Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: kav2NhKnjSSBfAtkHLe7NEBRQnS1WOlVvFwdcbx4mC4=
Subject key identifier: 88:12:27:6C:80:B7:A9:20:5C:CB:4A:38:A8:F7:43:56:60:72:CB:AE
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 019A0034FEBE229C954DD0E369BDFF01151C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 16EE
Signing time: Mon 20 Oct 2025 06:01:04 +0000
Manifest this update: Mon 20 Oct 2025 06:01:04 +0000
Manifest next update: Tue 21 Oct 2025 06:01:04 +0000
Files and hashes: 1: NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa (hash: TKAQNNpSaY4TAI1TdJLCf/Ljbi9ccCQ85au2gXamNHA=)
2: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: kzMdFf0MOOtVg1sWXP/edj/mBS/YP1zLLB81Q1/rXvk=)
3: a-LdFc8kFHmTn2Z0Vu6JHLUtEY4.roa (hash: zTR8ty0nmJzU13XE2BvXWY2tGZYklQKm1YYaB327LpQ=)
4: el7j1J3bDKT27ieG83FPrQYbZJc.roa (hash: T0KRecSjSVtSKj2we6RG/6efDR4xy2f/rpalGX+ig90=)
5: od_NfkWMgnzZGkwU7wJ-RgWOeM4.roa (hash: OZscsQ8cir5jkIZyLY0FUkHozKmgjWJmCvTcbzJzQOg=)
6: tinXUk407KICO2MXsH1p4TReydw.roa (hash: linbqgFB5KTsziPayiqOokYdnyWHwGO4kAHLVkJgE3k=)
7: wxZtKKgCuX_XkT9wjC8PBIL2aLI.roa (hash: tIV+HptpEfjZ8DjgmHhOJU8c4e/cERhkwqc7ixWl0UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:34:fe:be:22:9c:95:4d:d0:e3:69:bd:ff:01:15:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Oct 20 06:01:04 2025 GMT
Not After : Oct 21 06:01:04 2025 GMT
Subject: CN=8812276c80b7a9205ccb4a38a8f743566072cbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:49:91:6b:c0:16:48:bd:b0:db:08:5e:53:
ea:9c:59:12:6f:69:5c:bc:8c:b2:72:a3:08:08:75:
e2:8a:93:93:f2:2f:90:4f:12:e0:cf:c2:b3:0d:29:
df:c5:8a:01:86:07:5e:6f:ac:bd:8e:4d:e2:4d:95:
db:d0:13:69:12:99:50:88:22:c2:f8:31:e6:2e:82:
03:53:c3:a6:26:58:4a:2f:82:36:cb:c2:83:e0:37:
fa:47:2f:9f:c9:c5:0e:e9:5e:02:51:4a:e9:59:f3:
ed:d9:8c:1d:43:da:78:bd:9f:69:c0:f5:a1:a1:b0:
7a:93:8f:5f:20:71:d4:ee:0e:12:0d:09:8b:a1:04:
19:9b:24:43:c2:e7:4a:62:c6:2f:0e:f6:1d:2c:43:
21:1c:30:a0:98:3a:68:39:35:ee:0d:f8:5c:c9:9a:
bf:cb:ad:34:3e:47:87:58:ec:a5:fa:b7:b8:b9:3f:
08:fe:35:3f:e8:be:75:d0:79:47:c5:26:bf:ab:3c:
c9:fa:89:0d:1f:fd:45:c2:f5:22:5b:bf:8c:85:7b:
a8:05:6e:1c:f4:da:4d:83:f9:d2:f9:4f:ad:e8:c5:
40:66:b6:73:4c:9e:b4:a2:b0:6a:56:3e:fb:0b:79:
44:25:4f:4f:2d:73:7a:66:c2:4f:70:54:bd:55:0a:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:12:27:6C:80:B7:A9:20:5C:CB:4A:38:A8:F7:43:56:60:72:CB:AE
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9c:d0:70:b1:eb:b4:12:3e:70:e7:53:4e:91:39:95:bf:8f:
9c:d4:45:8a:25:e3:fe:73:36:c2:f5:ca:05:55:64:b1:8d:f8:
9a:80:96:4b:54:51:d9:0c:2e:0c:81:a7:44:a7:1f:1c:53:49:
30:e7:9c:01:47:4b:d3:63:6e:64:85:f6:20:03:96:b0:a4:a5:
be:62:75:88:9b:3a:f9:8c:e7:c8:26:e1:a9:d3:ef:ae:77:4a:
66:e2:87:49:52:8a:44:c8:f1:5d:eb:b4:4b:32:0f:22:a3:02:
de:8f:57:15:0b:e2:0d:69:ac:db:85:5d:48:5b:dc:ae:87:06:
16:a7:d2:06:46:a7:5f:01:08:d8:2b:56:6f:e6:a7:a6:1b:a1:
ed:3a:a3:d1:12:12:e3:5b:69:cb:19:3f:cb:57:f5:27:e4:94:
2f:bb:e6:fa:f4:8d:72:70:14:66:fa:97:a6:7d:bc:28:0a:95:
1a:7f:7e:7a:ae:8e:13:41:9e:b4:5c:c0:aa:79:fd:3c:7e:5d:
17:72:bc:9c:8a:28:1b:06:e3:46:98:fb:9a:b7:36:96:24:3e:
7c:6e:2c:08:a8:d7:4b:90:5c:41:85:81:96:19:61:97:bb:ba:
5a:a5:90:a1:2c:59:90:07:b6:34:09:6e:9e:e2:cc:70:2c:08:
fe:90:a9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:47 2025 by rpki-client