Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json)
Hash identifier: /SkV8B2HTFS6wUsDDPHKfVc1r+v20+l1osXn95QYIyM=
Subject key identifier: 7E:31:32:9A:4C:25:1E:75:F9:35:2B:E1:55:16:49:D4:F7:4E:89:82
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 0199FC8F2A146333016A5D66E07045283E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
Manifest number: 16F3
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=)
2: K5NEdUPfsWNlU5OaxDmaJB9uhW8.roa (hash: 7HBZ5dKfBKtNZaeKC9JLdhcxQK1sl2MmzTeySkJRRaA=)
3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: 4Opsgi1Ns/sFCB8iKoHqMc4ijAzy+ZbE1iw3EQ4IaJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2a:14:63:33:01:6a:5d:66:e0:70:45:28:3e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=7e31329a4c251e75f9352be1551649d4f74e8982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:28:89:4c:14:67:fd:2b:19:a7:9d:21:e7:14:
35:a1:51:b3:a8:4f:80:bd:c4:01:c5:c2:73:db:23:
7e:fa:e4:50:5e:a6:93:84:81:cf:38:77:86:56:a8:
49:b1:79:ea:94:62:7e:04:12:8f:57:a1:af:b2:1d:
3b:c9:93:a2:b8:53:c3:7e:48:f5:e5:be:74:ed:5a:
df:ba:9a:b8:06:a7:fe:fc:ea:9c:f9:96:68:59:03:
cd:56:41:d9:f1:f9:6b:6e:aa:79:f8:e6:85:39:6f:
c8:7f:51:98:a6:56:68:bd:f5:15:62:ee:53:50:a8:
ab:33:79:a5:58:c0:11:b6:cf:41:90:e3:e8:11:99:
e0:c8:ac:64:41:b3:3b:ac:5f:7b:4d:80:98:87:9a:
28:0d:63:83:bf:ab:6d:2d:54:95:b5:79:a7:93:a5:
01:63:9f:5c:dd:23:45:b8:34:76:68:87:cb:b8:f1:
ac:b3:ef:fd:fa:da:f1:d7:01:e5:3d:e8:32:bb:37:
51:0f:9c:b1:0f:80:71:c4:97:0f:e6:98:0c:a1:56:
83:8f:e2:c8:0a:cb:7e:ce:5b:23:a0:89:8c:cf:ad:
65:4f:1c:a8:3e:b2:f2:15:a6:a3:48:1e:91:64:08:
9f:43:f0:a9:5e:20:31:8c:4a:45:fc:6b:8b:5b:29:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:32:9A:4C:25:1E:75:F9:35:2B:E1:55:16:49:D4:F7:4E:89:82
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e5:dd:06:f9:5c:7d:40:78:00:7a:60:3f:9d:d2:e2:e2:01:
43:61:af:cb:24:0f:96:94:21:b2:ce:91:ea:79:c5:a0:05:af:
8c:eb:cf:bb:65:fb:30:4c:3b:17:3a:7f:a1:c3:9f:9c:89:cb:
05:9e:b7:a8:76:aa:fc:d4:3d:f2:fd:9e:bd:34:1c:b8:b8:9b:
80:5f:36:ec:a7:68:78:32:1a:d0:a3:29:25:41:f1:94:94:16:
28:9e:c5:cb:75:5e:2d:0e:5c:bd:df:c6:cf:08:91:75:9b:96:
91:59:5a:32:17:13:7b:0e:22:68:39:0b:27:72:6a:6e:f9:99:
1c:0f:29:af:6a:b8:6a:37:5b:1e:01:01:09:78:85:73:87:c5:
b2:67:9f:bb:8d:f5:a2:34:36:41:17:90:1d:1f:01:0b:32:11:
c2:9d:c1:02:c3:31:c1:e6:b1:e2:b2:ba:c1:3b:ba:30:d4:8c:
53:2a:0f:63:30:42:d2:17:86:9d:ca:33:aa:ef:3f:1a:78:8c:
d0:17:87:54:f5:f7:53:9e:c7:26:ad:86:32:c2:73:0d:3e:6b:
10:c3:8a:e7:fa:3e:7a:27:75:e2:2f:41:87:4b:d9:f8:a6:6e:
7c:53:08:25:64:ad:91:5b:fa:97:9f:da:14:8d:91:a0:15:5a:
12:8e:65:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:42 2025 by rpki-client