Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
File: yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json)
Hash identifier: vuNtbY3KUEHDDXCRPAhWYU+pbcoAN4Bd/c2F2jP4V34=
Subject key identifier: 2F:B7:65:5F:CC:0E:C3:6A:03:57:5C:24:A6:57:7E:01:F4:7D:6F:08
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Certificate issuer: /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial: 0199FF2267B83C9985F10AEF4C624FC0EFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
Manifest number: 0656
Signing time: Mon 20 Oct 2025 01:01:08 +0000
Manifest this update: Mon 20 Oct 2025 01:01:08 +0000
Manifest next update: Tue 21 Oct 2025 01:01:08 +0000
Files and hashes: 1: aC22qm65HmlnQmRshJm7pr66v5M.roa (hash: LObDHQ4gNcpulvuWrsjsmncwDPjtYz0pJfy6Qo6CsRI=)
2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: GtWS2+haSFsb+QUkh187udJHzd0rGuHlPioBiObWiFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:67:b8:3c:99:85:f1:0a:ef:4c:62:4f:c0:ef:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
Validity
Not Before: Oct 20 01:01:08 2025 GMT
Not After : Oct 21 01:01:08 2025 GMT
Subject: CN=2fb7655fcc0ec36a03575c24a6577e01f47d6f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:77:62:07:dc:f3:70:b5:0f:08:36:cb:bb:
d8:c6:a8:5f:1f:d3:6e:80:f8:40:d9:3e:f0:0d:ea:
79:21:5b:6f:c0:62:57:42:29:58:e8:b2:62:0b:75:
81:35:20:a1:6a:2f:a6:cd:83:d1:4d:31:c2:04:4e:
5c:48:ec:c5:03:42:ec:36:f9:c2:c3:2e:83:d4:5b:
bf:cd:ae:34:f8:f7:1c:bc:08:87:40:91:9e:ba:26:
dc:a7:b6:56:cf:fe:3d:8a:d3:78:fa:2f:19:5d:f3:
68:0f:17:1f:3d:ff:0f:68:64:87:6d:69:c0:2d:d1:
67:ca:f2:96:57:74:ee:08:34:9a:32:f8:1d:3b:79:
ff:b6:1f:3d:f0:61:3e:b7:74:7f:2b:5d:fe:81:f2:
93:ff:e8:46:05:89:10:1f:06:1c:31:7a:12:ea:8c:
e1:2b:c5:c8:1d:d9:1b:a2:27:bc:c5:17:3f:c4:9c:
d1:4d:a2:dc:28:a5:81:11:d0:c7:21:ca:3e:f2:a5:
7c:18:86:f0:54:87:7c:c2:bb:20:75:f8:0e:52:19:
97:28:3a:64:8c:f9:30:1f:87:76:67:9a:b5:10:1e:
39:0e:2a:e9:3a:bc:15:91:ed:05:6b:df:d6:9e:e3:
e1:df:c5:4d:67:d4:99:74:a1:b3:23:07:9a:dd:c8:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B7:65:5F:CC:0E:C3:6A:03:57:5C:24:A6:57:7E:01:F4:7D:6F:08
X509v3 Authority Key Identifier:
keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:84:df:de:50:f0:c5:f2:c9:c6:ca:1e:28:b0:c4:66:e2:d3:
9c:b2:7f:0e:92:e4:13:2a:2d:52:dd:d5:d0:dc:ef:74:f7:9e:
b8:f7:bd:d9:22:0e:d2:66:fe:d5:4f:dc:9f:06:d8:4f:b5:ca:
70:81:d4:53:b2:a1:56:ce:d1:0c:b0:e9:af:56:b4:b6:5f:74:
ff:68:6b:37:6b:e0:da:46:e0:14:54:8b:5c:60:fc:ac:cc:ab:
bb:71:7f:98:23:6e:4e:7e:08:3f:00:2f:26:ef:24:ed:ad:23:
c2:82:ea:a0:ce:a8:f2:78:6f:19:36:5c:aa:b4:38:44:6f:c4:
a4:79:5a:eb:06:ae:1c:bb:aa:9d:08:9c:c7:89:42:94:42:a2:
e5:16:7e:7c:46:d6:a3:d0:1c:c1:33:92:34:2c:d0:4c:7a:55:
48:7d:c6:e5:f2:da:c9:1d:8d:9a:4e:05:66:d1:5f:25:ab:ba:
08:65:f4:7a:64:3f:bc:36:de:fa:49:49:73:42:ac:04:43:24:
4b:1c:56:ec:bd:51:7a:1b:60:21:00:e5:da:51:7f:cb:9b:20:
92:8e:8f:66:09:8d:99:f2:e1:f0:f8:c0:41:5c:a6:c3:91:bc:
5c:a9:ff:0e:02:7a:fd:6f:c1:d3:ca:da:fd:c0:25:5e:38:1f:
58:92:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:19:03 2025 by rpki-client