Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File: ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier: Dvkk43hl+8615UOznBLB697kP3cnLp7kjVpagfwkRgs=
Subject key identifier: 26:D7:D0:43:57:22:41:AE:DE:15:08:CA:F6:74:C1:8E:34:BA:F7:C1
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer: /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial: 0199FB45EB4823EBCBA52F60AA7F20BF5520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:27 +0000
Manifest this update: Sun 19 Oct 2025 07:01:27 +0000
Manifest next update: Mon 20 Oct 2025 07:01:27 +0000
Files and hashes: 1: NA5mgzoDK6jbbKh48XeliWtbDYM.roa (hash: 9nIV3wU01lTdftDhSQVjEb+D2h3DXok24aEDQGNAM3o=)
2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: lBODjhixlo8dFISylf83TkmhNQPuI3ASavPk2dmumXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:eb:48:23:eb:cb:a5:2f:60:aa:7f:20:bf:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Validity
Not Before: Oct 19 07:01:27 2025 GMT
Not After : Oct 20 07:01:27 2025 GMT
Subject: CN=26d7d043572241aede1508caf674c18e34baf7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:51:ce:5f:bb:e2:47:b6:8a:0d:2b:1c:d0:
b8:e4:35:c1:f9:1c:97:52:e5:fa:33:ae:aa:fc:4d:
0e:c4:66:9b:3d:5a:b1:8e:6d:7f:50:54:22:4e:93:
39:80:aa:a1:c3:b2:c1:92:a2:31:a3:dc:fa:68:dd:
e0:2d:1b:89:9a:85:f9:93:95:c8:61:db:d1:4e:7c:
d6:6d:d7:77:8b:90:18:07:ac:25:c0:73:e2:cd:f5:
04:ce:cd:71:11:c4:95:39:6a:bc:ae:f0:90:8f:74:
4e:84:8b:d8:14:9a:e4:1d:a0:4b:06:09:ab:ea:43:
12:32:93:a4:93:16:1e:5f:fc:43:15:7f:a8:98:c1:
2a:f1:29:28:c0:5f:94:d3:33:1d:49:f7:35:3e:a0:
20:1f:98:fd:0b:be:f1:51:9a:85:4b:97:80:02:57:
26:0b:65:fb:c2:e2:d3:73:cc:f6:ce:be:39:55:ba:
27:93:a1:10:be:a1:f0:41:f8:6f:77:f4:89:cb:d1:
22:7d:38:72:61:52:0e:cd:e7:27:c6:72:8a:ef:a6:
a1:cc:a8:2f:03:cc:97:13:ea:14:d9:7c:98:7e:5f:
60:0e:64:b2:82:95:01:73:f6:0b:d1:5e:84:23:d8:
8e:bf:b1:df:79:8a:02:75:38:f2:3d:94:2f:90:bf:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D7:D0:43:57:22:41:AE:DE:15:08:CA:F6:74:C1:8E:34:BA:F7:C1
X509v3 Authority Key Identifier:
keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:04:a3:fd:88:fd:35:79:f1:b4:c7:f5:5b:aa:47:18:6b:20:
9c:0d:c9:6e:47:ff:99:81:87:b8:16:f4:ae:d6:94:1a:c8:94:
7c:30:21:a9:4f:a4:68:88:8f:53:70:16:fd:b7:8b:13:ee:8c:
e8:e8:98:86:ff:46:91:14:e8:19:79:ed:80:a5:c9:5d:6b:7b:
8b:2a:e7:12:3c:8a:78:6d:66:d8:d7:51:1d:8c:f7:88:96:c3:
64:b1:2c:f2:1b:48:e5:b5:35:73:cf:0a:10:1a:4c:b2:5f:ab:
f6:ab:8f:13:4e:7c:2b:66:3c:2e:8d:9b:67:6c:49:01:a7:d1:
b8:4e:f0:46:91:2d:de:36:59:8d:b2:c2:a0:8e:43:54:4c:58:
a5:57:06:15:60:5c:a5:1b:1a:93:e8:c7:22:c1:8c:c0:bd:28:
be:ea:dd:1c:59:14:47:ca:a0:5f:bf:42:4c:c5:3d:27:f9:81:
f6:20:63:e7:bc:d1:3b:ee:2d:e4:44:e2:5d:b5:e9:5d:2f:f8:
b5:9b:25:2e:c7:c4:7e:d3:18:b3:c6:2b:ea:17:68:5f:59:1d:
2e:e6:d1:82:7b:64:dd:6f:5e:4d:15:52:e5:a7:b0:d1:0e:4a:
a2:e2:3f:c5:9a:19:21:f1:e1:c0:84:27:5e:fd:60:53:d5:13:
88:36:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:09 2025 by rpki-client