Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: xPqcPLLFgkcKMyfyVRem6rJxSwGkAi5/4c+zCfzz4II=
Subject key identifier: 5C:D4:7B:3A:D1:02:80:C4:86:E2:F9:F0:D0:7B:73:9E:F4:4A:34:0F
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 0199FBEB770E887628C6A939A2E2693FCEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 01CC
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: qOgZBUf0ccZQxHEvq++X5i3W8EFtapnMUaYCv02jCHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:77:0e:88:76:28:c6:a9:39:a2:e2:69:3f:ce:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=5cd47b3ad10280c486e2f9f0d07b739ef44a340f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:44:63:ee:98:9c:e5:32:0f:a8:cf:7e:b2:
45:eb:4b:ac:2e:7e:5f:fa:7c:8d:81:db:34:00:fb:
b2:6b:5f:d0:c6:0d:01:69:a3:68:9a:20:07:b3:0b:
5f:6e:6c:4d:77:8c:a6:62:1b:c1:74:c1:40:92:ce:
87:f7:bb:1c:88:28:71:63:96:93:1b:50:4d:32:bb:
6c:84:0f:36:31:b7:86:cf:d1:6d:1b:64:08:53:b1:
35:45:e2:1b:1e:96:2c:a9:6b:3f:25:f7:83:36:bd:
86:48:ed:af:fd:5f:29:9b:a5:54:48:01:97:b0:a5:
60:52:c1:a6:0c:12:9c:3e:c5:94:b2:5d:a7:30:0b:
a4:10:1e:64:2c:02:7c:d3:e6:8e:fe:88:7a:a4:44:
07:41:03:0b:84:5a:74:0c:5c:62:9f:9b:f4:b9:2f:
8e:27:bd:a2:fa:3c:2c:cb:a9:8e:cf:df:4d:80:85:
c9:f5:c7:3a:da:e8:14:5c:6c:34:c2:55:26:98:af:
5d:44:67:cc:0d:83:d1:14:75:a7:d9:7f:96:16:bd:
5b:08:3f:af:8b:b3:60:02:86:d1:53:f8:a9:e0:78:
4e:27:37:6b:d7:fa:b4:a6:17:7c:3e:18:f1:b2:c5:
89:26:f5:e9:49:d8:4a:75:66:38:62:e5:4a:9f:63:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D4:7B:3A:D1:02:80:C4:86:E2:F9:F0:D0:7B:73:9E:F4:4A:34:0F
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1a:e4:e1:8f:f4:aa:19:e9:52:9f:dc:76:47:d4:3a:69:7f:
cc:8d:26:7e:22:e0:0b:16:54:36:8b:76:4b:ae:20:2a:46:36:
d0:ce:7d:6e:b2:06:98:74:8b:b7:65:27:28:a8:b0:5f:74:cf:
98:95:92:5d:a3:16:36:81:dd:50:bf:b2:be:81:2f:7b:fa:5a:
cd:eb:ba:7d:a4:ca:ab:94:ae:43:30:8f:f1:b4:97:cb:f0:17:
3b:e3:e8:c3:4f:81:a7:7d:6e:24:8c:c7:fb:7e:4e:68:7e:46:
b7:6a:2f:43:f7:25:a7:56:0a:d6:ec:bf:8c:97:2a:9c:36:7f:
9b:25:15:f4:61:5a:ca:96:87:ca:19:2f:ca:8d:74:90:b0:8b:
be:71:3c:90:72:75:c8:6c:dd:ea:81:df:11:54:0e:d8:46:63:
e4:10:47:b8:0b:91:7d:1a:af:4b:c5:8c:33:24:5e:68:de:dc:
25:c5:7c:ff:8f:5f:ed:b6:af:3a:e1:e5:9c:92:bd:bd:0a:f5:
69:f0:70:3d:e1:fb:69:97:d5:e9:23:4a:95:d2:45:b1:dc:75:
79:76:ea:70:2a:94:c4:da:e2:05:f5:d1:4c:d7:fb:fe:70:79:
f3:fd:59:19:74:93:4c:81:7a:65:17:13:d8:af:11:7a:2f:eb:
24:49:d6:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763cOiHYoxqk5ouJpP86zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDcwMzIzZjIzMTIyOWNhNjkxZjNlMDk1MTljMWFjODJm
MmVhMDEwHhcNMjUxMDE5MTAwMjE2WhcNMjUxMDIwMTAwMjE2WjAzMTEwLwYDVQQD
Eyg1Y2Q0N2IzYWQxMDI4MGM0ODZlMmY5ZjBkMDdiNzM5ZWY0NGEzNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUpEY+6YnOUyD6jPfrJF60usLn5f
+nyNgds0APuya1/Qxg0BaaNomiAHswtfbmxNd4ymYhvBdMFAks6H97sciChxY5aT
G1BNMrtshA82MbeGz9FtG2QIU7E1ReIbHpYsqWs/JfeDNr2GSO2v/V8pm6VUSAGX
sKVgUsGmDBKcPsWUsl2nMAukEB5kLAJ80+aO/oh6pEQHQQMLhFp0DFxin5v0uS+O
J72i+jwsy6mOz99NgIXJ9cc62ugUXGw0wlUmmK9dRGfMDYPRFHWn2X+WFr1bCD+v
i7NgAobRU/ip4HhOJzdr1/q0phd8PhjxssWJJvXpSdhKdWY4YuVKn2PvHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzUezrRAoDEhuL58NB7c570SjQPMB8GA1UdIwQY
MBaAFGNHAyPyMSKcppHz4JUZwayC8uoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUt
ZDQ1YzEyNDcyOTM1LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUtZDQ1YzEyNDcyOTM1
LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhrk4Y/0
qhnpUp/cdkfUOml/zI0mfiLgCxZUNot2S64gKkY20M59brIGmHSLt2UnKKiwX3TP
mJWSXaMWNoHdUL+yvoEve/pazeu6faTKq5SuQzCP8bSXy/AXO+Pow0+Bp31uJIzH
+35OaH5Gt2ovQ/clp1YK1uy/jJcqnDZ/myUV9GFaypaHyhkvyo10kLCLvnE8kHJ1
yGzd6oHfEVQO2EZj5BBHuAuRfRqvS8WMMyReaN7cJcV8/49f7bavOuHlnJK9vQr1
afBwPeH7aZfV6SNKldJFsdx1eXbqcCqUxNriBfXRTNf7/nB58/1ZGXSTTIF6ZRcT
2K8Rei/rJEnWjg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:53 2025 by rpki-client