Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File: yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier: 9UMwTeJnmPlByR1ls95OlhyfLqXkjixejDs+sPd70u8=
Subject key identifier: 9A:25:5C:E0:6E:89:74:92:68:20:D5:66:FB:EF:68:F1:F3:12:44:F5
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 019A0AB820608C1EF5EB2180D460DC070E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number: 16F3
Signing time: Wed 22 Oct 2025 07:00:30 +0000
Manifest this update: Wed 22 Oct 2025 07:00:30 +0000
Manifest next update: Thu 23 Oct 2025 07:00:30 +0000
Files and hashes: 1: 2E9kWgPtYN0WAc6RCe6lEkD5GGc.roa (hash: WZKZ1nRj/095D4tmKUIjIrN2QssyrW7JaucRn5aUuQo=)
2: XBS2bilHl7hAUnhaEuY8p5cjE4c.roa (hash: GRT8VC70aJ9wVqj8F9C5XozSwpU4dQPqDcpv9YGwfrE=)
3: e8UexKJSMZ7skwYQtvgWIbq4MXE.roa (hash: z8UU85PauzAWCWu0c4/whBUMLEZehA442FaYRyi9WiQ=)
4: iet7MjdD3tNr9H3e8mAcOix2TP8.roa (hash: ezXufe6PAorgReJqNNieKsjaS0PdS8wnpJWtjRxO3X4=)
5: tzsxxq3WmCusza_r9Nk7AWxH7Jk.roa (hash: goqPhfATTY7UUdH4nZlMzNdPQpsyFFgFHBxyoIIk6WA=)
6: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: HSo7srjBNj8U20aYil/TBLN+hzIOuuTKcNb7ENr6ogE=)
7: zSyEja7s6-FcC2A4cfsL-HNjtEE.roa (hash: 2GY8yor4l2LD8bv0Z/SVmO/KolDg2zRMpa7nMwkf0ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:b8:20:60:8c:1e:f5:eb:21:80:d4:60:dc:07:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Oct 22 07:00:30 2025 GMT
Not After : Oct 23 07:00:30 2025 GMT
Subject: CN=9a255ce06e8974926820d566fbef68f1f31244f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:fc:d3:a9:17:16:26:12:c0:32:f6:9c:39:
91:f4:c6:c5:aa:7a:cd:e1:9b:e8:f1:5d:9d:73:bb:
0b:7f:cb:e6:bc:0d:d9:7b:89:30:ea:b6:82:fb:67:
6f:54:dd:2c:75:53:29:58:59:ce:bb:45:be:4a:37:
ed:f6:25:d8:27:25:5a:57:f8:d1:54:d8:74:4e:5c:
14:8d:2c:3f:e7:f7:5d:65:fd:09:95:6d:de:29:5e:
ae:1c:f6:ab:bd:2c:33:82:19:0c:53:d1:07:32:4b:
1e:3c:52:83:b9:3c:0e:cb:e3:86:6a:cf:62:0f:15:
0b:cf:e4:11:cd:bd:0d:b1:95:e3:91:88:8e:75:0d:
ea:0c:42:ff:d4:ae:66:37:55:55:38:5f:ad:f0:b9:
71:a6:31:20:8e:6c:21:a2:42:ac:26:ac:bb:ba:55:
a4:e8:43:d2:7e:d0:35:a4:04:ec:cf:cf:15:dd:fe:
22:a7:c8:5a:b4:36:ae:ff:0e:ef:26:c6:ec:29:74:
d7:b3:ce:04:e8:f7:7a:d4:18:f8:6d:8f:98:dd:e4:
fe:ce:59:d2:86:87:d9:1d:9b:f7:b5:7c:ff:a0:cb:
04:e8:03:dd:37:9f:fe:a3:95:21:a8:50:70:33:be:
79:4e:12:34:27:4a:57:82:70:62:a0:66:da:22:b5:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:25:5C:E0:6E:89:74:92:68:20:D5:66:FB:EF:68:F1:F3:12:44:F5
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3a:25:73:cf:b8:05:6b:c3:ff:1b:cb:91:86:6b:d9:43:1c:
91:05:47:74:e4:4d:81:19:ea:a5:46:80:5e:43:14:39:c7:a8:
2b:cb:e5:e1:d3:c1:c9:cd:54:92:20:30:cc:39:a8:be:ef:d4:
ba:df:9e:50:c0:2b:09:9e:49:04:ef:a9:7e:7c:56:3f:87:49:
a1:74:83:23:97:06:a2:2c:6b:af:49:fc:b9:dd:a4:50:c1:7b:
50:27:5a:8e:37:b2:e4:f7:d9:59:1a:34:cc:a6:f3:cb:c9:cb:
53:cf:3d:99:5d:72:37:51:89:04:cc:ec:3e:0f:03:f9:73:89:
f2:fa:cf:03:71:e9:c8:d2:20:1a:19:ec:0f:d3:3a:60:88:80:
ef:67:09:36:2a:6d:5f:53:fb:92:d3:e5:4b:94:5c:2c:60:e3:
3b:b1:e0:40:28:63:45:72:51:a2:e6:0d:70:5b:ee:8a:13:1a:
b9:d0:90:11:73:91:f7:78:a0:e8:9a:e1:fe:cc:24:05:9d:6b:
d9:4f:09:cf:95:b2:6b:d9:de:f9:1f:9f:b3:5f:32:d8:63:6a:
bf:97:68:95:3c:98:43:c4:ad:e1:81:a7:91:89:9e:14:71:8f:
ce:19:ee:36:1f:bd:e1:b0:33:54:26:f6:94:35:dd:72:b5:71:
c6:18:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:14:18 2025 by rpki-client