Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: S8fAdGwK0FE+Bj0ypHlbnOYQoSrEY1MXY72ZIMUwIDg=
Subject key identifier: 16:A5:DD:80:B4:3E:A1:9D:41:22:2E:98:29:23:38:1E:3D:D8:BE:EC
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 019A047F6E3C1E08D46E5D8149D21FECFACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 02:00:51 +0000
Manifest this update: Tue 21 Oct 2025 02:00:51 +0000
Manifest next update: Wed 22 Oct 2025 02:00:51 +0000
Files and hashes: 1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: M81ELm+HRe0sCA7jvY2/FYzAZREOnOTfJJxq33Onw8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:6e:3c:1e:08:d4:6e:5d:81:49:d2:1f:ec:fa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Oct 21 02:00:51 2025 GMT
Not After : Oct 22 02:00:51 2025 GMT
Subject: CN=16a5dd80b43ea19d41222e982923381e3dd8beec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:15:3a:85:3b:01:76:cc:9a:ed:2e:1a:cf:
26:99:bb:a9:31:37:d8:3e:bf:64:80:b6:c5:2f:dd:
1b:f0:9e:ca:31:0b:a9:24:9d:92:7b:e8:9f:3e:0a:
3a:72:d5:12:30:e7:66:c1:a5:e9:88:24:27:57:08:
e8:e4:8b:1e:49:43:07:e0:87:f2:de:79:82:f0:4c:
16:3a:ad:8b:f0:07:a5:94:fd:ac:92:04:92:fc:f2:
c4:4f:9d:50:32:3c:1a:99:a8:78:34:39:c2:31:b2:
b1:21:a2:eb:3e:ac:49:19:d2:af:fc:89:b4:57:02:
7e:50:22:fc:64:3f:e7:72:8f:e4:e5:89:38:97:b2:
cc:d6:49:4d:29:c2:bd:65:a3:88:73:73:12:18:13:
fc:81:7a:7d:d8:84:56:b7:b0:45:29:e9:b2:a3:26:
68:4b:ff:5f:67:46:3e:32:a4:6f:3e:e8:b4:61:66:
a3:25:7d:1f:36:a1:05:2a:9f:76:8d:d0:e4:89:3c:
1c:bd:c2:99:66:df:1b:8d:39:af:fe:d5:43:ad:47:
62:9e:c3:13:65:10:c5:e9:93:12:5b:25:55:85:c1:
e8:2f:8b:ed:fa:38:12:20:2a:53:ad:1c:b9:5b:f1:
d2:fd:ec:e2:a7:65:f5:4f:fd:4f:05:ff:93:cf:04:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:DD:80:B4:3E:A1:9D:41:22:2E:98:29:23:38:1E:3D:D8:BE:EC
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c8:5a:3f:ab:b4:17:01:d5:cc:0f:9d:75:94:77:77:9c:20:
bc:e9:c2:fa:4b:5f:61:1b:07:b2:4e:10:9e:37:6b:aa:64:0e:
f7:bb:a1:04:d0:50:7a:46:71:e7:9d:93:eb:33:d7:c6:61:fa:
a4:a6:45:b5:dc:ed:a7:1c:f6:50:ba:3a:f8:6f:0e:be:ae:2f:
2f:36:99:30:1d:52:b5:22:0a:5d:f9:a4:11:81:46:b9:2e:48:
76:03:e9:6b:12:68:e5:ce:df:61:65:39:15:f7:87:49:4b:a5:
95:d7:83:bf:29:b6:d9:91:96:00:64:30:ec:6e:7f:f1:79:b1:
32:df:a1:c3:d2:f9:cc:c2:74:1d:f6:69:20:74:01:ed:68:15:
38:1d:ce:02:83:22:8c:6f:c9:23:e5:54:33:86:e0:96:07:d0:
d7:ac:3d:87:a7:eb:81:78:3c:02:25:de:bd:f6:27:fd:f6:b5:
d3:36:ae:79:a7:97:83:91:06:65:fc:74:da:7f:46:01:8c:01:
0d:38:e0:6f:13:56:eb:6e:44:bb:17:04:aa:e8:8c:ad:3c:f5:
8d:23:7f:8b:2a:32:f3:67:37:78:38:b6:7e:25:9b:7f:be:e3:
ee:76:c3:bc:04:41:b2:d8:e0:12:1a:99:66:4a:2a:02:47:74:
69:d0:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:25:44 2025 by rpki-client