Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: vb5wIBvM5hB3dIu/KDI5dpi5oWu1ZHsVkN1UAxY/m+I=
Subject key identifier: F9:CC:88:48:7E:D3:35:6F:FC:71:EB:84:38:85:CB:EE:57:AF:C9:B1
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019A21093909C6A1C728FE589BC580E1F996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 15BE
Signing time: Sun 26 Oct 2025 15:00:43 +0000
Manifest this update: Sun 26 Oct 2025 15:00:43 +0000
Manifest next update: Mon 27 Oct 2025 15:00:43 +0000
Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: Avi8Z+vPv+oetoQPkIfh+asiu2c1/IEvTCyKXLnqFk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:39:09:c6:a1:c7:28:fe:58:9b:c5:80:e1:f9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Oct 26 15:00:43 2025 GMT
Not After : Oct 27 15:00:43 2025 GMT
Subject: CN=f9cc88487ed3356ffc71eb843885cbee57afc9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:4b:1c:c1:85:fa:62:21:a3:dd:5b:e5:07:
3f:97:84:93:df:58:2f:a0:e0:ca:d3:4f:e0:62:64:
27:e5:68:1f:d9:83:88:77:0c:53:81:84:9f:54:ce:
84:05:a4:cf:8d:6c:dc:dd:2a:dc:d5:30:8d:9f:63:
56:e4:dd:e5:ac:9c:17:cc:98:b1:ff:e4:63:9d:74:
41:2a:42:bf:1e:af:22:06:9e:7a:aa:75:26:50:e3:
a8:4c:c0:33:01:dc:5b:52:ed:35:00:7c:23:34:ec:
fe:e7:e4:d5:be:cb:b3:35:1e:53:0c:de:8e:39:79:
27:75:7d:70:9c:12:98:36:0d:ea:30:7d:b2:ee:72:
02:22:98:99:bf:f7:12:fc:e3:69:ba:28:f3:73:80:
70:ae:3e:6b:21:22:e0:b7:06:84:73:6a:8d:39:fc:
75:ad:d4:fc:2b:75:58:40:ce:45:53:ad:da:cf:db:
e2:9c:74:22:42:8d:ba:14:d2:40:48:b5:7d:4e:ec:
7d:9a:ea:00:8d:20:ba:09:c3:ac:ca:19:5d:35:d8:
66:32:e9:1b:cc:99:ab:68:bb:07:bd:30:e1:c1:6d:
40:35:2a:97:31:cf:1a:3c:a3:5f:a4:08:0a:f7:6d:
3a:b7:84:e9:d3:23:8d:36:96:16:ec:5a:a9:48:5e:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CC:88:48:7E:D3:35:6F:FC:71:EB:84:38:85:CB:EE:57:AF:C9:B1
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:aa:b3:eb:2f:99:ef:2d:47:54:b2:fe:65:fe:de:3c:56:62:
f8:82:c7:c5:44:4a:ae:58:99:77:66:3b:28:51:35:87:b8:5b:
ac:87:ff:1b:06:7d:3e:e0:d3:4e:b3:c1:a0:2e:94:5a:8f:cf:
0e:71:b3:14:7e:b2:2e:50:d2:4b:d0:6b:47:bc:d1:76:e0:b1:
d9:cc:86:72:37:a8:c7:19:3e:c1:e6:19:a9:f8:e9:51:64:fc:
1e:b8:63:ee:67:ef:0e:06:6a:92:ba:71:77:49:ea:21:d9:9c:
a3:d5:ed:e3:87:fa:01:28:e0:f2:61:b1:22:1d:95:63:54:d6:
d0:be:76:ab:57:00:cc:8e:c5:d5:c5:04:15:87:8e:a6:04:5f:
50:7a:3c:2e:92:6f:c4:68:6d:86:d7:3d:d6:e7:a7:66:00:0b:
1a:1e:23:17:f0:46:3f:a5:69:00:8b:b2:1b:bf:d9:b1:7c:45:
66:e7:98:4c:68:ea:61:d2:61:66:1d:c8:0b:c4:e9:37:91:60:
31:a6:c8:0e:b1:49:be:9a:4a:5a:3d:c9:ba:b4:ae:a8:d4:c3:
2c:85:16:07:b8:7f:71:37:d2:17:a6:38:67:a6:d6:6f:24:7e:
53:50:f1:ea:f4:64:5c:cb:85:8c:ec:b3:4f:2b:c1:5a:42:17:
8a:77:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:43 2025 by rpki-client