
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier: zK7lxNdUBF2QXz2IqemhDIXZQrFbLHNmSR5Y+if62h8=
Subject key identifier: A2:DB:31:30:2D:02:C4:88:40:80:0D:66:12:B9:E9:6C:CE:25:29:E7
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 01984F31A05935895DD032FD2DE729427A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number: 1603
Signing time: Mon 28 Jul 2025 04:01:48 +0000
Manifest this update: Mon 28 Jul 2025 04:01:48 +0000
Manifest next update: Tue 29 Jul 2025 04:01:48 +0000
Files and hashes: 1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: qe0eIG8tOSGHIgwmN4oFvROAGNM4BrEG/iSXB4oJNjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:31:a0:59:35:89:5d:d0:32:fd:2d:e7:29:42:7a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Jul 28 04:01:48 2025 GMT
Not After : Jul 29 04:01:48 2025 GMT
Subject: CN=a2db31302d02c48840800d6612b9e96cce2529e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:91:19:55:ad:a2:63:89:be:63:ca:c6:f9:
f4:6e:aa:c7:71:3f:75:f9:63:a6:4a:b6:7b:a7:f1:
0e:22:03:62:b7:9e:4d:ba:d8:79:34:51:71:96:5e:
1e:b1:d4:a2:e6:f6:9c:ea:99:f8:65:ef:df:9b:1b:
12:a8:81:ab:2f:be:a7:4f:21:79:40:84:7e:6b:b7:
15:9d:a4:58:76:fd:6f:26:03:4d:f8:e5:37:d2:bd:
18:dc:1e:31:1b:37:8c:1a:79:21:d0:fa:fd:9a:dd:
0f:e6:74:e2:3e:64:17:bc:a5:76:1e:73:f5:1a:f4:
e7:88:2a:32:85:44:ae:c9:a3:fb:78:dc:04:52:4a:
03:cc:a1:2e:57:48:5e:4b:2c:01:47:c2:b4:db:4c:
cb:82:1b:73:19:a2:1a:87:59:13:4d:34:ac:30:df:
42:cf:54:b2:8b:6f:c9:ab:b1:ca:80:72:64:84:73:
8f:54:4b:4d:63:ff:8e:de:a5:d9:ce:ab:53:78:b3:
21:0c:99:ef:bf:cf:32:b7:70:00:7d:57:8a:42:8c:
a0:c7:dc:8c:5b:5e:9f:93:37:4c:d4:79:74:b6:40:
da:a5:8b:5d:a6:26:47:0d:b8:e8:e1:0d:cf:82:c0:
3b:b0:b5:d2:3c:8f:e9:4c:62:7b:42:c4:40:c8:db:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:31:30:2D:02:C4:88:40:80:0D:66:12:B9:E9:6C:CE:25:29:E7
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:30:ba:0c:4f:ff:4b:18:2c:84:10:3e:03:c3:00:1e:e5:68:
fd:fc:47:fd:2e:a4:0d:75:a0:12:fa:a1:c5:4c:a4:df:96:a9:
94:7e:e8:e1:9a:b8:1f:80:94:b6:69:2c:cd:6e:a4:d8:1f:95:
75:69:eb:fd:3c:d4:4c:b7:aa:6a:3c:3a:a9:92:a0:ef:e9:55:
28:04:d0:8c:22:0a:91:63:44:50:7d:b4:c5:78:54:c9:0d:df:
19:3d:ed:26:53:f5:b2:10:11:8e:97:a9:3a:06:71:9c:2e:b2:
b0:b6:d8:a2:7f:c9:a5:59:61:39:fe:1e:e5:02:70:92:68:9d:
67:fd:79:54:96:06:20:62:44:c5:7f:b7:b0:70:c3:b8:80:54:
25:ef:eb:78:5e:33:ad:77:65:dc:0b:b9:71:79:9b:d8:97:9b:
ba:59:ba:0a:c9:25:00:1e:99:a4:90:53:e4:fb:4b:94:d4:62:
ef:d9:b7:37:05:bb:25:b3:39:2b:5c:d1:db:45:17:f5:86:a5:
75:3b:04:b5:bd:62:f1:7f:e3:98:81:31:0d:90:c8:c7:c9:d0:
e1:1b:f7:6c:16:44:a0:2a:ba:db:79:d0:75:f9:f2:b0:23:c3:
b1:2f:73:8b:23:a4:be:9f:2d:49:a8:36:ca:6f:1f:43:7f:9b:
59:23:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:07:46 2025 by rpki-client