Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: 8NrMnA4c6xl+c54JH/lQ3SmdGnl520djuqbB1tDTay8=
Subject key identifier: 16:D1:59:84:09:7C:2C:E3:CE:61:D4:3B:D6:EA:5B:E3:6B:4C:94:49
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019A258A5636B1B5EECBC40D132C324EBAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 12:00:14 +0000
Manifest this update: Mon 27 Oct 2025 12:00:14 +0000
Manifest next update: Tue 28 Oct 2025 12:00:14 +0000
Files and hashes: 1: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: pb6fPfAA88cTzysad2Qaw303Cis9w3q2SEkkn75MfmA=)
2: qHh2dMf6gzsBLZi2QJoOFRMxXUE.roa (hash: +vCZjhtO1NUwTGmpJoWATWE7GuZBiydhqPS4mtxNcUM=)
3: xEEfHzO6g6rZeT9FwkUuiWjw_Xw.roa (hash: 0+Wkhje+So8WuPHD5PcbqywDfHJV+b9Sf51efUGfd24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:56:36:b1:b5:ee:cb:c4:0d:13:2c:32:4e:ba:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Oct 27 12:00:14 2025 GMT
Not After : Oct 28 12:00:14 2025 GMT
Subject: CN=16d15984097c2ce3ce61d43bd6ea5be36b4c9449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:25:c3:20:16:b5:b5:80:bf:07:e5:93:0d:
6d:2d:83:bc:28:2f:5d:8e:8c:60:1b:e3:05:cf:4b:
51:fb:fe:c5:87:ec:99:7b:33:e3:4c:9a:c7:7a:67:
22:19:7c:d8:50:3d:80:66:93:d2:96:64:42:de:89:
7c:92:21:e7:e5:cf:4f:bc:f5:8b:76:13:0a:6d:7c:
9e:6c:a6:c6:c8:78:8b:db:27:21:01:3d:8e:57:77:
66:04:e4:5e:03:c8:b9:4a:5d:dc:5d:1c:f6:a7:60:
c5:6e:c0:32:5d:4a:35:91:fa:d6:bf:ab:24:3d:58:
bd:da:7a:a3:c7:6f:22:d2:dd:dc:4e:d8:b4:ea:79:
2f:bd:73:fd:ba:d0:18:4d:e7:20:79:aa:a0:3e:25:
86:fc:19:99:3f:10:c4:24:1f:84:00:c7:0f:fb:f2:
b4:5a:fd:75:f7:ee:bd:23:b5:19:7b:0a:b2:6f:0a:
29:5f:56:f0:ef:11:77:25:84:28:60:5f:54:50:3f:
e0:78:15:16:5d:51:d7:37:6a:f4:b9:0f:af:fc:11:
6c:77:c8:a5:26:c6:8e:55:a1:c9:41:7c:ff:cb:c2:
e7:5e:e0:73:88:e1:64:01:d1:7b:88:8b:6a:47:a6:
d1:ab:dc:ff:de:e4:11:12:cf:d2:74:5f:e0:0a:61:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D1:59:84:09:7C:2C:E3:CE:61:D4:3B:D6:EA:5B:E3:6B:4C:94:49
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:39:03:c7:59:b7:ed:59:7e:bc:57:2e:d7:38:2f:56:ab:ea:
2e:16:4b:29:e2:ed:ff:6c:f9:46:c3:00:59:a5:cc:21:5a:9d:
94:22:f6:4a:b5:53:00:66:fb:1f:ce:67:43:c7:6d:cb:f2:03:
79:53:8e:71:00:e4:c5:4f:f7:12:96:52:52:69:fa:4f:71:33:
be:a6:20:76:4d:33:af:81:24:8c:cd:7b:46:80:5d:f3:5f:71:
8f:7c:e9:01:49:9c:b6:e3:28:2f:eb:54:6a:a0:31:a4:18:c8:
23:ba:0f:66:bf:3f:6d:e4:40:e1:ed:a3:5f:e1:9b:b0:bf:a2:
1d:7b:99:a5:de:f5:4f:d5:59:41:14:b9:33:0a:b0:de:ed:5a:
0b:bf:87:9e:bc:de:21:6d:1b:cf:b4:48:89:8e:f8:70:6c:95:
c8:34:ec:77:a6:73:9f:a5:fe:dd:2e:49:f9:a5:da:77:7b:58:
ff:1d:8a:78:1f:f6:f3:83:a2:5f:81:75:13:9c:50:fc:df:7d:
54:15:7a:9e:39:6f:7c:a0:47:36:80:46:45:92:5b:b5:97:10:
10:e0:03:fa:f5:02:13:a8:52:9e:19:c7:93:bb:be:b8:3e:0e:
89:df:31:6b:10:ed:48:ee:e1:f8:ec:6d:86:c2:c2:ae:f0:56:
0b:b9:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:37:46 2025 by rpki-client