Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: QkWgBpQoEjMMbM+X4KueqLfXwibc0gm3ZlIgQpZzCDc=
Subject key identifier: 39:B8:0B:8D:FA:67:68:90:FF:3F:D3:C4:B9:AB:95:62:4D:60:F0:D2
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 019A270AC70C010B96D87C51307E833D6456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 19:00:08 +0000
Manifest this update: Mon 27 Oct 2025 19:00:08 +0000
Manifest next update: Tue 28 Oct 2025 19:00:08 +0000
Files and hashes: 1: UvHXXFoVL7W8kRf_CmjRtC48uH4.roa (hash: E8q/i3b6Anio6852XqG98vgAFVWa9Xn560kQh/u0aSY=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: SAEjmcfFsBLD38LDCI/EEyKUePRWzBjzzaDM/G3iQow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0a:c7:0c:01:0b:96:d8:7c:51:30:7e:83:3d:64:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Oct 27 19:00:08 2025 GMT
Not After : Oct 28 19:00:08 2025 GMT
Subject: CN=39b80b8dfa676890ff3fd3c4b9ab95624d60f0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:c3:4c:a5:2e:45:01:4b:2d:7e:9f:e1:39:
4c:26:57:56:70:6e:43:03:10:57:d0:9c:96:a2:c2:
cc:a7:70:c9:4a:fb:d3:b8:86:a3:f6:1d:fe:d3:e0:
31:0a:04:23:e6:ff:af:b7:83:5e:a0:c9:65:2a:fb:
fb:33:d6:e8:60:91:78:92:43:65:39:2a:b0:78:b7:
a6:3e:a8:0b:b3:6c:dc:e6:0c:70:f2:83:c7:cc:8b:
97:b8:5b:d0:b7:a9:bf:30:1d:70:9c:42:14:dc:da:
7b:23:e2:a5:63:9a:fa:32:e0:a4:08:bd:59:52:72:
99:5e:23:c7:14:35:2f:bb:74:e8:ad:79:d0:ef:29:
01:d2:36:0a:85:c0:1d:2f:21:16:1e:9b:10:72:74:
34:19:b2:8d:5e:53:e6:47:89:18:46:d6:03:d4:ae:
c9:2c:1f:d2:13:7c:52:93:38:0c:84:91:27:79:07:
d7:3a:94:04:b9:6e:9d:df:d0:28:dc:81:40:50:bb:
f9:1b:e3:d8:40:1a:77:58:90:51:26:9a:94:82:5f:
54:f4:dc:99:ee:0d:54:a5:ee:fe:02:65:9f:81:8c:
e9:a0:27:cf:69:20:46:7f:e4:f2:af:9c:51:6b:83:
13:79:35:3d:1f:d2:86:4e:48:dd:76:a2:d8:5c:2e:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B8:0B:8D:FA:67:68:90:FF:3F:D3:C4:B9:AB:95:62:4D:60:F0:D2
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:68:c8:0b:3d:12:98:75:e2:ff:39:a4:04:b1:0f:da:33:
d8:c7:bd:74:54:ee:19:8c:9d:08:5c:12:4b:db:5b:f3:38:99:
53:65:91:1c:c5:e1:71:37:c6:f3:dc:50:eb:75:90:5e:46:b7:
b9:89:bf:2e:62:3b:5a:bb:b2:d4:50:4d:1e:1b:87:54:d9:c1:
c4:bf:0d:16:31:bd:a2:d3:ef:c0:87:d4:c7:6b:8e:89:7e:24:
d7:71:e5:7e:7a:e5:b1:b4:50:41:a7:bf:01:cd:c3:5f:fd:89:
2f:9d:25:a2:3a:25:fa:8e:a9:b7:6a:99:03:61:e9:3f:90:7c:
10:75:f9:e9:6b:e6:07:6a:a7:17:ba:c7:bc:2b:25:68:b7:60:
69:4f:d1:cd:f3:09:72:3a:c2:db:63:0a:d1:d5:08:46:a2:25:
24:ad:06:49:fb:fa:66:96:40:57:62:b0:9b:80:47:ee:6e:1f:
09:f8:ec:a9:1c:ea:e5:94:b1:28:04:5b:e0:02:d8:a2:2f:d8:
5c:65:d8:e2:fa:4e:3d:6a:32:da:1b:1c:3e:20:8e:ab:09:bd:
e2:02:a1:ac:2f:da:76:3e:de:45:30:5b:4f:9a:f3:5e:05:4f:
91:a8:d9:31:84:bd:d1:0f:90:ef:67:7e:7c:b2:ed:60:f0:66:
e2:b2:36:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:22:17 2025 by rpki-client