Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: zr15UFON5hQCe0qGxAa4v0JmAnmPzhUDdmljw9tZsWQ=
Subject key identifier: 98:6A:A1:90:85:F2:62:87:B8:93:C5:AD:29:F5:96:EA:D8:23:95:3B
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 0199FC216FE0684A03D9BF3BB694F88486E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: w/XS8ddXz09LDl8+w5FebeUmyA5HcV3b9aj88EjfhkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6f:e0:68:4a:03:d9:bf:3b:b6:94:f8:84:86:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=986aa19085f26287b893c5ad29f596ead823953b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:24:2a:92:8c:c1:6e:5c:0f:f5:2f:fe:95:
e3:21:4d:3b:13:f1:a0:55:55:9f:4d:3b:29:c8:21:
b0:e6:6a:cd:61:33:a2:40:0c:d1:35:b6:30:8b:28:
f6:21:5c:c1:5c:ff:00:be:4c:e8:3f:46:a7:bf:44:
60:29:6a:8b:f5:f7:9d:1c:1b:89:13:37:08:50:48:
c8:5d:1e:48:52:20:8f:82:27:c3:6f:71:44:2d:e4:
0f:e6:97:cf:06:f6:b8:cb:da:4f:97:92:eb:94:ed:
6e:65:69:2d:82:d9:cc:d3:d8:22:87:2b:f4:ec:fa:
50:84:43:bd:33:53:7c:25:7d:bb:7f:37:20:25:79:
c8:ae:8c:46:d7:47:1b:e4:78:d7:3f:ae:2e:d3:fb:
88:51:d0:79:d9:1a:6b:f4:ee:c4:e3:9b:e0:66:28:
ee:eb:61:dd:3a:eb:6d:fa:fc:c6:76:ea:4e:91:e7:
51:25:5a:eb:f6:be:45:08:59:94:7f:8f:a9:bd:cc:
02:66:57:7e:98:4e:31:6b:fa:11:a0:fe:eb:00:b4:
e4:57:65:83:22:57:bf:1d:e2:c3:1a:35:4a:0d:62:
1f:78:69:4f:fc:38:2d:10:0a:cb:19:fa:d9:ea:d9:
43:a7:2d:71:c5:19:26:85:19:4d:04:84:04:64:25:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6A:A1:90:85:F2:62:87:B8:93:C5:AD:29:F5:96:EA:D8:23:95:3B
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:78:0e:0f:55:9e:af:96:2a:95:f5:a4:7a:04:a8:2d:5f:0d:
fa:00:6f:b1:50:f1:bf:65:81:d2:7d:c6:31:48:db:f9:8f:f7:
3c:8b:74:70:9b:ee:48:d0:1d:14:cf:85:29:7f:75:9a:f2:64:
eb:11:35:88:17:a7:6f:82:f5:8a:81:58:5c:dc:b3:df:85:01:
80:c7:c7:bc:0a:7a:18:be:33:5b:f2:28:01:5e:78:d7:50:32:
17:b7:c1:ea:aa:80:a8:10:35:3d:80:cb:0c:d2:14:43:11:d6:
e9:18:e1:59:be:24:0a:88:f1:e9:7c:08:37:3f:ae:24:77:06:
50:05:42:73:b6:3c:39:ff:da:c7:e0:79:29:9f:55:17:ce:e4:
3c:36:21:6b:94:ee:b5:f1:2c:f8:47:3e:4f:b5:87:2d:f7:ff:
46:11:0a:b8:bc:0b:fb:e1:6e:c0:3e:e3:58:64:34:a3:80:71:
78:62:58:46:f1:74:26:00:c7:5e:f5:5a:e3:c9:1c:d1:06:74:
70:d3:a3:54:1a:9d:4e:fe:de:f7:23:bb:a9:f9:ee:51:80:83:
24:ae:3b:cb:c3:0c:f7:61:76:be:7a:af:b1:9e:60:0f:01:89:
05:d7:2c:97:0d:6a:41:2a:07:95:d7:9d:8e:fe:94:c1:85:b1:
0c:9d:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:47 2025 by rpki-client