Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: 5hAS/JXcv6Twj8gg0n7bOzFCp3xPRIyQ5cb0PN+X1tM=
Subject key identifier: 38:D5:CC:0C:85:BB:D5:AC:98:3D:4E:31:7E:A1:A8:10:A7:A3:E7:BB
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 0199FB45C3B2354712CBAB02C5A6A44B6584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:17 +0000
Manifest this update: Sun 19 Oct 2025 07:01:17 +0000
Manifest next update: Mon 20 Oct 2025 07:01:17 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: KBYA7s3VajNGNdrEr3Bl1VuYOELlfyrXcdxEmXcEa+4=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c3:b2:35:47:12:cb:ab:02:c5:a6:a4:4b:65:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Oct 19 07:01:17 2025 GMT
Not After : Oct 20 07:01:17 2025 GMT
Subject: CN=38d5cc0c85bbd5ac983d4e317ea1a810a7a3e7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:0f:f8:0e:43:8e:27:43:58:41:ad:f1:11:
b3:9d:7d:ca:95:44:a4:01:a3:6b:dc:57:aa:9b:56:
0a:c1:de:51:a3:9b:20:5a:e7:5c:cd:73:5b:f2:c1:
e4:86:92:23:2b:90:4d:f2:fd:0b:e7:0b:bb:91:60:
6a:8e:e3:55:8a:66:7a:53:fd:32:f8:25:b0:5d:81:
1a:9f:a5:e0:e4:73:6c:63:0a:74:71:78:94:db:08:
16:5a:a4:d1:a9:36:9d:69:ad:73:28:a5:02:dd:9d:
40:ca:4d:05:5e:06:63:a1:79:63:51:f9:b1:51:6d:
99:6a:0e:b5:95:78:bc:b4:50:ef:fa:08:89:38:ba:
12:72:40:05:dd:31:41:8f:d5:82:9b:c8:1b:30:4a:
0b:ed:0d:39:cf:c0:4b:54:40:92:c0:f8:aa:07:59:
ee:48:bb:fd:eb:a3:5c:a6:45:db:b6:cc:63:96:49:
1e:d6:e8:ae:bb:8d:16:c3:ba:a6:d9:7e:6a:a7:b0:
a2:35:c2:73:c8:10:7a:4a:1c:8a:32:7e:08:60:97:
2b:a4:72:40:29:01:6f:ea:60:81:56:52:d2:18:f4:
36:c7:62:6f:89:51:9e:a8:4e:ea:a4:c6:a8:29:6e:
93:36:a0:09:05:0f:98:16:a9:aa:a0:e6:44:d7:53:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D5:CC:0C:85:BB:D5:AC:98:3D:4E:31:7E:A1:A8:10:A7:A3:E7:BB
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6f:ef:eb:a1:d8:d2:64:70:05:e7:a0:52:f9:9c:d9:2e:38:
94:63:52:ac:07:80:01:58:57:63:93:17:0f:af:62:fd:3d:9c:
71:36:30:3b:d3:ed:d2:19:88:97:6c:54:da:8f:6d:a5:46:03:
93:dd:41:bb:9c:d5:7a:fa:d7:8e:40:ae:59:c9:e3:aa:8d:91:
ee:2e:77:92:70:c4:b1:94:b2:6e:4a:5b:2b:18:fb:15:97:3b:
5a:55:2e:f4:48:5f:54:5e:04:f7:fe:c0:f3:47:e2:36:0f:cf:
06:ea:29:80:b2:02:7a:b5:5f:6a:2c:d3:8b:d6:9c:31:2a:0a:
9a:33:0e:d7:cb:6d:3c:53:37:3c:f5:9c:fe:3a:1b:5e:31:0c:
e4:6e:99:7a:65:df:ba:78:41:8e:93:88:93:ff:9d:69:7a:5c:
1b:4c:64:c8:fc:09:0e:b3:4f:5d:2c:e7:d7:9b:80:35:8e:69:
53:06:3b:e8:71:44:74:f4:77:a0:44:e2:af:e3:cc:58:b6:df:
2f:08:be:a9:ae:ef:cd:f3:75:1b:b7:2d:b4:e7:57:45:67:36:
31:96:0a:7b:28:2e:96:bb:c9:0e:c7:a9:4d:5d:e0:ad:d6:a7:
23:d0:f6:f2:aa:a5:a2:6f:2d:f6:2f:e9:a0:28:ab:bf:46:58:
ba:1b:4f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:50 2025 by rpki-client