
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File: ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier: P3mx0RYNFuSBKB46Cp0UbjFpdsZkU3AMBic08RlfBeA=
Subject key identifier: 2F:55:BD:73:71:D0:D9:25:2A:98:A6:48:CA:16:0F:F5:32:0C:14:C9
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer: /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial: 019A503DD1A9E025C59233B7BBDAA9D9CD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:19 +0000
Manifest this update: Tue 04 Nov 2025 19:00:19 +0000
Manifest next update: Wed 05 Nov 2025 19:00:19 +0000
Files and hashes: 1: s9EuqX5b9zt_Znw1hEoBNVzx0co.roa (hash: MS1QUNemj9oOGEXp2GgN/ppihkcGaOAMbcG5uVtKAdE=)
2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: hTpO4tFn5a3452k1pBLZkwtZUl4O1VIfEbAGB+UX53U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:d1:a9:e0:25:c5:92:33:b7:bb:da:a9:d9:cd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Validity
Not Before: Nov 4 19:00:19 2025 GMT
Not After : Nov 5 19:00:19 2025 GMT
Subject: CN=2f55bd7371d0d9252a98a648ca160ff5320c14c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:f0:a1:ff:57:d6:ae:50:5f:1d:23:a2:5a:
95:a2:0a:36:6e:20:cb:25:09:9e:ab:22:a0:a1:e8:
ef:48:c7:22:e1:57:9e:af:16:f5:83:33:84:6e:87:
13:28:a5:5d:e1:db:f0:67:7a:33:20:c9:68:ea:e2:
26:16:12:af:ab:d9:d8:e9:15:f4:a5:70:80:72:09:
34:5e:ff:b0:94:61:ff:c1:60:3e:08:f8:f9:46:cd:
c7:80:bf:e4:fb:9d:7c:23:50:4f:0b:9b:02:9d:9e:
5a:c6:30:1f:19:9b:e5:dc:ff:38:25:e1:3e:80:9d:
8e:fa:24:0a:f3:49:18:d2:4c:ca:f1:5c:96:02:3a:
91:23:0f:4f:d9:1a:04:9e:52:05:38:e1:12:c5:40:
c8:7c:a5:8f:ae:c7:f2:ea:ab:d2:50:7a:01:c0:c3:
48:30:68:28:fa:d9:2c:68:8c:7f:e0:83:1c:46:c2:
c6:96:db:c2:c3:a8:61:37:d1:d6:f6:c2:f2:bd:c0:
df:e3:a6:b4:59:3a:eb:c5:ba:95:ea:3d:3a:63:f5:
de:b1:e2:53:49:d5:29:98:09:50:5a:58:d4:ac:18:
56:d4:6d:b4:ac:69:23:5c:fa:e0:e7:f1:db:04:05:
21:e2:89:2e:b2:fe:08:1d:02:60:0c:44:66:ef:27:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:55:BD:73:71:D0:D9:25:2A:98:A6:48:CA:16:0F:F5:32:0C:14:C9
X509v3 Authority Key Identifier:
keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2b:d8:41:5c:5c:c4:9b:39:a7:e2:74:8e:30:08:03:f8:d6:
ba:3b:6a:58:57:52:7d:40:3e:62:8a:99:9e:b1:b7:d9:64:b0:
28:e8:e1:cd:1e:0a:18:36:18:62:32:5c:cb:ad:11:90:6a:b6:
4d:47:d6:e5:7e:11:a9:31:e8:29:ae:31:7c:a1:06:9d:e4:ce:
3f:72:c3:6c:52:65:62:e4:86:28:4b:50:36:75:f2:d7:69:0b:
4a:10:5d:11:93:1b:06:1a:8e:2a:a6:d6:3e:7d:70:16:64:c3:
22:71:3f:29:56:f5:81:5b:3d:56:84:4a:01:e6:ec:59:6b:03:
f9:f3:32:73:36:ec:fa:bb:95:33:4d:c3:ef:9b:0e:b8:34:38:
e0:61:02:69:35:b6:dc:04:3d:6e:89:88:07:c4:d4:8f:82:90:
b0:42:0d:b1:c4:e9:74:49:9f:7a:b6:7a:07:ee:7e:fd:d9:70:
72:ce:11:96:05:60:33:09:3d:3a:2b:e9:b8:7e:a8:35:42:7e:
7c:84:3d:e6:29:30:af:a7:b3:39:b6:e3:39:8e:56:a0:4a:ed:
ae:53:d6:fc:34:44:4d:fb:8e:bb:2f:03:b2:dd:a0:e5:eb:ed:
fc:50:01:ad:36:79:51:1f:ad:cb:0f:5d:7b:dc:60:2c:31:f9:
d9:eb:d1:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPdGp4CXFkjO3u9qp2c2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzQ4Y2QwMGNkN2ZlNmEyMTc1NWFmNjQyZDg4MWI4ZGQ5
YTM5ZjcwHhcNMjUxMTA0MTkwMDE5WhcNMjUxMTA1MTkwMDE5WjAzMTEwLwYDVQQD
EygyZjU1YmQ3MzcxZDBkOTI1MmE5OGE2NDhjYTE2MGZmNTMyMGMxNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTTwof9X1q5QXx0jolqVogo2biDL
JQmeqyKgoejvSMci4Veerxb1gzOEbocTKKVd4dvwZ3ozIMlo6uImFhKvq9nY6RX0
pXCAcgk0Xv+wlGH/wWA+CPj5Rs3HgL/k+518I1BPC5sCnZ5axjAfGZvl3P84JeE+
gJ2O+iQK80kY0kzK8VyWAjqRIw9P2RoEnlIFOOESxUDIfKWPrsfy6qvSUHoBwMNI
MGgo+tksaIx/4IMcRsLGltvCw6hhN9HW9sLyvcDf46a0WTrrxbqV6j06Y/XeseJT
SdUpmAlQWljUrBhW1G20rGkjXPrg5/HbBAUh4okusv4IHQJgDERm7yeUewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9VvXNx0NklKpimSMoWD/UyDBTJMB8GA1UdIwQY
MBaAFMp0jNAM1/5qIXVa9kLYgbjdmjn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgt
MmEzZGY5YjMzMzEzLzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgtMmEzZGY5YjMzMzEz
LzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPivYQVxc
xJs5p+J0jjAIA/jWujtqWFdSfUA+YoqZnrG32WSwKOjhzR4KGDYYYjJcy60RkGq2
TUfW5X4RqTHoKa4xfKEGneTOP3LDbFJlYuSGKEtQNnXy12kLShBdEZMbBhqOKqbW
Pn1wFmTDInE/KVb1gVs9VoRKAebsWWsD+fMyczbs+ruVM03D75sOuDQ44GECaTW2
3AQ9bomIB8TUj4KQsEINscTpdEmferZ6B+5+/dlwcs4RlgVgMwk9OivpuH6oNUJ+
fIQ95ikwr6ezObbjOY5WoErtrlPW/DRETfuOuy8Dst2g5evt/FABrTZ5UR+tyw9d
e9xgLDH52evRqg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:13 2025 by rpki-client