Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: DOlNqsl3g2mISrbUR0CG7rT+dtKjxywM+N5e/BP3nqk=
Subject key identifier: 70:21:8D:73:73:E2:3A:4A:E6:36:1B:14:F9:9E:4E:D9:81:65:37:E2
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 019A4D73D7616DABBBF39443E2816B492913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 15E1
Signing time: Tue 04 Nov 2025 06:00:28 +0000
Manifest this update: Tue 04 Nov 2025 06:00:28 +0000
Manifest next update: Wed 05 Nov 2025 06:00:28 +0000
Files and hashes: 1: 0TtFz6wVP0jqaQNw01V55drmS3k.roa (hash: TMVD5m2P0IJi74IF8JJhCFdWfhDxP8MQCO9QQGNNZr4=)
2: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: uF5BeLBQktZeukLaar1AM//JuuINPtEVmkamK7EeU5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d7:61:6d:ab:bb:f3:94:43:e2:81:6b:49:29:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Nov 4 06:00:28 2025 GMT
Not After : Nov 5 06:00:28 2025 GMT
Subject: CN=70218d7373e23a4ae6361b14f99e4ed9816537e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:6e:2f:b2:75:da:70:b3:0e:87:4c:0c:d9:
75:af:59:80:44:2a:a5:9c:5d:88:47:5f:6f:0a:58:
5d:c4:64:7c:7b:48:04:64:da:11:44:b1:46:f2:c9:
59:ad:7c:39:50:9e:53:3d:83:e1:3e:b0:86:7d:3e:
f0:6c:83:a2:4a:4f:33:b9:7b:dc:58:06:06:46:e6:
a6:d5:47:d9:36:61:66:17:cc:58:d7:ce:83:90:16:
9e:95:a9:2f:1b:6c:79:ac:8d:26:3b:ec:f9:cc:02:
ef:83:4b:18:c3:b7:21:95:32:93:fd:d6:fa:c8:a5:
27:76:96:c7:52:a6:a0:41:ce:e9:7b:30:7e:39:28:
f9:36:03:be:db:dd:7a:3c:24:b2:02:e6:bc:5b:6e:
3c:43:e0:e4:1e:fe:1f:5e:38:e4:79:c9:ae:fa:3d:
87:ea:22:f0:6d:9d:5e:4a:f9:38:67:cb:33:99:0a:
20:88:71:56:ad:dd:1e:59:00:8c:d8:c6:91:19:45:
69:24:4b:b7:cc:5b:b2:bf:14:d2:9f:17:46:b7:a6:
fd:40:02:8b:5d:5d:bc:05:bf:a9:4e:ce:57:77:68:
50:2f:13:88:3b:96:19:66:b6:03:d6:0f:ba:f0:0d:
f1:eb:ca:4a:28:65:bd:fa:26:f4:5a:b6:4d:35:81:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:8D:73:73:E2:3A:4A:E6:36:1B:14:F9:9E:4E:D9:81:65:37:E2
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e5:95:d4:2e:96:8a:79:3d:b8:7b:0f:c9:11:f3:48:40:f6:
2f:5d:5b:aa:b1:c8:5e:f0:e0:95:05:af:c7:32:6e:08:4e:7e:
1f:66:5e:3c:7c:d4:58:4d:98:67:80:c8:bc:bf:d4:78:02:e7:
d0:23:b2:93:47:d1:ea:d0:0b:0a:20:1c:c0:df:e6:ea:27:b3:
52:ab:61:68:d9:88:91:cc:21:e8:12:23:33:35:2e:ed:b5:39:
1d:a6:3c:1e:28:fe:b6:0b:ad:5f:79:97:f5:47:0a:ba:b5:5c:
a1:13:82:73:37:5b:98:e1:62:b2:25:d5:f4:21:88:20:ee:5a:
17:ef:f9:ad:1c:09:0d:1f:53:ab:f9:04:d2:eb:f9:58:cc:7f:
60:8b:8d:92:ba:4d:7c:2d:27:7c:d5:7b:e7:55:8a:5a:56:51:
0f:e6:5e:c8:1a:39:69:8b:0e:00:94:ea:1c:74:6b:3a:18:39:
70:26:b7:4c:17:97:92:0a:70:25:6e:84:f7:f9:a1:78:22:e3:
b5:63:2d:7d:22:6d:62:4e:f6:67:65:29:7d:91:c4:8e:e0:8a:
a2:f1:dc:ce:d7:56:76:01:50:55:b5:17:d1:db:aa:38:48:b3:
86:59:f1:1f:0b:66:0f:ac:7e:df:db:23:f8:d2:b1:02:74:49:
3f:64:76:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:14 2025 by rpki-client