Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File: YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier: m4PW1ng2bd0mku7njiRzG9ubiPbSDG9OqaUDBqJxALM=
Subject key identifier: FE:47:03:47:A9:C7:39:09:92:32:6E:BA:F9:60:73:3E:5D:E4:4A:D8
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial: 019A0F396A4D326ED606C4C6A2F6E9233C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number: 99
Signing time: Thu 23 Oct 2025 04:00:12 +0000
Manifest this update: Thu 23 Oct 2025 04:00:12 +0000
Manifest next update: Fri 24 Oct 2025 04:00:12 +0000
Files and hashes: 1: Gof8cYl_-_S4WvBztVMMpN2lO6Y.roa (hash: 6km18MyJ5IHTThvCW2WxtbASJyCxFy1OyHEgHJJtY7Y=)
2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: RCMJVt3OT3bneKXz20A+vZtQ1WCmlDBGinM/lV2cQmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:39:6a:4d:32:6e:d6:06:c4:c6:a2:f6:e9:23:3c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
Validity
Not Before: Oct 23 04:00:12 2025 GMT
Not After : Oct 24 04:00:12 2025 GMT
Subject: CN=fe470347a9c7390992326ebaf960733e5de44ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:85:60:30:de:a2:00:bd:e2:b3:4b:19:e2:
bf:a5:38:c8:1c:d3:35:ea:d9:84:b0:4c:1b:5c:c9:
f5:a6:50:4e:46:e3:a4:77:6d:f2:9a:d4:41:ea:9c:
cb:39:ef:c0:2b:96:4d:6c:00:1e:9b:49:5a:67:0e:
49:ef:01:ce:ab:e2:2c:19:7d:27:57:99:fb:47:26:
00:ec:40:df:5f:1b:9e:37:7e:6e:90:5d:a0:12:d2:
8c:c8:3a:7f:de:dd:0b:e7:2c:f1:98:e1:2d:dd:96:
9e:1a:2f:51:54:f8:dc:87:dc:b3:e0:c0:34:ef:ad:
bb:65:d3:a4:c7:62:ca:40:e0:15:5f:7d:91:24:15:
23:a7:ec:8e:3c:07:55:8f:ac:89:e9:ee:78:65:65:
4b:4c:a1:8b:c0:05:70:25:c9:c4:61:f6:94:a1:76:
48:8c:37:14:f0:7c:ea:d5:d9:00:36:70:93:8c:f4:
e4:40:bd:34:65:31:7f:e7:b0:f5:5b:ef:b1:e8:84:
fc:4e:e4:5d:60:cf:1a:31:1d:58:d2:15:2b:07:34:
39:eb:66:9d:fa:17:8a:ec:13:97:a0:6b:dd:74:7b:
46:56:13:7c:e3:83:b0:c9:42:99:2a:1f:01:3b:de:
96:24:c7:41:73:ce:0a:78:e6:e0:44:81:db:e8:af:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:03:47:A9:C7:39:09:92:32:6E:BA:F9:60:73:3E:5D:E4:4A:D8
X509v3 Authority Key Identifier:
keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:18:97:89:29:fc:59:74:d7:76:30:e4:b6:cd:06:74:35:07:
57:54:ed:4e:35:a7:58:a7:c2:72:63:7d:ca:d2:c9:ad:5e:f8:
32:17:18:6a:f0:3c:e0:45:22:5a:92:14:6f:a4:bf:1c:8b:71:
5a:af:c7:3d:57:30:78:f4:82:76:a7:0d:f5:83:ca:c6:3e:6f:
f9:1d:32:b2:cf:d9:a9:61:d4:34:69:bd:a6:16:39:ab:da:a6:
93:a9:6f:2c:8b:5d:c8:60:5f:85:a7:f2:4e:9a:75:93:bb:eb:
05:1a:0a:eb:98:03:10:44:2b:de:20:85:b9:db:19:2f:6a:d4:
5c:4b:a9:d7:ba:82:3f:dc:7e:60:25:ce:6c:e4:65:34:e2:6f:
e7:b6:09:97:5d:8d:d1:92:cf:96:2a:cb:8a:51:e3:ab:3e:0b:
b1:fb:a5:4d:8a:f8:e0:c6:d6:7b:b3:d4:11:11:a1:f0:6d:5f:
58:7d:12:29:95:e9:25:0f:53:04:0b:0e:eb:e6:53:f8:1a:ae:
4b:08:8d:f1:1b:ea:11:6d:97:68:f2:03:b5:24:bf:55:a7:eb:
86:4d:cd:57:2a:ac:a0:db:ba:f8:97:78:47:24:ce:97:22:18:
dd:d6:bb:e5:a1:87:a7:39:89:f2:b3:6e:2a:67:1a:5a:ba:26:
b9:4f:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 12:15:23 2025 by rpki-client