Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
File: Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json)
Hash identifier: Ecr3yTtrAy6o3GJJOjkHUcIUj5ZaZ862ogBruOcHAw0=
Subject key identifier: 31:C6:49:9D:CC:E2:0D:F1:82:36:57:6A:C5:1C:F8:53:67:E7:E0:22
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 019A0447C8A07E471BB9460B4BECA5A5BA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 01:00:04 +0000
Manifest this update: Tue 21 Oct 2025 01:00:04 +0000
Manifest next update: Wed 22 Oct 2025 01:00:04 +0000
Files and hashes: 1: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: kcGCu9+KfvlRSMtwcsrwBrlur99jUfZD75fFTVPTuUU=)
2: d6C8v6GoigEzg6pbLvTWJvddupU.roa (hash: EXaNGOIp/fMA/oSDDsbRGa0FHPZi/hzE5RwEYVseBGk=)
3: og-QYcWWG7blmQPnjS8N7Pfy2CI.roa (hash: F2sqc18qvqzf4/nshb6Uc/1k3H2tfbxW4Ckt/4G4dtQ=)
4: q8IlRbnDa7-lnFAs-hO2WPcOwLk.roa (hash: hbIKEj6KOMWmptm4f819IMKKqrXG2uGf4j2uozA9qks=)
5: zZc3DeDwts9pkaWZgvcKrYsKK6M.roa (hash: oGvkVQFGZUcaVi+hdfOY9pZnUYCxpKrEsPEP9NwnTEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:47:c8:a0:7e:47:1b:b9:46:0b:4b:ec:a5:a5:ba:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Oct 21 01:00:04 2025 GMT
Not After : Oct 22 01:00:04 2025 GMT
Subject: CN=31c6499dcce20df18236576ac51cf85367e7e022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:0c:ca:dd:63:8c:0c:cb:82:81:7e:3f:b1:
d2:5a:30:41:5c:a5:23:2c:71:92:90:b1:96:26:ea:
e6:ae:b5:f9:ec:e1:16:e0:8e:d2:5c:70:b7:a1:d5:
b8:0e:4c:e3:3c:39:c8:e2:d4:ee:a2:e1:44:16:4c:
65:67:7f:59:d9:d4:aa:02:0e:5a:67:1c:85:35:80:
91:ac:dc:ac:72:ee:c7:94:f4:f2:35:b7:23:66:51:
d4:b1:b3:03:90:3a:e6:4d:07:61:a2:f5:44:c6:00:
9f:88:5e:b6:9f:64:56:fe:51:8e:88:51:49:66:8e:
19:9e:23:17:49:46:9c:53:b4:04:63:c0:57:75:02:
cb:0a:14:b2:c2:3e:01:6a:2d:77:a8:69:6f:84:c4:
f1:d9:97:b4:e7:ef:93:d2:19:35:b0:40:65:cc:bb:
7c:64:7f:7c:8e:bb:b5:5a:41:b7:51:20:59:15:5d:
a7:eb:54:e9:fe:71:04:76:24:b4:da:d7:1f:1c:13:
fd:28:18:96:c4:8d:06:ed:e5:37:59:15:08:f2:37:
1f:7f:eb:85:e4:9c:de:b9:b2:b9:8d:ab:4d:a8:4b:
f9:ab:0c:42:07:a8:4d:fa:8e:00:97:49:d7:69:d5:
8d:6e:6d:83:18:60:fa:69:49:7c:11:29:03:7a:9b:
ad:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:49:9D:CC:E2:0D:F1:82:36:57:6A:C5:1C:F8:53:67:E7:E0:22
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ef:de:06:97:92:f3:f3:2d:0d:c3:a7:c4:f9:67:fd:d2:81:
dd:db:f3:56:5b:d6:f4:96:f8:c0:35:09:d4:a1:cf:7e:f3:c8:
ef:c4:de:c1:0a:b2:e6:b4:2a:94:93:2e:07:3b:98:3d:ad:32:
5f:da:09:39:d2:5d:fe:74:1b:63:f5:b9:05:6b:34:74:59:48:
00:4e:db:9c:9c:65:f9:c9:da:3a:21:94:26:9c:0a:9f:a9:7d:
dd:5d:bb:03:f5:78:d8:ab:df:62:a5:86:27:f2:d1:6e:33:70:
64:83:9a:42:c9:35:7f:00:f2:8a:62:6c:e2:b9:38:17:49:79:
71:da:01:25:23:96:d7:25:aa:2a:1b:bc:b0:f6:d5:9c:91:b9:
c5:46:f2:c9:23:10:be:95:ce:07:47:66:87:96:00:80:86:c3:
4d:54:89:b3:80:c5:7e:7b:6d:1d:c2:d5:3f:96:1a:3e:40:2a:
47:aa:b3:99:1b:0a:67:aa:8a:d8:5b:b5:c3:28:4f:ac:b5:43:
14:3c:16:6c:b6:30:f0:fb:82:bc:3d:aa:fc:71:f3:53:e0:e1:
a1:38:81:97:86:a7:58:c5:57:e9:fd:62:ac:1a:b2:c9:a5:42:
98:03:77:96:2e:83:fa:58:a6:92:0f:64:8d:5c:45:66:c8:3e:
11:4e:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:35:35 2025 by rpki-client