Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: J1sJxYtKuKenxidYIYhn4Kkfyhr79ZMdqIIikIwNhE0=
Subject key identifier: 1C:7E:CC:D4:E6:6E:09:69:36:9C:0F:49:94:40:5C:9E:A2:19:F0:C1
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019A1CBEEE86A92149F5699960E369D6CE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 19:01:06 +0000
Manifest this update: Sat 25 Oct 2025 19:01:06 +0000
Manifest next update: Sun 26 Oct 2025 19:01:06 +0000
Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: RJ4k47vE+Jl6jSYSQias/zJtzbdcMPsH4HGl0nt2gEI=)
3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:ee:86:a9:21:49:f5:69:99:60:e3:69:d6:ce:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Oct 25 19:01:06 2025 GMT
Not After : Oct 26 19:01:06 2025 GMT
Subject: CN=1c7eccd4e66e0969369c0f4994405c9ea219f0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:6e:79:f1:1f:d0:e8:f0:c2:78:05:ff:33:
2d:5f:90:ca:10:7a:21:bb:15:43:49:b6:5d:a9:05:
c0:58:dd:e2:95:e7:5d:da:7f:9a:8f:08:b9:59:94:
f6:7a:39:0c:02:0e:9a:92:87:fc:82:38:51:74:4b:
43:14:72:72:11:ab:27:51:9c:95:88:c2:d2:f6:ef:
28:45:95:93:da:35:22:26:a0:ee:fa:5a:50:be:a0:
14:de:3f:80:bb:73:d3:92:26:74:00:4c:ec:7d:4a:
35:88:bc:ee:f9:3e:3e:65:87:ed:bc:9a:d3:1c:76:
55:12:a0:e9:1d:a0:20:03:22:62:ea:23:3a:ba:6e:
15:f6:2c:96:64:e8:41:7f:b7:f7:8d:b2:d7:24:00:
15:eb:2b:59:8c:85:ae:05:38:cd:b1:39:f0:f5:90:
35:ca:32:6b:26:f5:7d:d4:71:d0:12:11:e8:fa:7b:
3d:ae:f5:60:db:d6:1c:c0:4c:e9:cb:a2:4e:b7:c4:
f4:63:ea:73:5e:7c:1c:03:b5:ec:8a:fe:d3:6d:40:
19:10:59:49:e7:59:4f:c7:ac:b2:17:bb:65:f0:53:
86:ec:d4:fb:3f:c4:9b:b7:fb:87:9f:52:5d:39:8e:
d5:af:13:28:14:4f:5f:64:77:63:35:de:d8:ed:d0:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7E:CC:D4:E6:6E:09:69:36:9C:0F:49:94:40:5C:9E:A2:19:F0:C1
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5a:b4:d0:38:24:09:b6:f5:02:1b:72:12:fe:e3:d7:c1:73:
06:96:3d:b8:38:48:4b:b4:2f:53:09:5b:71:63:77:e9:b6:b4:
69:2e:aa:7a:62:53:a0:bb:ab:65:6c:96:fd:ec:c3:7c:59:ae:
21:fd:37:c3:64:8a:ea:51:60:b6:49:19:0c:2d:12:45:06:80:
eb:d4:11:66:06:f9:c4:2f:08:3a:60:5f:2b:a1:26:2c:f9:06:
b5:24:4b:e5:07:b8:8e:0d:61:89:4c:98:a0:b9:52:ac:e4:67:
01:72:63:49:f9:75:5d:66:85:1e:78:5b:89:c7:1a:db:3a:25:
1d:ff:a3:ba:00:61:af:9c:37:ac:99:60:6b:99:17:52:1e:ce:
97:d7:8f:9a:f3:c1:87:ac:e6:0a:9b:a8:c6:c0:eb:c3:2c:d4:
b2:39:84:6d:ac:79:62:fc:74:e1:b5:14:5e:c2:5d:99:7a:4a:
4a:c4:b9:4c:81:4a:98:ef:88:56:d8:1b:35:30:03:f7:0e:1c:
97:9e:f2:82:db:fd:29:1a:ce:9f:d7:9f:d1:72:23:ec:d4:f0:
37:83:a4:1c:e1:02:cc:d9:cc:41:aa:26:16:85:5e:94:5b:dc:
47:ca:dd:ba:28:cd:b2:c2:12:a9:5e:58:e9:f0:c9:05:25:82:
83:9b:30:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:27:49 2025 by rpki-client