Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
File: YcGgEMsk-ZbneJixJHJbVbY0OOA.mft (raw, json)
Hash identifier: r0N8fNgKQPzHmFS5VYsKiS5TfFZOk2RqIpCXUCgs+8I=
Subject key identifier: D6:18:86:D8:9E:85:85:2E:B1:15:FD:74:89:E4:69:E9:DD:83:8C:1A
Authority key identifier: 61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0
Certificate issuer: /CN=61c1a010cb24f996e77898b124725b55b63438e0
Certificate serial: 0199FBEAEC6D3DBCB62236127A8EF1711368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: YcGgEMsk-ZbneJixJHJbVbY0OOA.crl (hash: jG9E7i+Mt5ohTKwGfQj7JRFqU97Bk8Jx7sg92babwsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ec:6d:3d:bc:b6:22:36:12:7a:8e:f1:71:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c1a010cb24f996e77898b124725b55b63438e0
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=d61886d89e85852eb115fd7489e469e9dd838c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:ad:1b:bd:73:30:d2:92:a3:7a:52:b6:38:
36:e6:f4:90:ae:53:d6:3e:b4:36:75:d6:7f:30:90:
64:c4:b5:db:a9:ab:72:d2:7c:3b:23:6e:cf:04:36:
22:c2:ca:80:0f:c4:68:35:22:f2:3e:b1:18:46:b2:
a7:8c:29:b1:b5:67:8c:86:b5:f9:27:49:2d:2b:0e:
e3:f5:c4:a9:a4:49:fb:9f:a7:9f:db:9c:69:fe:be:
16:48:c4:3a:c6:92:2c:df:e6:f2:ba:c2:22:a1:5d:
fd:36:1a:9e:35:b2:09:55:6b:28:f1:50:23:8f:5c:
ba:4f:b1:54:56:41:54:a0:23:37:1b:8f:2d:70:f4:
df:93:2b:6a:7c:81:84:4f:33:09:a4:8d:42:52:7c:
2c:20:b8:6f:63:85:03:92:95:41:96:fc:06:bf:36:
70:3f:da:1d:ac:30:87:ec:22:2d:91:b1:f1:c1:af:
c5:bc:f5:d8:0f:8d:59:a1:bb:1f:da:c0:35:9d:d7:
5c:8f:ea:5b:97:68:b0:a3:b0:74:83:84:17:19:e2:
bf:f3:48:29:73:f9:49:ef:22:06:78:ed:27:59:e7:
ff:6f:5b:c1:c5:02:ea:c8:0a:1c:8b:92:5f:35:30:
fb:e8:7b:15:e8:bb:6c:ac:21:01:31:5e:27:54:ed:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:86:D8:9E:85:85:2E:B1:15:FD:74:89:E4:69:E9:DD:83:8C:1A
X509v3 Authority Key Identifier:
keyid:61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:24:d6:e2:46:88:7a:ae:a1:db:c3:54:c7:2d:02:b0:a9:5e:
2d:0e:d4:4f:4e:63:5e:95:e7:9e:4f:a5:c6:7a:a2:77:6e:8f:
19:b1:1b:ef:64:86:cc:b5:5f:40:b7:9e:3c:f1:5f:19:7d:a2:
63:f7:6c:cf:63:ec:7f:2b:22:f7:6d:57:07:79:78:fa:25:4f:
cd:3c:f5:8b:5b:c3:30:c7:d5:ad:2a:96:62:6d:90:00:c0:b8:
33:dd:90:09:30:e3:a1:98:08:3d:ef:9c:76:74:03:6d:56:cf:
24:b8:c9:c4:ad:77:33:fc:f1:a1:12:4e:f3:d4:bb:d6:0c:f6:
92:c2:ee:6e:aa:45:cf:63:28:75:56:61:41:2c:fa:ec:20:ff:
a1:59:57:fb:d6:b7:ff:74:03:12:32:ac:83:90:3b:c8:f4:72:
d7:4a:ef:e5:25:01:55:91:70:fd:5e:cd:56:70:46:c5:e9:47:
23:ec:40:49:98:66:38:ff:d8:23:50:07:6e:89:af:1f:cb:0e:
bc:08:43:e1:bc:c2:0d:2e:d4:0d:2c:1f:69:27:e2:a3:a2:96:
5b:e6:96:fd:ae:a5:ee:72:d5:cb:a1:6f:8a:ac:06:3a:87:42:
b1:ee:2c:a0:b1:9f:b5:62:ee:c1:5c:be:8d:1e:86:a1:38:39:
f3:35:c9:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76uxtPby2IjYSeo7xcRNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYzFhMDEwY2IyNGY5OTZlNzc4OThiMTI0NzI1YjU1YjYz
NDM4ZTAwHhcNMjUxMDE5MTAwMTQxWhcNMjUxMDIwMTAwMTQxWjAzMTEwLwYDVQQD
EyhkNjE4ODZkODllODU4NTJlYjExNWZkNzQ4OWU0NjllOWRkODM4YzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6CtG71zMNKSo3pStjg25vSQrlPW
PrQ2ddZ/MJBkxLXbqaty0nw7I27PBDYiwsqAD8RoNSLyPrEYRrKnjCmxtWeMhrX5
J0ktKw7j9cSppEn7n6ef25xp/r4WSMQ6xpIs3+byusIioV39NhqeNbIJVWso8VAj
j1y6T7FUVkFUoCM3G48tcPTfkytqfIGETzMJpI1CUnwsILhvY4UDkpVBlvwGvzZw
P9odrDCH7CItkbHxwa/FvPXYD41Zobsf2sA1nddcj+pbl2iwo7B0g4QXGeK/80gp
c/lJ7yIGeO0nWef/b1vBxQLqyAoci5JfNTD76HsV6LtsrCEBMV4nVO1bcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYYhtiehYUusRX9dInkaendg4waMB8GA1UdIwQY
MBaAFGHBoBDLJPmW53iYsSRyW1W2NDjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWNHZ0VNc2stWmJuZUppeEpISmJWYlkwT09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zM2MxYzAtNGNiOC00NGI5LWEzZTkt
ZTllOTkzN2I4ZGNlLzEvWWNHZ0VNc2stWmJuZUppeEpISmJWYlkwT09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zM2MxYzAtNGNiOC00NGI5LWEzZTktZTllOTkzN2I4ZGNl
LzEvWWNHZ0VNc2stWmJuZUppeEpISmJWYlkwT09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4iTW4kaI
eq6h28NUxy0CsKleLQ7UT05jXpXnnk+lxnqid26PGbEb72SGzLVfQLeePPFfGX2i
Y/dsz2Psfysi921XB3l4+iVPzTz1i1vDMMfVrSqWYm2QAMC4M92QCTDjoZgIPe+c
dnQDbVbPJLjJxK13M/zxoRJO89S71gz2ksLubqpFz2ModVZhQSz67CD/oVlX+9a3
/3QDEjKsg5A7yPRy10rv5SUBVZFw/V7NVnBGxelHI+xASZhmOP/YI1AHbomvH8sO
vAhD4bzCDS7UDSwfaSfio6KWW+aW/a6l7nLVy6FviqwGOodCse4soLGftWLuwVy+
jR6GoTg58zXJlQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:26 2025 by rpki-client