Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: 0FuheJrDIUosQoT78QXigECPow0tcB7tr+pDoJU02Hw=
Subject key identifier: 66:F2:F6:72:B9:98:09:07:87:B4:74:26:DE:19:3E:ED:17:91:2E:7E
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 019A21093F90D56A75DCB34E635810A8A4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 15CA
Signing time: Sun 26 Oct 2025 15:00:45 +0000
Manifest this update: Sun 26 Oct 2025 15:00:45 +0000
Manifest next update: Mon 27 Oct 2025 15:00:45 +0000
Files and hashes: 1: 0TtFz6wVP0jqaQNw01V55drmS3k.roa (hash: TMVD5m2P0IJi74IF8JJhCFdWfhDxP8MQCO9QQGNNZr4=)
2: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: wCyUij2vCFxjI08lqrQKpGdUCRs26evzOQdUkPcFHpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:3f:90:d5:6a:75:dc:b3:4e:63:58:10:a8:a4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Oct 26 15:00:45 2025 GMT
Not After : Oct 27 15:00:45 2025 GMT
Subject: CN=66f2f672b998090787b47426de193eed17912e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:3b:4a:b8:6a:56:9a:90:69:e3:8d:83:0d:
5a:b5:f9:86:be:94:e7:14:df:c2:d2:55:90:07:ed:
0f:96:21:8f:0b:d4:34:21:44:f2:af:7f:f0:7b:cf:
cb:25:b2:4d:b9:12:a1:d4:09:e9:e6:01:2c:1e:70:
74:45:34:52:ce:79:c2:28:02:00:fc:a1:2f:28:83:
ef:10:09:d6:b7:d3:85:af:df:92:63:46:1f:87:96:
ec:0d:21:b6:46:b6:b1:df:65:92:cd:6e:f4:99:99:
97:69:46:33:7b:cd:b4:b8:a0:c4:99:29:04:1f:95:
20:27:0e:52:d1:39:40:a0:52:b4:56:a9:36:88:4d:
c8:07:f7:8f:3d:2f:f2:fe:8d:d4:1d:45:8f:c3:6e:
38:a6:18:10:43:e2:0f:74:a1:9b:33:dc:10:28:88:
e6:8d:87:fb:ad:69:b2:0a:06:78:cb:9c:f7:6a:15:
69:c2:6c:f5:28:c8:ce:ca:57:7e:e8:4d:db:e8:19:
21:f9:37:6c:40:46:66:7d:1f:6a:b1:ef:17:c6:96:
42:65:b2:71:e7:08:9d:0f:f7:8e:e2:98:32:d4:f9:
14:c2:ec:8c:42:25:f6:95:c8:ef:94:e7:7f:e4:8a:
4c:5c:91:50:c5:6c:e5:14:c5:e8:51:4d:73:8b:b3:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F2:F6:72:B9:98:09:07:87:B4:74:26:DE:19:3E:ED:17:91:2E:7E
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b8:47:88:1a:38:b9:cb:a4:e6:cc:6c:5b:aa:97:20:ce:7a:
e0:ab:cd:be:d9:32:01:51:9d:2f:56:88:7b:f7:2f:0a:61:53:
e5:13:79:c4:54:6b:4d:c8:a2:14:87:e9:78:c4:3c:83:61:74:
59:7d:8c:5d:26:6f:04:ce:a2:ae:7e:b0:a0:53:a7:cd:7d:ad:
46:74:52:ff:7f:e8:82:4f:bf:30:10:70:43:01:c0:b9:40:e5:
d5:b7:4f:ce:64:b8:6c:24:a6:10:f0:37:d9:b3:40:51:40:67:
79:e4:24:d3:7c:cc:80:94:9c:0e:65:6e:12:a8:2f:9b:cd:42:
12:05:75:c4:5e:73:18:61:2c:22:d1:c1:8f:9f:98:1f:9c:66:
60:3c:ef:0e:46:3e:6c:cd:f9:2d:66:44:c8:c6:15:4b:6b:a9:
5e:f8:b1:bc:18:fc:d4:86:62:13:1b:47:4b:f3:cf:5c:b9:78:
71:68:77:21:3a:0c:62:0e:71:09:1a:80:e2:11:18:20:85:78:
44:c0:77:af:59:b6:86:24:40:9f:5a:5e:e8:39:37:75:3a:31:
8c:b7:53:ce:c1:24:3f:fd:e0:cf:2a:a9:be:7f:11:c2:b3:99:
73:ad:2c:3f:83:00:db:13:f4:57:36:62:e8:2f:75:32:f5:7a:
61:ff:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:33 2025 by rpki-client