Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: pGX1RGLHnmquPQZOqXjBB/GjPevkB0KUYCCSle4c/vE=
Subject key identifier: D9:DE:C5:17:1B:D2:4B:CD:15:0E:08:86:73:DF:45:DD:57:76:96:51
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 0199FC1CA328702B8B6A8B164B0DE44BA50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:55:59 +0000
Manifest this update: Sun 19 Oct 2025 10:55:59 +0000
Manifest next update: Mon 20 Oct 2025 10:55:59 +0000
Files and hashes: 1: S3zKLAZ2RH7Onn-AGRqNJbz-Mhs.roa (hash: UWhZiGN/j0Syco5ANxdhovDZsYbQdT5AfcQpaMqND1I=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: 5zsJaz+0LYH+DSFDiXQl59shHcjw5+7Y8nucWC7/BI4=)
3: usTpPKxMaPGTVn2Gt9Z2vrsVmEw.roa (hash: OfwIWI2WJ2SLaRPrteA7Z6qydg3S7lkuEkpjvfuke28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:1c:a3:28:70:2b:8b:6a:8b:16:4b:0d:e4:4b:a5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Oct 19 10:55:59 2025 GMT
Not After : Oct 20 10:55:59 2025 GMT
Subject: CN=d9dec5171bd24bcd150e088673df45dd57769651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:ee:0c:71:32:70:0b:7c:4e:33:c5:d3:ea:
11:eb:8f:1e:01:4b:b7:2e:3c:23:c2:f0:6b:73:c3:
95:29:36:19:88:b8:02:00:ca:83:62:38:5a:dc:b4:
4c:ca:2d:85:73:c9:ae:9d:11:13:56:dd:5c:bf:86:
c8:05:f6:d4:bb:fa:0b:ea:82:ec:f0:c0:91:7e:3a:
7b:f8:d8:e5:7a:10:bb:2a:66:04:28:11:a3:bf:5b:
5f:8c:a9:27:ac:72:79:15:5c:1e:50:1f:92:de:0e:
23:6b:ab:9f:b2:5f:99:b4:c3:46:62:6a:58:f0:4b:
27:b2:9e:ce:6b:43:ba:b4:7c:a9:35:4a:32:cc:61:
15:f5:53:e9:84:27:55:07:84:42:02:2e:90:b4:4f:
60:af:dc:6a:59:28:d0:65:e1:20:7e:10:fc:4a:a4:
ad:5c:16:9a:1c:13:c5:91:c9:ba:6f:fa:01:71:2d:
5d:b2:64:d1:8e:8f:4c:64:82:36:62:a3:99:b4:42:
8a:b6:c3:66:63:8b:f7:f7:dc:0c:f5:a6:34:91:f6:
6a:e7:ca:7d:85:24:ad:86:90:a9:10:f4:d9:74:ad:
c6:7f:63:24:ee:5f:cc:0e:7f:29:e1:be:97:5d:04:
a4:96:7e:2e:ab:c6:05:7a:15:4a:b0:5c:cc:7d:bf:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:C5:17:1B:D2:4B:CD:15:0E:08:86:73:DF:45:DD:57:76:96:51
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:22:5b:9b:6c:cd:66:bb:f5:8c:c8:c8:db:c5:48:7b:c2:d3:
1d:4f:bd:34:3e:0c:44:f6:3f:86:57:dd:c4:4a:4f:b3:e4:c8:
f7:e1:27:bb:5f:9b:48:67:0b:16:88:0a:db:92:83:b4:36:03:
c6:af:8c:ed:c4:16:ef:a7:45:2e:ca:ac:8f:0d:fd:2c:a8:56:
bb:df:d3:52:07:94:05:5b:e1:51:4f:d1:cf:0b:fa:67:b2:e0:
18:c0:99:22:3e:6a:70:33:cb:d2:3f:54:21:05:66:f7:3f:1c:
06:be:c5:23:68:0e:81:69:04:b3:2c:2e:fe:4c:66:f9:b2:9a:
91:0a:c1:bb:f5:67:b0:bf:01:26:1a:80:e1:66:33:b1:6d:44:
0f:67:6c:9a:82:40:10:69:d7:68:62:35:b4:32:4b:58:be:71:
5a:2f:8f:73:86:41:63:e7:98:80:45:9d:3f:9f:05:82:8e:7a:
2e:10:5a:89:52:3d:84:ea:89:5d:a0:9e:f2:23:28:3b:77:b9:
1e:11:14:0b:0e:93:94:ec:74:39:22:77:b3:33:36:30:7e:6d:
a8:8c:7c:68:ab:5c:9b:12:b6:b0:4b:dc:42:4d:f6:66:c9:43:
59:87:5c:8a:30:b2:9d:fa:83:0c:b1:0a:66:f0:8c:26:f5:cc:
a4:51:0b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:07 2025 by rpki-client