Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File: yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier: 5mehj4BLi7JVIf5JHLDqVfTLgLAjeqVZ/340xIPTl6Y=
Subject key identifier: 62:A8:27:97:DC:AF:43:72:E9:E3:7D:42:48:C8:D2:4A:61:FE:E1:BF
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 0199FEEBC7455D93EF551FF66E2EB45346A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number: 0437
Signing time: Mon 20 Oct 2025 00:01:28 +0000
Manifest this update: Mon 20 Oct 2025 00:01:28 +0000
Manifest next update: Tue 21 Oct 2025 00:01:28 +0000
Files and hashes: 1: DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa (hash: wBdx6PRDwqiRs1k8IOdYm4GWe7EZE4vtyKYESIsAUKo=)
2: ItPmNdTjNgHqBxANMhUVH1DC5UU.roa (hash: QPQB5rA9kwVStlIhdq0li1+Di1amgsoq6BbyBsFXRrc=)
3: xKKq4SF6-ObtvfC7jpcnypKexwg.roa (hash: qw4y1FHQavkl3C0h/hnsN3/lIOTC2hyOIzm3AanVe3c=)
4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: STTmln4I9QH+6UD+ZvLEyE0qRZ0yJPvyB5h2KDCMY04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c7:45:5d:93:ef:55:1f:f6:6e:2e:b4:53:46:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: Oct 20 00:01:28 2025 GMT
Not After : Oct 21 00:01:28 2025 GMT
Subject: CN=62a82797dcaf4372e9e37d4248c8d24a61fee1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:21:77:18:14:31:16:8b:75:7c:48:9b:c2:
17:ca:55:3d:3c:e9:6f:24:0e:55:38:4b:66:e6:fa:
a2:00:92:a4:c6:70:57:b9:fd:87:ee:34:0e:30:1f:
8b:f5:cb:46:f5:9a:a7:91:f0:e9:75:f3:ed:a8:7c:
7e:5d:21:20:ab:16:1e:8b:cb:71:10:87:48:d1:7c:
d2:46:5c:e2:04:83:14:6e:4c:e6:7f:03:ed:02:07:
c0:7e:d3:58:15:e2:04:b9:26:97:2f:52:db:9d:8b:
3b:38:4f:6e:36:ae:f2:53:a8:32:76:2d:9f:74:28:
a2:4a:b0:9a:12:0f:57:ed:46:0f:c6:92:5f:49:2b:
b2:59:64:9d:cf:28:d4:32:1e:88:61:00:e8:3a:ff:
24:a5:84:76:28:e2:7c:dc:93:47:0c:32:ff:50:d7:
c0:f7:48:a2:b3:1d:2d:74:49:cf:29:52:fc:bd:19:
e7:7d:d6:e0:b4:b5:9c:6a:4a:40:4b:67:ce:d4:ff:
a4:ff:ea:5a:19:14:08:1b:3a:c3:19:f7:70:f0:e6:
ea:ae:6c:91:8d:eb:5a:51:a6:a6:ef:8e:7a:af:2e:
11:f7:d0:0c:56:5c:1d:a7:f9:2c:e0:0b:ee:eb:cd:
bd:58:e5:cb:3e:21:1d:9f:70:ab:f4:dc:43:97:41:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A8:27:97:DC:AF:43:72:E9:E3:7D:42:48:C8:D2:4A:61:FE:E1:BF
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0d:9b:8c:37:df:d9:56:e8:95:aa:21:df:13:9e:35:0e:be:
a3:82:ed:07:02:b3:61:89:a8:58:0f:e4:1d:eb:4f:20:fe:dc:
a3:7a:e6:58:d2:38:96:43:73:b5:1f:b6:4c:ba:9f:4f:fb:bb:
b3:a9:08:a6:76:56:75:22:39:70:c1:f2:b5:86:c2:ef:db:2d:
34:80:3c:1e:30:0f:2d:72:f6:f5:5f:e3:c5:79:43:d9:97:dc:
7a:7f:65:ea:5e:3a:67:79:d1:a1:b1:ae:a6:f0:ac:c2:a6:e7:
de:5c:96:15:a9:90:7f:70:94:2c:cc:59:15:e5:27:ec:23:a2:
78:a5:c3:cd:b9:76:9b:ce:65:cd:57:ff:c4:63:5a:5e:5e:aa:
b5:91:b5:db:f3:c0:46:a1:d4:43:cc:b5:68:6b:1d:fd:45:75:
ba:19:9f:9d:ed:a5:ae:80:45:af:11:49:db:c4:1a:20:cc:f6:
b1:ce:bb:ad:06:da:4b:6a:3c:c5:17:c6:64:17:aa:70:96:53:
02:37:44:db:ba:23:3f:36:af:31:65:25:25:77:63:54:5e:f8:
bb:4e:a4:c2:9e:c6:3a:5a:32:26:05:0b:db:36:2c:d4:c5:82:
3f:60:47:f5:fa:39:c7:63:ca:b7:cf:81:89:54:6f:b5:9e:97:
d7:74:29:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+68dFXZPvVR/2bi60U0aoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTEzNWU1ODdjYmIzOGJlMWViN2I2ZGU5YzQ4MDI5ZDA0
NWQyNzMwHhcNMjUxMDIwMDAwMTI4WhcNMjUxMDIxMDAwMTI4WjAzMTEwLwYDVQQD
Eyg2MmE4Mjc5N2RjYWY0MzcyZTllMzdkNDI0OGM4ZDI0YTYxZmVlMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOohdxgUMRaLdXxIm8IXylU9POlv
JA5VOEtm5vqiAJKkxnBXuf2H7jQOMB+L9ctG9ZqnkfDpdfPtqHx+XSEgqxYei8tx
EIdI0XzSRlziBIMUbkzmfwPtAgfAftNYFeIEuSaXL1LbnYs7OE9uNq7yU6gydi2f
dCiiSrCaEg9X7UYPxpJfSSuyWWSdzyjUMh6IYQDoOv8kpYR2KOJ83JNHDDL/UNfA
90iisx0tdEnPKVL8vRnnfdbgtLWcakpAS2fO1P+k/+paGRQIGzrDGfdw8ObqrmyR
jetaUaam7456ry4R99AMVlwdp/ks4Avu6829WOXLPiEdn3Cr9NxDl0GKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKoJ5fcr0Ny6eN9QkjI0kph/uG/MB8GA1UdIwQY
MBaAFMmRNeWHy7OL4et7benEgCnQRdJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYt
MTM0ZDk1M2NhMDkzLzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zMDk1MWUtYTMwOS00NWMzLWJhMTYtMTM0ZDk1M2NhMDkz
LzEveVpFMTVZZkxzNHZoNjN0dDZjU0FLZEJGMG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARA2bjDff
2Vbolaoh3xOeNQ6+o4LtBwKzYYmoWA/kHetPIP7co3rmWNI4lkNztR+2TLqfT/u7
s6kIpnZWdSI5cMHytYbC79stNIA8HjAPLXL29V/jxXlD2Zfcen9l6l46Z3nRobGu
pvCswqbn3lyWFamQf3CULMxZFeUn7COieKXDzbl2m85lzVf/xGNaXl6qtZG12/PA
RqHUQ8y1aGsd/UV1uhmfne2lroBFrxFJ28QaIMz2sc67rQbaS2o8xRfGZBeqcJZT
AjdE27ojPzavMWUlJXdjVF74u06kwp7GOloyJgUL2zYs1MWCP2BH9fo5x2PKt8+B
iVRvtZ6X13Qp1A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:19:37 2025 by rpki-client