Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: M77mGf/+cw6bfGA3UOe2e5IOiaVnopROo+JzniDTZUY=
Subject key identifier: AD:C5:DB:9D:E6:C8:1C:86:7E:E5:01:C9:BE:3E:55:E4:ED:1D:3F:0F
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 0199FE10222E95728323E6B8E12AEBF051C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 05BC
Signing time: Sun 19 Oct 2025 20:01:34 +0000
Manifest this update: Sun 19 Oct 2025 20:01:34 +0000
Manifest next update: Mon 20 Oct 2025 20:01:34 +0000
Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=)
2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: LfUjLkl44Xwp/YU8fCYPGNlSVVakEy2NkvfzZj9vHQU=)
3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:22:2e:95:72:83:23:e6:b8:e1:2a:eb:f0:51:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Oct 19 20:01:34 2025 GMT
Not After : Oct 20 20:01:34 2025 GMT
Subject: CN=adc5db9de6c81c867ee501c9be3e55e4ed1d3f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:07:53:ac:0a:5c:c4:98:ba:36:9a:5f:8e:
1c:04:37:78:f2:17:78:37:1b:e5:e4:a7:f7:ac:eb:
3f:62:de:eb:58:9b:89:d1:d8:0c:e6:5e:6f:ad:af:
66:a7:83:44:1f:65:f4:2e:d9:86:52:d4:4a:f2:8c:
53:ba:3a:20:43:b8:f9:6c:c5:a6:81:f7:fe:a4:26:
c1:38:04:6d:40:1c:aa:be:13:71:a2:0e:44:ad:68:
51:e4:59:19:9f:fc:11:51:f8:19:0d:ba:bc:6f:d5:
49:64:25:94:65:d0:d6:5b:ab:57:f9:99:cc:91:7f:
f5:98:e8:c6:77:f0:fb:de:f5:c5:27:27:ec:2c:b6:
77:ab:11:fa:9a:40:de:cb:6f:ca:da:ab:b0:1f:10:
b6:36:67:5e:ee:60:69:35:3b:59:d1:8f:37:e8:cc:
df:7a:6b:2d:ee:47:6f:19:a0:4d:68:fa:17:0f:e4:
7e:39:9d:43:16:a5:31:76:db:64:b1:c6:0f:d7:d4:
27:6f:27:c2:cf:65:a3:8a:4f:8d:20:6d:8d:69:d9:
07:75:f1:bf:1d:ed:53:41:27:f0:f6:fd:9f:26:9c:
05:3f:b3:c0:5f:5c:9a:41:ab:e0:57:9f:ca:9e:e9:
9f:85:5a:22:4f:00:f8:63:11:22:00:dd:64:e6:32:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C5:DB:9D:E6:C8:1C:86:7E:E5:01:C9:BE:3E:55:E4:ED:1D:3F:0F
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:94:b8:c2:2f:7d:9d:00:03:4e:98:b8:5e:b2:3a:38:04:7e:
1e:73:e1:ba:88:6a:45:30:3a:bc:41:25:94:5c:1c:ce:b2:28:
31:28:4d:f9:49:3b:f6:01:ec:c7:59:a0:c1:92:72:7f:7f:d5:
91:b7:fd:f3:40:cc:8a:6b:7a:26:e0:1f:3d:e4:44:c0:fd:5a:
c4:e0:cc:bd:d5:d6:9d:87:07:3c:96:1c:12:cd:f4:d1:50:a5:
b9:48:3d:78:27:2b:82:2b:ea:e7:f8:40:5d:76:03:01:79:4e:
89:3e:f3:54:1b:cd:86:07:e5:75:54:2a:ba:1b:4a:75:90:e1:
0e:07:cd:9a:52:0a:3e:2d:1c:46:ab:5f:1f:82:2a:6c:85:de:
df:e6:39:b7:b0:6a:94:fd:d3:cc:1b:73:b9:2a:82:c4:20:c7:
05:99:4e:3e:dc:f2:62:8a:7c:c8:2b:28:37:4e:5a:67:57:70:
e5:fe:f2:ce:fc:50:aa:2b:0c:1e:70:9c:f7:67:de:31:32:55:
fe:0d:4c:ad:0b:cc:70:77:7d:cd:a0:78:df:56:38:df:18:5a:
05:d8:90:10:ff:2b:7c:15:93:2b:39:31:4a:4c:64:39:a0:af:
b0:35:32:e6:91:7e:7b:ac:8e:f5:e8:54:52:98:3c:04:0f:75:
c3:db:29:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+ECIulXKDI+a44Srr8FHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2
ZGY0OGIwHhcNMjUxMDE5MjAwMTM0WhcNMjUxMDIwMjAwMTM0WjAzMTEwLwYDVQQD
EyhhZGM1ZGI5ZGU2YzgxYzg2N2VlNTAxYzliZTNlNTVlNGVkMWQzZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3QHU6wKXMSYujaaX44cBDd48hd4
Nxvl5Kf3rOs/Yt7rWJuJ0dgM5l5vra9mp4NEH2X0LtmGUtRK8oxTujogQ7j5bMWm
gff+pCbBOARtQByqvhNxog5ErWhR5FkZn/wRUfgZDbq8b9VJZCWUZdDWW6tX+ZnM
kX/1mOjGd/D73vXFJyfsLLZ3qxH6mkDey2/K2quwHxC2Nmde7mBpNTtZ0Y836Mzf
emst7kdvGaBNaPoXD+R+OZ1DFqUxdttkscYP19QnbyfCz2Wjik+NIG2NadkHdfG/
He1TQSfw9v2fJpwFP7PAX1yaQavgV5/KnumfhVoiTwD4YxEiAN1k5jK1wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3F253myByGfuUByb4+VeTtHT8PMB8GA1UdIwQY
MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt
ZDFjNWYxYjUxZTE3LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3
LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpS4wi99
nQADTpi4XrI6OAR+HnPhuohqRTA6vEEllFwczrIoMShN+Uk79gHsx1mgwZJyf3/V
kbf980DMimt6JuAfPeREwP1axODMvdXWnYcHPJYcEs300VCluUg9eCcrgivq5/hA
XXYDAXlOiT7zVBvNhgfldVQquhtKdZDhDgfNmlIKPi0cRqtfH4IqbIXe3+Y5t7Bq
lP3TzBtzuSqCxCDHBZlOPtzyYop8yCsoN05aZ1dw5f7yzvxQqisMHnCc92feMTJV
/g1MrQvMcHd9zaB431Y43xhaBdiQEP8rfBWTKzkxSkxkOaCvsDUy5pF+e6yO9ehU
Upg8BA91w9spsQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:46:44 2025 by rpki-client