Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File: YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier: /VVBUwHV21b5BGfYa2oMu4gQm1YOj0rTK2jpLZNiXp8=
Subject key identifier: 09:A7:96:BB:BA:ED:8D:5B:EF:DF:BC:02:DC:D8:99:1D:83:53:41:5A
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 019A05C8B260B6923AA4ED31CA2AD81B4113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number: 16FB
Signing time: Tue 21 Oct 2025 08:00:30 +0000
Manifest this update: Tue 21 Oct 2025 08:00:30 +0000
Manifest next update: Wed 22 Oct 2025 08:00:30 +0000
Files and hashes: 1: 9nL5_P24JLKYMiakkVMo6TlgCug.roa (hash: fWkZp6QpsCRR5QNNT0hz/+58v4Qis8o4l0c2LUn7tD0=)
2: Hs5OpoVTxSJfvS3erDXXhGQXJSE.roa (hash: ETk/+dQR/qhcGpGtYBL6fSkfntPwX1tHoXTuoqNreRs=)
3: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: ZDpungttH0pOANEWPQnhxrLCrVldRJaYTSRp+19VDqY=)
4: cRbQbZI4caSihSJdxBwTOdI7jHI.roa (hash: l064fVVkmmooFHUiz4jiDmBf7OxJUiTNePDan7lSIBE=)
5: ct4uh4Dvn38kuKb2J9OedNnfBrQ.roa (hash: nZxVoJ4prQOuIIhd7SEgU19Z8RQI5zRlz6rYzsDEzRI=)
6: u7siAwXzbgFTEGp6PKjrdqf7Z4A.roa (hash: vJGRmjZ9RvsYFu3lwU4eezlqzVwLgmj9/3K2yZjY284=)
7: y5D4TaXJLkrfa4Of0NlhAIHZfQY.roa (hash: IeCyxZUbWUBk/m+unrT9oFimJ4vs3IvgUDAcRXAQ5dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:b2:60:b6:92:3a:a4:ed:31:ca:2a:d8:1b:41:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Oct 21 08:00:30 2025 GMT
Not After : Oct 22 08:00:30 2025 GMT
Subject: CN=09a796bbbaed8d5befdfbc02dcd8991d8353415a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:b8:3a:0b:1d:d4:ad:8c:55:7f:5e:38:1d:
60:1a:39:a9:4c:40:4c:87:34:91:88:5f:7f:21:0e:
e7:cd:0d:7d:12:8b:4f:18:21:12:cf:2b:cf:55:9f:
0d:f4:87:23:34:5e:7a:19:fb:2e:8d:31:33:36:08:
e0:0e:e4:07:41:21:68:ac:47:b5:8c:c0:c5:1d:11:
72:92:bd:2c:2f:25:76:cb:28:b6:c7:3f:b1:14:04:
44:02:67:f9:bb:da:10:d1:4b:b3:99:c3:ae:8f:31:
45:98:bc:27:b6:b3:51:99:9c:eb:25:8b:9c:94:ec:
1a:78:3f:43:96:d3:a7:1e:bb:e7:c8:61:aa:f5:ee:
a9:23:ca:69:74:d1:f7:2d:eb:5c:bb:46:5d:cc:7b:
c1:da:68:b1:3a:e2:a9:32:28:46:fa:90:bb:15:60:
fe:18:cf:09:15:34:63:19:c2:80:5b:55:3e:4c:23:
f5:45:35:f6:a5:6c:bb:06:d0:e7:5d:52:9c:fd:fd:
b5:d6:da:c9:40:77:e6:61:48:78:0e:0b:d1:2d:17:
12:95:6e:32:ff:6d:83:30:f3:14:2a:c5:04:22:04:
61:85:26:37:46:64:26:0e:5e:51:6a:c8:30:36:dc:
71:f8:a9:73:51:b4:ad:13:f5:88:56:ae:c9:c4:f5:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A7:96:BB:BA:ED:8D:5B:EF:DF:BC:02:DC:D8:99:1D:83:53:41:5A
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d4:ac:f8:0b:e4:bf:12:4c:56:31:f8:0d:d1:fe:ab:88:5c:
1e:73:47:15:31:88:89:63:30:1a:75:21:b7:90:5e:93:bf:88:
cb:3a:d4:73:83:a5:95:d7:3e:1f:0d:c0:55:d4:92:10:f8:ed:
b2:b2:37:69:bd:9b:43:90:28:2c:dc:5d:41:1d:e4:d1:a8:ef:
16:a3:f8:9f:65:1b:a3:e4:53:b4:42:3e:63:3e:65:f0:37:cd:
2c:93:b6:38:22:b0:b4:54:48:33:6c:3d:9f:a1:35:d6:f0:43:
a5:ec:43:54:ff:e3:a7:e0:07:a7:e4:bd:fc:6c:c4:6a:33:eb:
12:6d:6a:be:c3:d0:45:32:1a:75:1b:d3:1b:4b:8e:a0:00:99:
41:32:2d:8d:3c:5a:28:14:58:49:f6:79:9e:37:fe:f2:1c:54:
94:50:a7:eb:d2:42:96:bd:c5:cc:0b:65:4f:2a:5d:2e:cc:55:
de:1c:a4:eb:0c:54:5c:d7:e9:11:e6:a6:22:ab:71:99:e6:18:
fc:a7:ca:9a:60:cd:3f:4a:fa:ff:56:78:89:95:fa:5f:e2:b9:
63:3a:8b:b2:45:31:06:b5:91:59:30:9b:6b:2a:51:93:37:79:
6e:d4:e8:8a:54:d6:00:0e:3d:f3:ba:53:5a:09:82:ec:a1:d1:
03:05:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:40:27 2025 by rpki-client