Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
File: YhuOSG7srmEk3hBJT9OROe1KN8s.mft (raw, json)
Hash identifier: dbksTGT/syXllnZmvf9oMB25KynWWuvUKk/2MM8+KlQ=
Subject key identifier: 2B:79:5D:46:D6:02:ED:93:22:91:9B:3B:8E:F2:B9:5C:76:9E:60:87
Authority key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
Certificate issuer: /CN=621b8e486eecae6124de10494fd39139ed4a37cb
Certificate serial: 019A20D21BA689EE631A74A3342C3B57F262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 14:00:31 +0000
Manifest this update: Sun 26 Oct 2025 14:00:31 +0000
Manifest next update: Mon 27 Oct 2025 14:00:31 +0000
Files and hashes: 1: YhuOSG7srmEk3hBJT9OROe1KN8s.crl (hash: zxygoV6K+EiLOYDuVBXTFhYaZsS3giWyLtK3dCICCy4=)
2: eKGme1_RE2Cve029wfoTPnjkx8E.roa (hash: 7e5ken09Fa398flHkK+xPpARVfWAIKVd53mQhTUCt6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:1b:a6:89:ee:63:1a:74:a3:34:2c:3b:57:f2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621b8e486eecae6124de10494fd39139ed4a37cb
Validity
Not Before: Oct 26 14:00:31 2025 GMT
Not After : Oct 27 14:00:31 2025 GMT
Subject: CN=2b795d46d602ed9322919b3b8ef2b95c769e6087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:2e:e2:a4:73:ec:ef:4e:66:03:09:73:15:
c5:1e:b8:4f:b5:f5:1e:2e:c1:e6:2c:55:56:85:6b:
73:d0:59:50:b4:ef:6a:4f:45:f3:26:9a:09:92:9d:
17:38:76:4f:4b:0f:a1:9a:8a:eb:cc:b1:7e:0f:00:
72:67:7a:67:4c:25:74:86:24:c5:4b:be:2f:de:34:
80:f2:d3:62:dc:45:87:35:d0:21:45:31:e3:4f:61:
ad:b2:90:84:f6:f9:64:7a:b7:7b:7f:9a:9d:11:d0:
aa:45:e8:83:1c:b5:ba:f2:21:f8:e4:c9:bc:fa:f5:
2c:2b:62:4a:69:f5:1f:80:0c:dc:3d:c7:a3:47:a0:
d5:ee:d8:72:38:9d:58:c3:67:c1:e8:6c:67:fd:4e:
c3:c1:f5:d0:ff:fd:6b:ed:10:55:26:cd:75:4c:81:
b4:5c:be:d6:9b:88:79:75:a6:48:4e:d5:8f:84:b0:
de:9b:07:9a:90:f6:fd:1e:64:fd:f5:0a:7f:2d:1c:
82:01:69:b2:99:bf:28:ad:9a:8f:5a:f1:80:43:88:
10:20:b5:50:ae:91:67:e6:2b:49:c6:81:0d:38:1f:
ca:49:9f:59:82:2b:1f:4b:d9:cc:91:56:dd:d4:c6:
13:73:63:22:e4:6c:f4:14:6d:46:02:9a:84:4f:b1:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:79:5D:46:D6:02:ED:93:22:91:9B:3B:8E:F2:B9:5C:76:9E:60:87
X509v3 Authority Key Identifier:
keyid:62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f0:a8:89:20:45:3e:b2:05:e2:26:23:9a:9a:23:74:3e:02:
e6:8f:fa:b0:84:30:d0:11:82:20:61:f0:dc:1d:1a:01:a4:85:
7d:7f:26:4f:43:6b:3c:23:1f:36:6e:46:6d:7f:b2:81:61:57:
30:f1:44:db:8e:db:64:aa:a4:24:02:06:d7:f0:a9:85:52:3e:
fe:8b:e0:f7:0c:bd:d9:eb:f8:12:87:e7:31:e8:ab:f1:97:b0:
f1:29:f2:81:73:3a:09:eb:ba:6f:23:ba:18:c3:4c:b5:c2:01:
44:45:e5:44:6b:92:ae:92:c5:22:e9:f0:b7:eb:9c:8a:d2:4d:
66:90:ba:f5:0f:2a:8a:02:72:d1:b6:25:c3:57:c8:52:8d:a6:
f1:f1:e7:3d:d6:e7:06:9f:0e:c8:3f:25:b9:1d:d7:c5:d0:de:
e0:ec:45:65:7c:b4:55:45:44:fa:ce:d9:50:65:4e:d7:f1:64:
d5:24:87:1b:75:8b:3b:25:dd:40:27:81:0b:80:c7:03:ac:85:
e6:d4:43:70:20:e5:cb:2b:2c:d6:e2:3f:76:ce:ec:88:d6:18:
21:7d:5d:64:63:8a:17:40:60:2e:db:1b:75:9d:92:b2:25:a4:
63:8d:93:df:8e:2e:87:53:c6:bd:69:c7:f2:00:3b:42:44:56:
47:2d:80:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:24:42 2025 by rpki-client