Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: lsmvJFuFks68gnOS8irGK0VTLSiW+Jnkg8AvY8X4xbQ=
Subject key identifier: 50:99:BF:08:9E:D3:75:45:3B:CB:D9:60:70:B7:73:32:AB:11:B2:6F
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 019A70DC02A70F9464A984BB3211FC6CEFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 03:00:58 +0000
Manifest this update: Tue 11 Nov 2025 03:00:58 +0000
Manifest next update: Wed 12 Nov 2025 03:00:58 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: xpY7oabIsoYw/MaGVegjbyCxPdfLTv8ugKz3t2BdVTM=)
2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:02:a7:0f:94:64:a9:84:bb:32:11:fc:6c:ef:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Nov 11 03:00:58 2025 GMT
Not After : Nov 12 03:00:58 2025 GMT
Subject: CN=5099bf089ed375453bcbd96070b77332ab11b26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:98:40:a5:9b:b6:81:8d:56:c8:47:9f:0c:
79:93:f7:58:3e:fd:eb:40:46:38:3d:c6:c3:55:be:
3f:bc:23:c9:61:db:f6:f4:c9:e6:51:32:58:b6:f7:
96:20:c7:9f:bb:fc:f2:d1:a9:bc:91:a3:13:00:b9:
4d:20:12:f7:e2:cd:69:05:43:6c:c4:f2:da:5b:62:
bf:3e:8e:50:b6:a6:7e:46:b4:6d:db:e9:2c:64:43:
4b:66:43:06:00:2b:ba:84:86:23:37:0f:6d:64:e0:
b6:9d:dc:69:ba:22:63:be:d8:07:68:ab:7e:fd:36:
e6:24:c9:7c:47:45:a5:b7:8d:4a:f2:c6:e7:f5:55:
39:cd:41:cd:2e:86:c9:a9:d8:a2:97:9f:a6:36:0d:
a6:bc:6d:98:3d:0b:5d:ef:5d:be:8b:06:20:d9:89:
e1:0b:0d:74:9c:74:3d:ff:2c:ee:48:00:e3:70:c8:
c8:f2:c9:04:65:c1:8a:40:93:2e:90:a4:29:e4:1f:
1a:63:c0:68:29:a2:ab:77:81:39:5e:fd:3f:30:28:
fe:ef:de:f4:d5:87:21:72:72:2a:d8:86:2a:e2:7d:
87:f4:3f:dc:29:c6:60:2b:0e:b0:a7:57:88:2b:e5:
9c:1a:e7:56:67:40:fa:3f:3b:cf:a4:58:8c:07:bb:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:99:BF:08:9E:D3:75:45:3B:CB:D9:60:70:B7:73:32:AB:11:B2:6F
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:df:e3:0e:b1:f1:1e:ab:30:88:13:8c:a9:54:d9:6e:32:f8:
ae:5d:ad:9b:3a:52:f1:fc:4c:d0:c9:cb:fd:a1:75:c2:c2:e9:
93:1e:32:60:e7:b3:91:e5:38:ba:d7:54:cb:06:7d:9c:42:31:
06:cc:5c:6b:21:cf:8e:1c:89:0b:60:73:0e:23:be:ad:92:76:
a5:62:ba:52:f1:25:1c:c9:ee:c8:36:3d:2c:7b:47:fa:9a:a5:
ec:ae:98:71:9a:0b:e9:23:0a:68:c1:30:08:f4:cc:ac:3c:f0:
28:de:85:e1:77:a4:a5:59:2e:33:65:60:9c:a6:b2:74:d2:29:
e7:39:e2:15:71:3d:7e:d4:e3:46:c7:93:53:23:a4:0e:35:18:
73:9f:9c:13:04:87:8f:e7:4f:39:93:ff:72:54:31:ef:0a:be:
5a:57:29:c8:21:13:1d:a4:73:7d:8d:93:21:58:38:9a:09:94:
53:1e:9e:1e:e5:ea:9f:e7:55:5d:69:f4:21:8a:dd:4e:b8:c3:
01:e2:37:4b:32:51:51:8e:10:21:4b:76:83:a2:fb:2d:a3:f7:
fd:e1:62:a3:f9:14:ea:83:d2:72:2d:c8:cd:b9:ca:f7:e5:cb:
7c:4e:db:ef:ca:32:c4:69:79:ce:f5:fb:bb:12:59:c1:00:4d:
f2:4f:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:09 2025 by rpki-client