Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: hewJpJ//1Qq2jB6GDAZxLuB0DuuzEd/jxRrsI3IU0tU=
Subject key identifier: 5E:AD:F7:12:52:35:6B:30:A7:7E:88:4C:A2:A7:AF:02:FF:02:F2:3B
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 0199C532CC0E72D938E6DE3E51DC97653027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 16C3
Signing time: Wed 08 Oct 2025 19:01:04 +0000
Manifest this update: Wed 08 Oct 2025 19:01:04 +0000
Manifest next update: Thu 09 Oct 2025 19:01:04 +0000
Files and hashes: 1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=)
2: hZOD7Y_mupZOHap9fLf6vk7q8ec.roa (hash: S7Xh16GME3MVdYv3MI3CqwSYnk2TD7axisWzIQZKMnA=)
3: kkgbITx0NnDqrc6NrPVjFVrJ5sk.roa (hash: 8TkKYybnSajtPi7S+EAIdOJJM4TQV3tglJHQvRJJM1E=)
4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: jrh0g+Nmm1Dpbre9ipqX7sUsjsLur4n5SID+2WE7M7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:32:cc:0e:72:d9:38:e6:de:3e:51:dc:97:65:30:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Oct 8 19:01:04 2025 GMT
Not After : Oct 9 19:01:04 2025 GMT
Subject: CN=5eadf71252356b30a77e884ca2a7af02ff02f23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:f6:fa:16:73:55:e1:80:ae:bb:4d:56:76:
f4:0e:fd:80:8e:2f:9c:8e:76:e5:16:72:35:b1:2a:
9f:9d:c4:37:bd:76:bb:f0:a3:1b:21:09:98:ec:72:
4e:4b:33:74:75:fb:b0:20:af:ff:8f:01:13:4b:38:
dc:38:96:ec:8e:6a:de:a1:ee:f6:8e:94:b8:a1:05:
1d:75:98:f8:46:c5:98:6b:3b:0e:3c:15:db:e1:39:
a6:28:b5:c2:e7:48:eb:d4:19:f8:85:20:95:70:f7:
e0:b5:18:ea:d3:a1:cb:00:89:84:b3:1d:f2:47:4a:
b0:3c:b3:21:10:bf:38:86:b3:db:46:4a:ba:ec:0e:
b0:5e:c4:14:24:ae:57:cd:72:77:7a:fb:42:48:a1:
1d:92:e8:c3:1c:e0:16:a0:12:5b:2b:4c:31:3c:2d:
aa:7c:5c:de:f4:ce:6a:dc:c1:24:87:df:84:fe:2f:
12:0c:15:25:1a:1c:59:21:39:86:b6:2a:a3:57:c1:
c5:c3:6c:dc:37:ec:99:57:b7:a3:2a:be:9b:8d:f6:
3e:e1:02:e2:06:d4:8e:f9:79:00:89:25:c8:4d:08:
04:43:4f:50:f8:e3:2e:82:f4:54:c8:af:9e:2e:9c:
b0:fe:bd:66:39:84:0b:58:e8:8f:55:4d:7a:56:a7:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:F7:12:52:35:6B:30:A7:7E:88:4C:A2:A7:AF:02:FF:02:F2:3B
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2c:64:a0:a5:f1:bf:95:16:eb:bd:7a:9e:b9:93:11:0f:95:
5f:fd:36:2c:3e:fb:d1:01:b3:25:79:ae:5f:a3:5b:2d:91:7e:
61:04:04:21:01:80:57:48:48:ef:d4:a0:bb:f2:8c:2e:8c:20:
61:5a:3f:c1:26:04:a3:9f:ed:8a:9e:34:36:d9:6f:b0:76:7b:
d0:c0:4a:9c:23:94:d0:b1:84:ac:7d:04:1d:fb:53:4a:39:25:
6b:70:42:81:2d:d4:a2:4b:b7:48:ae:dc:98:c1:98:0b:cd:2b:
c3:66:c9:01:1e:3b:f8:14:b0:dd:33:7c:06:dd:5a:11:31:d8:
ca:50:e1:42:34:df:8f:e0:ed:39:b1:50:41:96:ca:2f:a4:a1:
33:7c:36:ae:d8:bc:69:86:83:1d:df:a1:07:c5:43:2e:6e:fb:
1c:41:7f:c0:e6:19:46:f2:97:c0:59:48:cf:2a:cb:b9:56:05:
be:46:7b:f9:02:79:06:94:70:73:c0:0b:fa:24:41:e9:28:35:
93:b6:27:73:f4:05:97:63:f9:5d:1a:ab:5d:a8:01:ed:8d:f6:
5e:4d:ca:4c:5b:af:57:98:5f:e6:dc:93:d1:a4:1c:1c:45:67:
c3:a9:a6:3e:b8:33:93:c7:56:cf:8b:2c:e1:2f:ca:74:f2:0a:
90:2d:80:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:34 2025 by rpki-client