
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier: z9p23ZdMiS/UuIJDI+wurHj9M2qaD6pInXzke4wLHpM=
Subject key identifier: 56:C9:76:08:9D:FB:C7:3C:D5:AD:25:4F:76:85:EF:BA:43:4C:A8:FB
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 019A50E3C9394105A087A52BDF8CA38B7656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 22:01:36 +0000
Manifest this update: Tue 04 Nov 2025 22:01:36 +0000
Manifest next update: Wed 05 Nov 2025 22:01:36 +0000
Files and hashes: 1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: VvOoUfDZkTct7kumE4n4Ti7UEEcymLiBkmNG0d5rl6U=)
2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:c9:39:41:05:a0:87:a5:2b:df:8c:a3:8b:76:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: Nov 4 22:01:36 2025 GMT
Not After : Nov 5 22:01:36 2025 GMT
Subject: CN=56c976089dfbc73cd5ad254f7685efba434ca8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:e2:2b:0a:5e:e8:0b:a1:d7:0c:6e:cc:c6:
b1:f7:e7:10:3d:e9:c1:79:a7:5d:47:84:46:19:76:
87:61:74:4f:b2:ff:ca:ed:98:fc:20:bc:3f:2d:fd:
6e:55:29:ef:c4:59:21:14:a2:73:23:39:2f:43:75:
c8:d8:1e:d3:86:60:12:3f:59:99:11:0e:1c:96:42:
47:23:ae:cc:c7:a0:65:7e:dd:07:d7:cb:4d:83:bf:
c3:c8:9f:93:d1:8c:8a:da:a6:45:0b:cb:e8:be:73:
12:ae:e8:7e:b4:5d:3c:86:a4:a4:c5:30:d1:93:6f:
3b:ab:a9:ae:52:d7:0b:5b:a1:18:e3:da:ed:65:ab:
e8:e5:bf:26:83:0f:d0:44:76:8e:1e:e7:9b:ab:bc:
00:10:7a:5d:67:ba:c7:2d:db:92:f7:1d:b8:5f:7d:
b8:f6:b3:36:2e:d1:81:d8:b0:a3:d5:9b:d8:56:e7:
fe:0a:0c:1b:08:9d:2a:49:f1:32:68:be:7e:61:46:
e2:89:33:4e:56:75:d2:eb:f6:63:df:cd:9c:57:65:
7e:2c:91:93:2e:70:4d:c0:bc:69:08:fb:7b:32:a5:
17:af:8d:da:8f:5b:a2:6f:4f:b7:18:4d:b5:06:63:
27:d8:f6:cc:2f:db:1e:0b:71:75:19:f1:ae:32:68:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C9:76:08:9D:FB:C7:3C:D5:AD:25:4F:76:85:EF:BA:43:4C:A8:FB
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a6:02:15:c9:2d:7d:26:5c:43:90:04:24:5c:d2:54:6e:3f:
ff:d1:29:b1:7c:ae:12:85:c2:68:33:c9:bf:78:d3:5d:fa:89:
4d:1f:07:c8:cc:6f:30:46:0a:f9:e5:c7:6d:b8:7c:96:00:64:
44:60:67:d5:65:23:5a:bd:ce:b9:db:5e:68:51:f2:ad:f4:db:
cb:55:3a:9f:e1:91:86:a7:85:bf:70:e7:ea:d4:05:ef:7d:bd:
54:cd:af:7e:f6:d6:06:8b:fd:a2:44:b6:ca:c2:7f:c9:db:27:
a4:5b:9d:10:bf:ef:f2:1f:1c:d1:f4:36:bf:f0:92:27:dd:46:
ce:20:45:b1:bc:03:42:4b:c5:d1:29:07:ad:8c:83:31:66:c9:
45:49:17:45:87:82:99:7c:0f:a3:51:82:ea:fb:70:5f:d1:a3:
4e:89:94:46:5a:4c:87:25:26:71:f6:2b:fa:1c:85:f6:bf:34:
0f:71:ff:43:01:e4:81:d5:fe:05:e4:65:12:ec:3c:cc:41:c1:
35:29:9c:a9:90:a3:6c:3a:e8:be:16:54:3f:36:d5:29:27:70:
68:29:cc:ba:99:82:18:2b:09:8c:a3:ae:b4:b5:dc:c9:ea:75:
34:35:7b:e8:ef:24:91:0e:b2:cc:a6:11:ae:8c:c3:fa:f6:bf:
74:13:ba:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:37 2025 by rpki-client