Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: +M4qqz9o3sPl9h5J1cgI7mb++us7JkVRyPDE5Q/G43I=
Subject key identifier: 1C:F8:47:01:BA:34:C0:5E:EB:38:E8:01:70:DE:32:DF:F2:25:32:D9
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 0199FDD99811A9E116BA3B5F200B8C63D996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 19:01:59 +0000
Manifest this update: Sun 19 Oct 2025 19:01:59 +0000
Manifest next update: Mon 20 Oct 2025 19:01:59 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: wBUKFsWf/JLuCxDWxM6unYG7+CrnnikM6w3QR8fYCjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:98:11:a9:e1:16:ba:3b:5f:20:0b:8c:63:d9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Oct 19 19:01:59 2025 GMT
Not After : Oct 20 19:01:59 2025 GMT
Subject: CN=1cf84701ba34c05eeb38e80170de32dff22532d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:b9:92:02:2c:a6:df:07:a3:5c:63:3f:60:
e3:20:28:56:9c:4c:57:9d:2f:a0:21:7f:8b:d9:c5:
4c:7a:85:e2:e0:6d:8d:ea:e0:20:72:78:7e:ac:87:
d9:80:99:cd:84:8a:9d:0a:72:63:84:b4:93:96:d1:
ff:79:32:96:e3:db:6a:03:bc:75:06:d3:1f:d1:6c:
f3:e0:aa:46:c9:0a:b0:1a:26:2f:02:18:b3:f9:8d:
3d:1a:8f:d2:08:9c:fa:ca:d7:b5:69:8d:59:53:61:
39:8e:72:5e:30:c5:7d:df:9d:49:61:cb:39:48:04:
45:cc:ba:34:59:ba:6c:ee:5f:99:34:df:3f:81:f7:
e3:d0:08:8b:c8:d4:52:9d:e7:c3:76:c8:c1:51:1f:
fa:a1:00:84:91:31:57:8a:67:79:60:bd:46:45:f6:
61:9b:57:43:56:13:bb:cb:77:03:9c:37:04:c6:f1:
2f:5f:7c:d2:6b:72:e6:b8:67:07:ee:f7:c5:af:2b:
cc:6b:fe:f2:73:98:69:7a:b5:9c:06:6c:a1:be:e9:
8b:98:a9:7b:83:e0:cc:12:f1:11:fa:38:a6:f6:f4:
b0:1b:f5:41:a1:a3:0f:59:b3:ca:0d:4e:32:56:10:
22:29:05:2c:75:5a:18:8d:65:33:c1:1f:c2:5f:15:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F8:47:01:BA:34:C0:5E:EB:38:E8:01:70:DE:32:DF:F2:25:32:D9
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:15:f9:a9:49:b0:4e:04:dc:80:d1:35:f8:7a:5e:58:cb:e8:
f8:1b:47:5b:b0:36:0d:56:c5:2a:a6:0c:21:71:9c:8a:0a:74:
1b:15:63:73:ab:da:ef:c7:17:d3:b1:9b:9f:70:45:54:b5:49:
45:57:4f:52:96:0a:3b:b5:dd:02:4c:4a:e3:03:5e:11:2a:4e:
14:71:e0:49:7c:42:71:80:57:d3:03:07:3d:0a:29:46:a2:d1:
66:e8:d9:dc:a2:e9:1f:84:55:2a:45:7f:e5:48:db:27:e4:0a:
3b:b2:b4:b6:9e:b9:0f:81:ca:a2:57:2c:2e:5a:e5:4b:a1:31:
13:1d:9d:d0:7f:ea:03:48:93:84:95:a5:44:af:c0:16:20:bf:
a2:91:6f:ee:06:03:d4:1c:bf:f8:f0:a6:e5:21:76:f0:cf:5e:
fc:d2:08:54:86:f7:ac:ba:cf:1a:13:72:b5:d3:0f:e8:3b:70:
1b:30:13:c2:af:ad:a8:38:fe:06:88:27:7a:54:13:8b:02:71:
15:73:d2:5c:86:45:54:26:3e:83:e2:4b:41:d3:cd:e8:ee:c1:
87:3e:c2:c1:01:ff:42:a7:f4:6b:db:e4:38:07:bf:ce:cb:4e:
87:57:37:68:79:ef:97:15:a8:2f:c6:3d:e3:57:51:ce:40:70:
51:5f:44:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92ZgRqeEWujtfIAuMY9mWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzc4NDNmMDc1MjIyNDQ1OWU2MDM0NTY5YTIxN2M4YjYx
MTU2NGIwHhcNMjUxMDE5MTkwMTU5WhcNMjUxMDIwMTkwMTU5WjAzMTEwLwYDVQQD
EygxY2Y4NDcwMWJhMzRjMDVlZWIzOGU4MDE3MGRlMzJkZmYyMjUzMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbe5kgIspt8Ho1xjP2DjIChWnExX
nS+gIX+L2cVMeoXi4G2N6uAgcnh+rIfZgJnNhIqdCnJjhLSTltH/eTKW49tqA7x1
BtMf0Wzz4KpGyQqwGiYvAhiz+Y09Go/SCJz6yte1aY1ZU2E5jnJeMMV9351JYcs5
SARFzLo0Wbps7l+ZNN8/gffj0AiLyNRSnefDdsjBUR/6oQCEkTFXimd5YL1GRfZh
m1dDVhO7y3cDnDcExvEvX3zSa3LmuGcH7vfFryvMa/7yc5hperWcBmyhvumLmKl7
g+DMEvER+jim9vSwG/VBoaMPWbPKDU4yVhAiKQUsdVoYjWUzwR/CXxUZwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz4RwG6NMBe6zjoAXDeMt/yJTLZMB8GA1UdIwQY
MBaAFMo3hD8HUiJEWeYDRWmiF8i2EVZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUt
OGZlNzg0ZTMxZTVkLzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUtOGZlNzg0ZTMxZTVk
LzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxX5qUmw
TgTcgNE1+HpeWMvo+BtHW7A2DVbFKqYMIXGcigp0GxVjc6va78cX07Gbn3BFVLVJ
RVdPUpYKO7XdAkxK4wNeESpOFHHgSXxCcYBX0wMHPQopRqLRZujZ3KLpH4RVKkV/
5UjbJ+QKO7K0tp65D4HKolcsLlrlS6ExEx2d0H/qA0iThJWlRK/AFiC/opFv7gYD
1By/+PCm5SF28M9e/NIIVIb3rLrPGhNytdMP6DtwGzATwq+tqDj+BognelQTiwJx
FXPSXIZFVCY+g+JLQdPN6O7Bhz7CwQH/Qqf0a9vkOAe/zstOh1c3aHnvlxWoL8Y9
41dRzkBwUV9E4g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:34 2025 by rpki-client