Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier: juOVnCiOuuXAdBksBHndM65OTfhOqplJAPrWZez+gL8=
Subject key identifier: DC:06:06:C5:EB:51:19:D4:2B:68:49:A6:5F:56:0E:EE:61:47:C5:5D
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 019A228A1C3FAF4C0035EAD2D2400B9F0E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 22:01:07 +0000
Manifest this update: Sun 26 Oct 2025 22:01:07 +0000
Manifest next update: Mon 27 Oct 2025 22:01:07 +0000
Files and hashes: 1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: 6V0vEMV8MXGOdjyx7cokiyR3VmP6+VFZHLWYeYO1RkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:1c:3f:af:4c:00:35:ea:d2:d2:40:0b:9f:0e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Oct 26 22:01:07 2025 GMT
Not After : Oct 27 22:01:07 2025 GMT
Subject: CN=dc0606c5eb5119d42b6849a65f560eee6147c55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:32:ff:90:d6:cf:10:da:a6:c5:91:37:07:
87:6d:d6:9c:22:77:46:09:b9:2d:cc:e2:13:7d:03:
ac:57:57:f2:9d:72:a1:d5:7a:c2:85:dc:62:3b:ce:
eb:a1:26:f0:90:d2:08:46:21:e3:d6:5d:76:77:2b:
2d:00:81:7e:78:24:bb:ea:b8:31:8c:5c:ea:64:b4:
e1:59:e2:e2:af:8e:eb:59:64:59:a8:11:55:d3:3c:
09:e8:d7:c3:e4:08:65:08:5b:10:b6:62:bf:78:47:
de:85:fe:50:6d:ca:c3:29:9e:5d:bf:c2:c1:41:22:
0b:27:8e:b3:c9:8a:01:9b:74:87:15:95:a3:9c:60:
5d:0d:92:94:40:9c:66:57:0a:a3:6d:c5:3e:f4:bd:
e7:f1:c2:99:af:35:6f:d9:26:ae:a1:a7:62:a2:ef:
e2:62:bb:5f:08:bd:fd:89:02:dc:22:9a:74:5b:ce:
dd:a2:b4:f9:d1:ae:57:f7:60:2f:dd:6c:ea:ff:96:
41:56:24:f1:c8:b8:15:18:0e:19:33:a3:81:45:eb:
4e:79:54:bc:ac:cc:98:70:90:d3:e6:12:68:57:b0:
42:b7:2a:16:6e:c9:a2:eb:29:9f:c3:36:e1:49:b9:
4d:08:68:18:b1:e0:84:e7:a0:80:b7:83:e8:4e:c8:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:06:C5:EB:51:19:D4:2B:68:49:A6:5F:56:0E:EE:61:47:C5:5D
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:58:e3:2e:2a:d9:5f:66:56:5f:b4:64:77:2b:df:cc:b5:f8:
ac:3d:c3:59:ea:cc:bf:09:a7:2e:c6:e5:aa:3b:54:42:ca:dc:
99:86:9f:27:ef:df:dd:68:c7:14:b2:4b:1e:0e:c0:e5:3a:30:
dd:40:e2:57:1f:99:e6:bf:cf:6a:d9:2c:97:ac:4f:30:5f:d7:
8c:25:45:2c:c8:63:0f:46:2f:f4:5f:bb:aa:53:2e:65:cc:b6:
9b:20:64:69:4f:8d:80:ad:0e:28:22:f0:ca:0b:02:a7:db:f2:
c0:a1:bb:cd:6c:83:27:97:aa:5a:ca:61:a2:5c:cf:d2:20:d4:
7e:6f:36:3d:0c:5e:64:80:8f:a9:0c:6f:50:c1:b6:22:e1:5d:
65:23:7b:8d:29:4b:4c:31:f5:81:1b:0c:b9:c5:7d:ce:92:25:
0e:92:25:b7:03:92:6c:ca:93:72:4a:78:53:ed:f9:a0:cd:35:
ec:02:64:ea:73:11:da:29:88:07:f3:7d:d3:a4:34:6c:5b:9f:
63:ce:85:5e:32:33:29:19:4f:f1:cf:0e:05:9e:c8:95:4b:18:
71:9c:4f:69:a2:3a:f2:0d:3c:19:40:32:8e:54:5e:1a:b4:a2:
bb:57:45:3f:fe:74:b2:91:fa:8e:4e:41:13:04:3f:b8:47:59:
b6:05:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:22:44 2025 by rpki-client