Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier: zOzgP5ODS5RaFtAgB9leK0PEwaXifSFRevGLiCzdLs8=
Subject key identifier: 9F:4F:84:B4:6C:AE:0B:C2:6D:68:35:41:F7:EB:76:B3:AE:0D:BE:0F
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 019A52D1EC2437085FCA1037DDF2D682BDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 07:01:20 +0000
Manifest this update: Wed 05 Nov 2025 07:01:20 +0000
Manifest next update: Thu 06 Nov 2025 07:01:20 +0000
Files and hashes: 1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: cc89jKJzbi24NlIpxO7FU3yk9dVydyKSW6uoVLMmGf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:ec:24:37:08:5f:ca:10:37:dd:f2:d6:82:bd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Nov 5 07:01:20 2025 GMT
Not After : Nov 6 07:01:20 2025 GMT
Subject: CN=9f4f84b46cae0bc26d683541f7eb76b3ae0dbe0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:b0:69:95:ae:4b:65:06:c8:4b:18:8e:4b:
d6:35:9f:75:94:0e:30:09:17:9e:d8:18:13:82:88:
5a:47:a7:bb:8e:50:20:a9:ae:0f:fe:2d:69:19:3d:
be:85:a7:7c:10:86:e1:5e:95:92:06:8b:63:54:07:
bf:df:93:86:c7:a6:ce:d8:dd:c3:c1:71:53:7f:fa:
96:4a:8b:b7:1d:e3:73:ad:8a:e1:cb:c5:82:db:74:
5c:7e:67:a0:04:62:3c:bc:4c:ee:d2:db:ec:a1:f8:
be:6e:2c:c9:50:98:c8:56:eb:aa:b2:cb:6b:1d:b3:
2a:1c:fd:3a:b6:98:ae:87:8f:3f:7b:56:33:b5:1d:
3a:97:40:6d:be:ec:bd:2a:9a:d7:01:1d:59:e1:22:
ef:58:02:06:b7:81:b2:11:59:91:fe:3b:8f:9c:fa:
b3:83:da:72:37:a6:29:a0:f5:43:cc:56:87:14:3a:
20:7f:75:c0:d1:55:28:b7:66:78:e0:11:86:7b:0e:
5d:ba:55:f0:2b:3d:18:e4:be:9d:20:c3:b9:7e:a9:
c3:16:11:6b:f6:42:29:03:0f:5b:e4:5b:63:37:97:
66:ee:0c:3c:2e:f1:09:69:18:25:32:62:67:7c:6c:
6a:5f:f8:58:fe:6d:65:a3:5d:ca:c2:f9:58:81:52:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4F:84:B4:6C:AE:0B:C2:6D:68:35:41:F7:EB:76:B3:AE:0D:BE:0F
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:19:f4:88:bd:ca:85:2f:c6:db:96:a4:42:fb:3a:82:b1:34:
c5:e8:45:6c:c7:d3:a8:ac:40:e3:2b:a3:5c:58:08:d0:09:60:
b7:01:ae:c9:3f:48:2e:2a:3d:5f:bf:38:a4:04:be:8f:37:9b:
10:d2:54:de:cf:d7:c4:b6:40:18:c5:fe:aa:75:9b:cc:0e:74:
02:54:c5:e5:e2:95:c0:3b:e1:57:9b:e5:1f:3a:91:ed:01:0c:
6b:40:22:d3:97:2b:f3:85:d8:b2:96:0a:56:c1:16:21:bb:57:
5d:4c:8a:05:4e:28:53:21:37:c0:d3:7c:1f:c8:bf:53:e0:e7:
d0:c7:97:99:6d:20:a7:86:16:0b:61:0c:b1:94:1b:a2:ae:ea:
a6:5e:dc:a0:00:26:05:70:dc:37:a5:cf:d8:b2:7e:4d:15:f4:
df:eb:9f:10:15:4b:42:7c:b3:c3:58:0b:72:b3:fa:29:2e:b3:
72:66:d8:59:7e:be:46:f5:8f:84:43:58:c4:d9:08:2e:e8:6a:
c7:5b:34:7f:53:47:96:93:3d:5c:37:7d:a7:39:f7:bc:d1:2c:
d6:11:a0:5f:aa:d5:43:85:3d:fb:75:37:cd:cb:d2:33:74:a8:
c9:90:c6:c1:0d:d8:37:e7:61:77:c1:d0:55:0c:89:4b:54:47:
5b:a2:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:31 2025 by rpki-client