Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier: qp1YmIzSqcMB0gJOGGyhpwDLQl1XSo4LBiHJWE9qPes=
Subject key identifier: 1A:2A:9D:68:43:F2:25:ED:B2:7C:A9:05:D9:AC:AE:A0:D8:74:63:F3
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial: 0199FC2137FB529CCA47EF8B7B4ADDD26D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:00:59 +0000
Manifest this update: Sun 19 Oct 2025 11:00:59 +0000
Manifest next update: Mon 20 Oct 2025 11:00:59 +0000
Files and hashes: 1: SOjICIUf3Q5KcvZmv_NHH5baNJY.roa (hash: CIXb+faY/LyAGhWDjXy0Uzmt28hgw4zuuv1ZndxzjNQ=)
2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: C6+kTAdPvO3agmcPdvnWl5nwj25GyzRhjf2KXdoVq4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:37:fb:52:9c:ca:47:ef:8b:7b:4a:dd:d2:6d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Validity
Not Before: Oct 19 11:00:59 2025 GMT
Not After : Oct 20 11:00:59 2025 GMT
Subject: CN=1a2a9d6843f225edb27ca905d9acaea0d87463f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:80:91:dd:95:e3:03:15:56:4b:69:a0:ba:
ff:fc:75:8e:4f:83:e7:1c:71:f3:9a:90:7a:bc:e5:
0b:42:1d:43:b0:fc:74:13:d4:0a:43:f2:d7:ef:1e:
55:7f:f7:aa:8f:94:99:89:30:06:18:6f:0e:1b:87:
98:ad:5b:22:5a:29:34:3a:b8:e0:8d:1f:bb:a0:ab:
c9:68:78:f9:69:64:e6:1e:e7:9b:61:a8:b8:9e:4c:
e6:49:35:22:2b:c4:08:26:9b:c8:21:25:76:f9:a7:
52:3f:4e:ae:97:0b:30:03:b1:3b:56:25:f2:ca:c1:
32:58:f2:53:cd:6d:2c:da:ee:61:d2:2e:39:f1:7f:
e4:e1:c1:3d:c2:1d:69:f0:7e:8a:1d:41:9e:97:a0:
68:5a:c7:77:7a:ab:fc:da:d3:0a:15:12:80:ed:78:
5c:f9:d9:75:34:e4:30:df:b8:65:3d:20:1e:f1:0a:
f7:33:ad:99:b3:d2:20:72:c8:f9:42:2b:34:ba:86:
ec:45:95:b2:90:74:8a:92:14:d5:17:0e:a5:ce:af:
3d:08:3f:9b:79:ff:e7:f8:52:0e:44:63:20:94:9b:
05:54:fd:29:ab:57:dc:31:79:4b:fe:3c:72:bf:32:
04:2d:f1:f4:19:9f:c3:7a:bc:29:80:c2:19:40:f1:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2A:9D:68:43:F2:25:ED:B2:7C:A9:05:D9:AC:AE:A0:D8:74:63:F3
X509v3 Authority Key Identifier:
keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cf:f8:b3:c6:b8:31:35:a3:59:3c:0f:d7:4c:d2:70:24:31:
64:59:03:bc:0d:cc:35:17:ad:cf:c3:f2:7a:91:54:73:97:85:
21:dd:e5:17:2b:68:ce:7e:04:78:ad:16:6a:21:cc:34:a1:74:
9e:34:75:90:42:b6:d3:c4:c7:d5:3b:9d:c6:45:0e:d0:b9:ec:
1f:23:1b:3b:ab:2c:29:f6:6f:ec:1b:b4:d8:72:ae:f7:a6:17:
8b:91:03:8c:1d:bd:ee:65:80:b6:f8:bc:20:b9:61:9d:4b:9f:
fc:1f:83:a8:d3:c5:9b:bc:14:5e:1a:df:1f:52:d4:b0:bb:45:
e7:c8:36:3b:3e:83:be:e4:64:26:dc:1c:ca:d6:f6:ed:6b:da:
eb:07:cc:3e:35:17:c1:01:99:8b:12:b5:e4:40:4c:db:83:6d:
fb:4a:15:e5:99:1b:fb:8a:9e:93:20:a9:b1:a3:c8:61:37:64:
b1:ae:9a:7b:c8:e7:92:e3:79:97:b7:70:d0:29:94:ff:3a:d7:
a4:cf:d1:d5:f1:08:22:da:9d:18:7e:b1:7c:1b:5d:8b:11:6d:
ba:6c:c2:5b:b2:a1:61:dc:9a:7e:ca:6b:07:7c:60:58:55:0f:
d1:99:a0:14:a6:a3:33:97:88:d1:9a:2b:da:57:48:2d:74:9a:
29:51:a3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:45:04 2025 by rpki-client