Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: XmHa3G8AkQ8QhX/PuC3Qy4bYRx/DONaHLOfoP7caWh4=
Subject key identifier: 5F:0D:B0:E6:E2:DB:FA:AE:D5:7B:E7:85:C4:DB:B1:B7:74:93:E1:A2
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 019A00354D331FC9F4479B66F84FA4BD8C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 06:01:24 +0000
Manifest this update: Mon 20 Oct 2025 06:01:24 +0000
Manifest next update: Tue 21 Oct 2025 06:01:24 +0000
Files and hashes: 1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: AI2idDd2fIjeNpK7rr0rk4bw02gaFdZ6O4XrMFinSek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:4d:33:1f:c9:f4:47:9b:66:f8:4f:a4:bd:8c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Oct 20 06:01:24 2025 GMT
Not After : Oct 21 06:01:24 2025 GMT
Subject: CN=5f0db0e6e2dbfaaed57be785c4dbb1b77493e1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:e0:de:bf:f0:62:aa:da:a5:ae:70:d5:79:
65:2b:99:5e:a5:2b:b2:b3:3d:b4:de:d8:71:fc:af:
96:b8:63:68:b8:c0:1b:32:33:d6:5a:10:27:f5:6a:
e1:a9:84:0a:7a:01:c4:bf:d2:24:d0:c9:ac:0d:6e:
fe:b4:72:91:44:ef:1c:b7:4e:9f:eb:c5:f1:84:41:
59:2d:0f:d4:e6:6e:d2:a0:bc:ad:f8:4a:78:6a:0b:
5f:8e:e8:cb:69:cc:fc:84:35:7f:14:db:e4:e2:19:
e7:e0:b5:a3:b0:a9:85:ce:ff:0d:7e:9e:50:98:f5:
51:10:02:b6:ae:4b:c6:30:6a:a9:c3:f4:7e:4e:2e:
43:b1:e5:03:5b:86:0d:f7:b7:1f:3b:47:db:81:6c:
6e:b0:94:f1:2e:b6:e6:59:d7:07:ee:66:fe:7f:ac:
4f:6b:ee:cf:f7:c9:6c:40:8b:89:c1:4c:a5:58:71:
38:68:4e:6b:9a:92:89:79:9c:91:8c:b1:83:9d:48:
7d:5f:df:69:33:53:4c:88:f5:31:d4:7e:19:54:63:
c8:4d:2c:b6:49:e2:52:20:57:d2:32:a7:4d:94:ed:
35:f5:43:eb:31:63:70:4c:55:72:a1:4f:20:fa:cc:
fc:08:22:1a:aa:a4:60:43:7c:34:e1:ac:5f:bf:a3:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0D:B0:E6:E2:DB:FA:AE:D5:7B:E7:85:C4:DB:B1:B7:74:93:E1:A2
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bc:99:9d:b5:42:2b:a8:d0:fc:04:06:fa:0a:d5:c1:aa:69:
40:dd:83:d6:47:db:cc:2e:9e:b5:21:fe:86:16:bd:6b:ad:a1:
0a:ce:b8:0c:53:d5:69:fc:f4:d0:3d:08:41:3c:46:f4:25:2d:
b7:27:79:05:cb:14:cb:fa:74:0d:30:9b:40:69:06:54:97:9b:
c6:4a:15:c3:95:a2:fe:9b:91:05:76:d8:57:73:96:68:13:ce:
ba:a9:a3:4b:76:07:83:08:72:33:b2:96:45:1e:4c:12:77:e8:
47:dc:6c:f3:7c:12:9a:15:84:a6:f6:4e:2c:c5:9d:a4:29:83:
bc:71:26:cb:f4:36:2d:7c:36:17:d1:8f:80:de:cb:c9:09:a6:
18:31:13:21:ee:86:7c:79:2f:46:4e:2d:37:7f:49:43:d8:d8:
13:c0:ff:cc:bc:fb:12:6a:d3:1e:9e:33:ba:30:18:9a:3e:c9:
e1:5c:14:51:f7:87:5b:08:36:5b:b3:67:b8:6b:3f:85:bb:ae:
c8:87:4c:b0:8a:20:4b:21:9a:9c:4e:66:77:07:64:92:be:ae:
5b:f7:2c:87:9e:c2:c8:83:41:8a:95:b0:a8:26:90:39:b2:0f:
c5:d2:e9:44:40:27:76:62:93:e6:a0:f4:2a:22:ba:5d:c1:b3:
48:75:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:18 2025 by rpki-client