Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier: 1npqCk3uioPY1SFTbOJIX8mmqBYDE5lMeP90OWL19GA=
Subject key identifier: 0B:43:F2:9A:3B:88:2A:EC:1B:1E:95:92:61:43:EF:47:98:58:F5:F6
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 0199D1DBC7BC29112FD317BA9B51DA247E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number: 16CA
Signing time: Sat 11 Oct 2025 06:01:05 +0000
Manifest this update: Sat 11 Oct 2025 06:01:05 +0000
Manifest next update: Sun 12 Oct 2025 06:01:05 +0000
Files and hashes: 1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=)
2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: 63xeVmRQ5VjYg+BPiw0uvJaez9wBjuzD3+2VDRvKjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:db:c7:bc:29:11:2f:d3:17:ba:9b:51:da:24:7e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: Oct 11 06:01:05 2025 GMT
Not After : Oct 12 06:01:05 2025 GMT
Subject: CN=0b43f29a3b882aec1b1e95926143ef479858f5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:81:aa:c7:13:4f:33:cb:58:81:38:b1:af:
c5:8b:d2:a8:89:6f:ec:c0:62:a8:5c:c0:54:7a:24:
ec:ec:b1:fe:ad:27:9c:c9:12:de:33:b6:93:11:ed:
87:f6:3a:57:7e:d7:05:91:38:a9:2a:55:bb:fb:fe:
a9:cc:1a:1f:99:5e:96:b8:77:92:48:d6:44:6c:07:
69:ca:85:f0:80:68:f7:b9:bd:35:c9:f9:f0:34:73:
57:99:3c:cb:7d:85:a1:6a:9d:01:21:af:76:b9:09:
c6:82:aa:38:8c:46:75:29:86:09:4d:4b:01:2b:f1:
0d:aa:d6:4a:db:46:e1:18:0e:01:57:da:ac:ed:d6:
69:fd:a4:00:e6:02:44:b9:41:9f:af:05:a0:69:30:
a6:8b:e4:55:33:f2:47:82:76:31:b0:68:9b:2b:ca:
a9:bc:8e:4a:1f:e8:e0:c1:61:51:79:90:cb:6e:01:
51:4d:66:90:16:41:e4:8e:91:5c:a9:58:69:36:52:
55:f8:6b:f8:95:ea:27:bf:c1:a3:d7:eb:f9:bf:6b:
0b:bc:97:91:1f:fb:0f:06:a5:95:dd:01:b2:4b:83:
98:dd:0b:fb:98:5a:b1:74:d0:1d:14:9b:2b:4b:86:
40:63:1f:fc:8d:d9:63:35:a7:63:15:18:d3:0c:86:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:43:F2:9A:3B:88:2A:EC:1B:1E:95:92:61:43:EF:47:98:58:F5:F6
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cc:25:db:21:7c:55:de:93:4a:e6:cc:17:b7:99:42:c8:2e:
3f:4d:b8:2c:2f:6c:86:3c:59:36:9c:22:43:eb:0f:cc:80:4c:
52:70:15:f3:c8:b7:b2:ed:72:c8:c6:81:18:03:b8:1e:f4:21:
96:bb:4c:89:b6:16:05:3b:82:2f:77:83:61:91:d8:0e:35:e5:
e5:1a:48:99:3f:67:e1:5e:24:67:1a:40:8f:38:a2:04:57:f4:
a6:df:cc:09:c8:90:a4:6f:9d:53:5b:0b:03:5c:35:b9:ad:42:
63:46:d1:1c:2d:d6:7e:1b:2c:72:8e:dd:29:0e:61:40:9a:9f:
d4:29:6a:92:71:d9:85:6c:23:15:89:6c:ec:4a:ef:b6:c1:d8:
53:55:88:82:87:1c:f1:7e:7b:f3:ea:b5:77:30:96:79:72:3b:
94:eb:da:ba:c2:56:81:67:06:1d:65:72:2d:9b:bd:1f:58:44:
86:6f:c5:0f:5b:03:9f:49:9f:7e:81:eb:a8:18:3a:06:52:70:
61:6d:c7:e6:40:ce:2c:1e:be:66:e5:da:b7:30:33:c2:b6:91:
85:53:ad:d6:49:5e:90:1b:c5:0f:44:e7:d6:19:3d:18:4a:18:
9f:36:3a:c3:17:e5:2c:61:51:27:50:a8:c6:b9:9e:96:5b:7e:
59:6c:7a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 15:00:16 2025 by rpki-client