Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier: rD6FmnJyX4e2IMrwrWOXisjmmDjKj287alNbnSFcihE=
Subject key identifier: 72:68:1A:55:B0:D1:32:96:83:A3:88:0B:2E:33:D2:AE:6D:D6:1A:EA
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 0199FB45EE002789ACB4CFB14F8911CAE6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number: 08F0
Signing time: Sun 19 Oct 2025 07:01:28 +0000
Manifest this update: Sun 19 Oct 2025 07:01:28 +0000
Manifest next update: Mon 20 Oct 2025 07:01:28 +0000
Files and hashes: 1: R4scpsswEHtZHUE-nwU3HaURKXg.roa (hash: og9/o35XSt8h5Pisf2/20OBVwfKzhDJ2QToFc39vgzg=)
2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: 3s44s1Yibe61GcZnkmBUa9Y7lP7/xPPobx1Jtu8hKKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ee:00:27:89:ac:b4:cf:b1:4f:89:11:ca:e6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Oct 19 07:01:28 2025 GMT
Not After : Oct 20 07:01:28 2025 GMT
Subject: CN=72681a55b0d1329683a3880b2e33d2ae6dd61aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:d7:d2:74:97:0b:b6:e8:5e:b7:ff:0d:cf:
03:fe:5d:63:6e:63:41:51:0b:21:2e:3d:c4:43:d6:
a0:6a:fe:19:7f:76:83:d9:59:65:88:83:10:a6:57:
14:48:2b:5b:6d:5c:95:89:be:05:45:1e:08:9d:5c:
d0:1e:81:f2:e5:a6:34:ba:44:25:21:10:ac:b8:ec:
34:3a:d8:bc:d8:c9:e2:ba:b7:88:43:91:c0:6c:a6:
70:f1:5e:65:41:79:20:47:f2:e0:ec:0d:07:b4:eb:
63:1c:eb:70:0b:84:b9:17:ea:d7:a2:67:0b:2c:c3:
a8:4c:bd:dc:b8:7b:3b:06:b2:5a:50:52:44:23:6b:
f6:80:66:11:b7:eb:56:23:f5:1c:7c:ed:15:c8:08:
1c:b2:45:ac:19:0a:f6:b2:03:df:df:7a:89:f3:d9:
91:05:57:e5:43:e3:d7:46:af:46:c2:c9:b7:3f:89:
fa:5b:36:fb:cf:22:aa:2f:b1:83:a2:88:b4:ae:58:
a3:86:df:35:33:b5:1e:57:c9:8b:3e:6d:b3:3d:b7:
50:1e:e2:49:eb:e9:79:ce:1c:93:f3:90:0c:0d:4f:
80:76:b5:1c:d7:68:fd:47:0d:e9:f3:23:3e:68:f6:
72:92:9c:20:03:52:8d:d7:4a:3f:a4:1c:01:bf:3b:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:1A:55:B0:D1:32:96:83:A3:88:0B:2E:33:D2:AE:6D:D6:1A:EA
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:87:33:9f:9b:ab:65:3f:d2:ee:44:ee:b9:44:88:52:66:1d:
40:7d:67:f0:ea:43:88:4b:6d:67:74:a3:0c:85:73:70:4c:34:
6c:fc:4a:ca:d9:8f:cc:0b:89:d6:1b:0f:b0:8e:83:de:40:af:
81:41:16:3f:e9:c0:ee:60:c2:d0:7b:03:43:b3:1f:d9:ab:60:
b7:3f:49:e7:88:ab:c5:a2:39:62:2e:ee:50:1d:f5:22:c4:46:
c1:60:b1:a9:46:2e:d0:d4:d4:be:42:ae:7e:9f:e6:d5:39:65:
d5:79:bc:50:34:62:97:a1:3a:6f:01:69:dc:c3:f7:48:3f:a4:
15:14:89:a4:9e:2c:fa:b3:66:61:42:91:8b:c1:fd:31:25:94:
28:d5:d9:32:cf:38:f3:fa:0b:21:b8:af:3f:bb:36:e5:7d:db:
41:4a:6c:1c:f2:f7:af:c4:73:7d:ed:a1:7c:dd:ac:ae:dd:ef:
58:42:85:61:64:05:9c:e9:68:e2:b0:c7:25:c9:d5:a0:5a:88:
58:a1:22:2e:1f:bf:6e:07:db:81:74:9b:1c:ec:06:26:ad:09:
4a:90:36:00:38:92:fe:0d:37:2c:1e:67:e1:7c:b9:a4:af:5d:
8f:b3:2c:5d:83:49:54:0c:f7:eb:82:31:14:16:a7:5e:a1:e2:
b6:04:09:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Re4AJ4mstM+xT4kRyuanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDc5OWM2N2MwODU0N2Q4MGJiMzVkMDJkYWU1MDVkNWE2
NWRjNWIwHhcNMjUxMDE5MDcwMTI4WhcNMjUxMDIwMDcwMTI4WjAzMTEwLwYDVQQD
Eyg3MjY4MWE1NWIwZDEzMjk2ODNhMzg4MGIyZTMzZDJhZTZkZDYxYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7zX0nSXC7boXrf/Dc8D/l1jbmNB
UQshLj3EQ9agav4Zf3aD2VlliIMQplcUSCtbbVyVib4FRR4InVzQHoHy5aY0ukQl
IRCsuOw0Oti82MniureIQ5HAbKZw8V5lQXkgR/Lg7A0HtOtjHOtwC4S5F+rXomcL
LMOoTL3cuHs7BrJaUFJEI2v2gGYRt+tWI/UcfO0VyAgcskWsGQr2sgPf33qJ89mR
BVflQ+PXRq9Gwsm3P4n6Wzb7zyKqL7GDooi0rlijht81M7UeV8mLPm2zPbdQHuJJ
6+l5zhyT85AMDU+AdrUc12j9Rw3p8yM+aPZykpwgA1KN10o/pBwBvzsUiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJoGlWw0TKWg6OICy4z0q5t1hrqMB8GA1UdIwQY
MBaAFGFHmcZ8CFR9gLs10C2uUF1aZdxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQt
MWRjMGI4NGExYzdlLzEvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQtMWRjMGI4NGExYzdl
LzEvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYczn5ur
ZT/S7kTuuUSIUmYdQH1n8OpDiEttZ3SjDIVzcEw0bPxKytmPzAuJ1hsPsI6D3kCv
gUEWP+nA7mDC0HsDQ7Mf2atgtz9J54irxaI5Yi7uUB31IsRGwWCxqUYu0NTUvkKu
fp/m1Tll1Xm8UDRil6E6bwFp3MP3SD+kFRSJpJ4s+rNmYUKRi8H9MSWUKNXZMs84
8/oLIbivP7s25X3bQUpsHPL3r8Rzfe2hfN2srt3vWEKFYWQFnOlo4rDHJcnVoFqI
WKEiLh+/bgfbgXSbHOwGJq0JSpA2ADiS/g03LB5n4Xy5pK9dj7MsXYNJVAz364Ix
FBanXqHitgQJvA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:38 2025 by rpki-client