23:bc:f3:ca:66:
14:76:b5:38:54:c1:6d:4a:e5:cc:e3:b5:33:08:e9:
8b:af:cf:7e:cf:ae:56:cf:fa:cd:7b:3f:1e:0e:ac:
d3:dd:f1:bd:10:cc:ec:5e:14:c8:4c:27:7b:5a:82:
db:a8:bf:a4:ea:70:5d:41:9c:c2:cf:88:47:cf:34:
ca:96:aa:57:fe:21:92:a1:3d:b0:ca:a8:01:ba:2e:
c1:34:57:0d:6a:c0:b1:0c:03:11:36:1f:e7:0f:00:
f0:0a:8f:92:8d:87:49:af:6a:c8:17:b4:92:52:14:
84:62:fb:92:3b:77:c5:0e:8c:09:f0:65:e8:c2:94:
51:89:79:fe:fb:bd:77:6a:7e:c3:58:14:0c:7e:d5:
c1:93:8c:43:62:6e:3c:55:da:79:ae:6c:4d:67:0f:
3c:9a:93:4d:ca:b6:a0:f7:df:91:cb:3e:ef:32:50:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:16:B2:05:54:5B:14:93:BD:C2:57:3D:4C:36:C0:60:22:8B:E6:C0
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:04:63:43:72:8d:e7:86:96:16:6b:59:01:b7:10:83:2c:28:
5a:02:36:6d:47:80:45:e6:d1:d7:04:fb:91:27:b4:97:42:cd:
e2:f7:0b:62:22:14:87:9a:76:ca:fe:d3:6b:e9:38:a2:a5:c8:
30:2a:6f:df:3f:46:fb:05:95:e1:3f:1f:27:a1:e6:90:8f:74:
cb:f0:a8:fd:10:34:f4:83:ae:81:84:b6:28:dc:83:a7:c1:3e:
7e:07:90:54:9d:9b:dd:1e:ed:88:61:9c:42:fd:ee:9c:f4:c6:
92:58:65:b1:43:4a:4e:b1:54:a1:d0:26:60:56:ea:70:4c:b2:
5d:a8:39:e8:2e:13:41:96:89:ca:56:9f:b4:a3:99:a4:b9:ef:
fb:ea:1b:39:60:06:05:a3:c8:d3:6c:6e:3b:b4:db:dd:de:8b:
3f:02:27:bf:43:92:85:e1:47:57:1c:92:94:04:d4:98:49:0b:
45:fe:d8:90:fe:33:76:fc:ce:54:b6:a5:db:56:8f:ec:d9:a0:
3a:4e:ab:5d:a8:a4:33:bd:ee:ec:c4:e2:ab:9c:7a:c2:66:81:
01:ff:2c:1d:5d:20:cc:13:ce:b5:76:7e:ed:72:44:9f:0b:f8:
57:a7:35:c7:bf:d2:b0:95:1e:3f:c6:f5:14:58:af:99:77:8a:
27:1e:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:31 2025 by rpki-client