Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: Op/4s5iaGdFmCuoa/7IHuy7SwL3sjbCVuP60g69TqhI=
Subject key identifier: 97:E9:4C:95:26:6C:3D:77:1B:E0:4F:E1:24:8A:C9:C7:1A:A7:AB:11
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 0199FBEB4C035085CB631B175027262FA013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0F69
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: rGHuQBrE7PR3FH2H8sOiYpboB0NZD7sn0Bzb24Jeydg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4c:03:50:85:cb:63:1b:17:50:27:26:2f:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=97e94c95266c3d771be04fe1248ac9c71aa7ab11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:a6:d2:31:f2:a3:4f:3e:78:ef:ab:b9:e1:
46:e7:d9:0f:92:3f:11:be:d6:18:b9:b0:bb:82:76:
85:ee:2b:26:10:ea:d6:db:37:13:80:f4:0a:b7:15:
ab:01:b7:e1:b9:a2:c1:34:c4:2f:25:b0:46:9f:1c:
90:a3:12:35:04:1b:15:98:47:b1:bd:7c:a8:40:62:
81:50:8b:be:0c:69:b2:07:17:ea:42:ac:4b:0f:2a:
e4:81:2f:1e:35:f0:da:50:c7:d6:68:da:e1:0f:5b:
b0:25:6b:cc:05:0c:c3:bf:51:30:24:fa:53:d6:58:
18:71:5e:57:4d:34:14:bc:20:6c:70:19:bb:1e:6c:
25:d6:17:b1:72:10:3d:05:47:ce:22:b0:c9:fc:60:
8b:5d:e9:3c:59:05:59:86:b2:d9:92:21:3c:26:da:
24:e3:54:f3:c1:62:cd:79:bc:46:4d:5a:c3:ad:f3:
39:cd:b2:c1:ad:68:81:38:16:6d:a6:f0:c0:54:5c:
09:e8:04:3d:51:fe:d9:fd:15:0c:a7:0c:4e:21:7e:
a2:fb:ee:84:82:47:b0:e6:15:e3:45:2a:a0:d5:fb:
2d:41:4e:b7:b6:f1:60:f6:38:b1:0c:fd:33:62:3c:
46:c0:84:ec:f4:d6:73:9d:49:d7:02:94:f2:92:8c:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E9:4C:95:26:6C:3D:77:1B:E0:4F:E1:24:8A:C9:C7:1A:A7:AB:11
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:94:fe:7b:b2:2c:ab:99:fc:39:c8:0b:e7:cc:2e:32:72:e4:
57:d2:ae:5f:6f:a2:72:4a:87:33:1f:b3:88:85:ef:74:95:17:
85:4b:0a:82:ac:82:79:0d:1c:ba:b4:75:1b:6e:9b:94:12:45:
eb:86:66:51:88:96:99:52:ce:6d:86:1b:b3:7b:fa:86:64:88:
27:e0:01:64:63:11:a8:10:b0:1d:46:f1:41:cd:52:bb:a8:74:
ae:6b:a2:5e:59:4d:01:c4:9a:79:f8:78:86:8f:a5:c1:40:8e:
90:37:7f:b7:40:3d:cb:ec:cd:ea:09:bf:ec:da:71:5b:e4:50:
64:6b:29:9c:cc:28:37:29:d0:ea:2c:28:4c:b9:ef:48:bf:7e:
84:5d:53:4b:69:20:bc:be:7b:1e:18:c3:cf:00:f5:e1:41:bc:
2d:11:b8:c6:7a:da:e3:0c:13:cc:68:62:a4:f1:01:61:6f:7a:
06:f8:da:67:68:85:5a:ca:c6:af:56:50:bb:3a:6b:cf:72:73:
11:4f:4c:1e:8d:81:bd:b8:1b:6b:ab:f4:e7:17:cd:45:5b:65:
f0:e3:62:12:7b:09:38:c2:c7:b1:d0:3e:90:5e:e4:b5:3e:c9:
ec:a1:ed:74:2e:7d:ad:43:a5:3f:bf:19:88:35:05:e0:1e:44:
e5:d8:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:46 2025 by rpki-client