Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: WyI7gbjx2sOq8nbxstV2R815VDyG+UGNX0+fnu3+7fI=
Subject key identifier: 35:A7:51:51:DB:41:3B:F4:39:A2:61:DF:F6:52:FE:B1:1B:01:5D:A9
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019A0035C61832FE896BC4861346E25DE5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1611
Signing time: Mon 20 Oct 2025 06:01:55 +0000
Manifest this update: Mon 20 Oct 2025 06:01:55 +0000
Manifest next update: Tue 21 Oct 2025 06:01:55 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: VuXvrqPofgACQJCVtnk12wLyx1zUC7AxrDsLaTK9EnE=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c6:18:32:fe:89:6b:c4:86:13:46:e2:5d:e5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Oct 20 06:01:55 2025 GMT
Not After : Oct 21 06:01:55 2025 GMT
Subject: CN=35a75151db413bf439a261dff652feb11b015da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:a5:c0:e4:d1:45:07:06:7b:7f:28:05:c1:
10:8c:b5:4b:89:0a:4d:10:59:5f:b6:92:8a:ba:68:
c5:36:12:a3:8f:bb:97:e6:8f:64:ca:52:f0:4d:e4:
8e:21:fc:16:c3:39:a7:f3:84:70:07:d7:9f:7e:33:
c0:d4:f1:bb:76:c2:a4:3d:80:1f:db:8c:c9:cb:48:
c1:1d:f3:7b:a4:8d:f4:8f:9c:d5:4e:25:22:88:81:
6e:03:46:ce:81:5e:7d:9b:94:b3:d6:5f:f1:09:84:
fa:e4:3f:6a:f2:48:6e:52:6e:06:91:ff:64:15:d5:
97:fa:34:90:27:b9:30:f6:bc:d4:58:7b:dd:64:a5:
1c:7f:57:69:ce:79:60:4b:52:96:1e:13:4c:f6:45:
dd:6b:de:3f:7e:6f:85:31:40:e5:8b:03:cc:d6:f6:
20:c9:59:67:e6:bb:bf:fb:a0:c5:a6:74:1c:80:32:
7f:21:20:01:e2:84:66:b4:33:b8:c3:32:bd:b5:00:
26:bc:ef:98:0e:1e:77:9a:4c:60:b6:f2:d3:37:48:
d8:a4:30:07:0f:f4:69:43:09:cb:05:ff:70:44:a7:
7c:99:51:44:d1:d7:83:a8:88:32:36:28:b1:d6:39:
58:6a:8a:63:57:50:10:1b:1d:ee:ec:5f:63:29:cb:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A7:51:51:DB:41:3B:F4:39:A2:61:DF:F6:52:FE:B1:1B:01:5D:A9
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:61:7a:28:24:43:b5:58:6e:89:54:54:34:37:99:37:20:6f:
d1:e2:e2:6d:37:af:59:63:1d:71:de:45:55:4c:00:cb:a3:00:
74:af:97:f2:a0:6a:a4:a6:12:41:6a:f2:dd:0f:ef:c7:e7:cc:
7e:7b:3f:58:dc:3a:0a:c3:10:a1:fb:d3:6c:61:9e:12:89:53:
f0:d8:d4:9d:26:fd:92:24:62:35:00:d5:23:e2:d7:3f:b3:b5:
b1:2f:b7:37:65:df:3d:da:08:6b:78:5d:48:fe:62:e2:36:ef:
d8:fe:88:54:1f:e0:e4:f7:ad:af:eb:72:ad:6b:2e:a7:da:cf:
21:dc:85:4c:fc:1a:44:b5:83:d0:24:7f:df:dd:9b:6a:74:5e:
ce:f0:f4:58:d2:48:30:6d:b4:be:5c:11:6e:0b:bd:9a:4e:b9:
bd:15:92:ec:16:69:17:45:dd:a3:84:53:85:93:91:fb:80:91:
a7:5c:19:ff:3d:d0:32:26:20:d0:7d:ce:23:81:2c:2a:70:29:
07:9b:af:a3:b8:73:72:00:61:62:bc:4c:c3:df:94:00:08:34:
9b:3d:f5:0f:86:0c:c5:68:f6:bb:1b:a1:ed:69:3c:81:48:b9:
4a:46:ca:f0:fd:8b:ef:6d:02:58:13:59:66:4d:9d:dd:1d:72:
e5:35:2d:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANcYYMv6Ja8SGE0biXeWpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1
NDFiMjUwHhcNMjUxMDIwMDYwMTU1WhcNMjUxMDIxMDYwMTU1WjAzMTEwLwYDVQQD
EygzNWE3NTE1MWRiNDEzYmY0MzlhMjYxZGZmNjUyZmViMTFiMDE1ZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ylwOTRRQcGe38oBcEQjLVLiQpN
EFlftpKKumjFNhKjj7uX5o9kylLwTeSOIfwWwzmn84RwB9effjPA1PG7dsKkPYAf
24zJy0jBHfN7pI30j5zVTiUiiIFuA0bOgV59m5Sz1l/xCYT65D9q8khuUm4Gkf9k
FdWX+jSQJ7kw9rzUWHvdZKUcf1dpznlgS1KWHhNM9kXda94/fm+FMUDliwPM1vYg
yVln5ru/+6DFpnQcgDJ/ISAB4oRmtDO4wzK9tQAmvO+YDh53mkxgtvLTN0jYpDAH
D/RpQwnLBf9wRKd8mVFE0deDqIgyNiix1jlYaopjV1AQGx3u7F9jKcu1TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWnUVHbQTv0OaJh3/ZS/rEbAV2pMB8GA1UdIwQY
MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt
ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz
LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmF6KCRD
tVhuiVRUNDeZNyBv0eLibTevWWMdcd5FVUwAy6MAdK+X8qBqpKYSQWry3Q/vx+fM
fns/WNw6CsMQofvTbGGeEolT8NjUnSb9kiRiNQDVI+LXP7O1sS+3N2XfPdoIa3hd
SP5i4jbv2P6IVB/g5Petr+tyrWsup9rPIdyFTPwaRLWD0CR/392banRezvD0WNJI
MG20vlwRbgu9mk65vRWS7BZpF0Xdo4RThZOR+4CRp1wZ/z3QMiYg0H3OI4EsKnAp
B5uvo7hzcgBhYrxMw9+UAAg0mz31D4YMxWj2uxuh7Wk8gUi5SkbK8P2L720CWBNZ
Zk2d3R1y5TUtjw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:29 2025 by rpki-client