Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
File: Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft (raw, json)
Hash identifier: 5sclcKV1qwh11HrSuxm2v7osD87OmqCFpGTAI/E7qFg=
Subject key identifier: E2:AE:D6:54:D5:D5:CB:D8:DA:2E:5E:16:7F:BA:B4:81:C3:E6:96:51
Authority key identifier: 63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
Certificate issuer: /CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Certificate serial: 0199FBEB1AE8C1403C99A0654B7BA23E10ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
Manifest number: 0BD5
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl (hash: aVieGUZNwPD5Eb6ShhK0sXmuxp3P606c2z6Oe3TGplM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1a:e8:c1:40:3c:99:a0:65:4b:7b:a2:3e:10:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=e2aed654d5d5cbd8da2e5e167fbab481c3e69651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:02:65:00:d1:5b:02:db:8f:62:2b:09:9f:
b4:03:8d:b6:60:2d:3b:79:c7:d2:69:09:b9:8c:e6:
67:4d:19:ed:2f:b7:c5:ee:01:8c:aa:dc:c4:f1:af:
47:a6:ef:e5:d2:b4:24:38:a2:50:9a:e3:96:d4:74:
9e:75:a0:d4:66:ad:c1:b0:b2:9d:a0:ac:69:6d:d8:
35:f0:9f:cd:5f:ba:d5:6b:29:90:6c:ce:54:1a:7e:
11:c4:d5:28:d4:8a:76:db:9d:2f:54:ae:02:90:7d:
c3:7f:f7:79:d3:72:ae:5f:47:a4:39:e7:62:0f:33:
00:9c:0e:3b:65:04:29:73:46:17:54:60:5f:3b:6e:
05:ab:1e:e9:23:5f:ff:a5:7c:6a:e0:7d:f4:5b:ee:
28:5f:cb:13:7e:0e:2a:a7:98:5f:94:a2:7b:ea:77:
8c:fb:87:22:11:46:92:0a:2c:26:4b:ce:11:41:75:
8b:2e:38:dc:1c:52:8e:39:50:6c:74:a3:3d:fe:52:
bb:5d:ac:8b:37:c2:b4:d8:ef:84:9a:55:30:fc:8d:
e2:63:68:7d:43:d4:dd:62:8b:17:de:f0:9e:91:32:
70:a7:00:8c:94:f4:e5:da:cc:ef:13:35:15:62:c9:
f1:30:dc:89:9e:a4:e4:4d:af:1c:1e:53:0f:2f:b3:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AE:D6:54:D5:D5:CB:D8:DA:2E:5E:16:7F:BA:B4:81:C3:E6:96:51
X509v3 Authority Key Identifier:
keyid:63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c5:bd:2a:ac:94:63:c3:a1:87:5d:00:b5:a6:5d:5f:56:68:
53:f6:b2:57:09:74:d9:fe:1e:3b:08:ce:e1:80:aa:b2:00:93:
00:9e:b7:b3:5c:2c:a8:c2:f6:c6:08:22:c5:e7:e2:46:8d:b6:
12:42:b8:e8:84:85:8a:23:b8:7a:e6:3d:1c:70:87:f5:34:c9:
80:88:aa:71:ba:50:37:6e:c2:78:db:ab:a4:d3:df:5b:ac:48:
78:2e:16:e2:33:5a:f9:fe:35:36:04:c1:c0:84:47:2c:b4:06:
02:61:a7:e3:1c:e0:ba:3e:a3:68:27:ca:fc:04:fc:fa:f6:1c:
d0:c8:da:ed:72:b6:f8:ac:32:5d:87:c5:b3:6d:00:b8:9f:2b:
47:06:48:89:f9:0b:54:f8:5d:9e:86:96:0f:13:2d:34:10:72:
70:4d:e7:da:39:46:a3:b3:3f:db:93:20:68:5c:05:f1:83:f1:
f1:f4:df:55:02:5d:bc:c7:32:04:03:94:96:c8:81:33:c8:26:
f0:40:25:d8:a7:16:a8:6e:07:63:a9:c8:5f:9a:59:87:ed:09:
e8:f8:16:8e:35:f6:56:be:12:e1:af:98:60:95:3c:ec:af:f1:
01:9c:5c:93:24:8a:b2:e4:23:84:4b:d3:0b:44:04:a4:61:54:
19:8a:69:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76xrowUA8maBlS3uiPhDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOGUwZmQxODgzMjQ3NTY5NTk5NWY0NTA3ZjhmY2ZkYWYx
YzFjZTUwHhcNMjUxMDE5MTAwMTUzWhcNMjUxMDIwMTAwMTUzWjAzMTEwLwYDVQQD
EyhlMmFlZDY1NGQ1ZDVjYmQ4ZGEyZTVlMTY3ZmJhYjQ4MWMzZTY5NjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOMCZQDRWwLbj2IrCZ+0A422YC07
ecfSaQm5jOZnTRntL7fF7gGMqtzE8a9Hpu/l0rQkOKJQmuOW1HSedaDUZq3BsLKd
oKxpbdg18J/NX7rVaymQbM5UGn4RxNUo1Ip2250vVK4CkH3Df/d503KuX0ekOedi
DzMAnA47ZQQpc0YXVGBfO24Fqx7pI1//pXxq4H30W+4oX8sTfg4qp5hflKJ76neM
+4ciEUaSCiwmS84RQXWLLjjcHFKOOVBsdKM9/lK7XayLN8K02O+EmlUw/I3iY2h9
Q9TdYosX3vCekTJwpwCMlPTl2szvEzUVYsnxMNyJnqTkTa8cHlMPL7OifwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKu1lTV1cvY2i5eFn+6tIHD5pZRMB8GA1UdIwQY
MBaAFGOOD9GIMkdWlZlfRQf4/P2vHBzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUt
YjRlMjVkNDBhMzgzLzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUtYjRlMjVkNDBhMzgz
LzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcW9KqyU
Y8Ohh10AtaZdX1ZoU/ayVwl02f4eOwjO4YCqsgCTAJ63s1wsqML2xggixefiRo22
EkK46ISFiiO4euY9HHCH9TTJgIiqcbpQN27CeNurpNPfW6xIeC4W4jNa+f41NgTB
wIRHLLQGAmGn4xzguj6jaCfK/AT8+vYc0Mja7XK2+KwyXYfFs20AuJ8rRwZIifkL
VPhdnoaWDxMtNBBycE3n2jlGo7M/25MgaFwF8YPx8fTfVQJdvMcyBAOUlsiBM8gm
8EAl2KcWqG4HY6nIX5pZh+0J6PgWjjX2Vr4S4a+YYJU87K/xAZxckySKsuQjhEvT
C0QEpGFUGYppfA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:59:53 2025 by rpki-client