Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
File: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft (raw, json)
Hash identifier: a+gSm/8xGMrgADYc4sud4jR5JhNnvp0Va9g78MKRe6M=
Subject key identifier: AE:B0:4F:FA:24:23:62:87:0E:AA:65:29:97:18:21:B7:DB:00:A0:FB
Authority key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Certificate issuer: /CN=63e30980305345fd5365b3515e3568f9cee58541
Certificate serial: 0199FBEB9B5BE22C2CC478B64E10553B53FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: Hs2TvjBAbChswFTm05pNrXJsCJA.roa (hash: xtJBUOZoNvBaKTOo18EAAqIaZQ4IjdLX9G/viT94FJA=)
2: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl (hash: v6fA6s/qIY9kcChT3RszoWPUORBe2QVA3afsQ1hrS2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9b:5b:e2:2c:2c:c4:78:b6:4e:10:55:3b:53:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e30980305345fd5365b3515e3568f9cee58541
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=aeb04ffa242362870eaa6529971821b7db00a0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:61:fe:c8:89:4a:55:9b:a5:15:49:5e:2a:
79:65:1d:f7:54:35:bb:57:86:66:2c:3a:bc:11:b3:
68:13:c7:d1:73:af:64:67:ca:65:97:c5:7f:e0:87:
69:d2:11:75:42:5e:7a:29:42:bb:40:a5:d3:ae:56:
7d:eb:46:c1:d6:0c:96:ce:e4:41:0e:39:f9:af:28:
84:10:10:06:75:41:c1:cf:3f:77:06:40:9e:b3:2a:
4a:68:26:2d:62:f5:e1:fb:27:5c:0f:71:26:68:fe:
3f:ea:c7:99:82:c9:6e:bf:23:e5:fe:15:4f:3f:40:
ed:3a:1b:ca:5f:37:bd:df:c7:3c:f7:ab:0f:79:f4:
fc:25:17:6b:ea:88:8b:98:bc:3c:90:af:8e:bb:8c:
d6:3a:71:63:46:eb:f7:9a:67:c5:ac:0b:7d:8b:af:
8a:86:5e:6e:e0:be:a6:33:94:02:90:77:6e:ab:67:
a1:52:aa:c8:04:04:0e:da:43:7b:cc:fb:25:27:a3:
9e:78:9f:aa:ef:4c:dd:9a:0f:76:17:21:fe:6e:f6:
6f:63:ff:e9:bd:97:aa:12:b9:6f:e2:76:87:3b:75:
c3:5b:10:b1:af:ce:c0:cd:dc:33:ca:2a:58:9e:e1:
d9:65:d5:0c:ec:2e:24:f0:4b:4f:b8:8c:d9:4c:91:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B0:4F:FA:24:23:62:87:0E:AA:65:29:97:18:21:B7:DB:00:A0:FB
X509v3 Authority Key Identifier:
keyid:63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:45:98:94:19:5d:a0:74:aa:c2:06:10:4a:2e:51:21:9b:0f:
2c:5f:f0:21:db:72:39:80:41:c5:f7:e2:8a:12:f6:f8:84:0b:
06:15:95:a5:18:c3:0a:03:57:ea:ea:22:9f:21:ab:5b:82:99:
ec:97:ee:5d:94:0b:2d:7b:35:97:de:b6:6f:b2:e9:8b:6a:65:
e3:f8:35:ed:f7:34:fa:65:32:7a:0a:86:af:73:ec:10:df:db:
99:8d:29:05:ed:9c:7b:cf:f3:22:85:cd:cd:f0:ee:53:4d:d5:
59:4f:b0:d3:bc:cc:35:7f:9e:1a:00:8b:de:09:d2:86:f1:c5:
88:be:79:d7:11:30:1a:02:4b:b1:bb:05:51:aa:15:bc:44:f5:
74:25:90:97:64:79:54:ea:00:83:3d:23:57:f7:5b:9e:3f:0b:
e4:09:07:91:1b:2b:35:7f:2c:6f:3a:57:91:65:90:fe:42:73:
a4:b8:37:e7:8f:cc:f1:a7:0c:5e:49:8e:b6:b7:05:32:02:a1:
77:d8:15:36:99:ca:28:8e:4d:ea:e9:9d:b6:55:a0:24:2a:3f:
73:05:76:8d:d1:c9:e6:18:53:af:ba:71:4a:c9:5f:0c:fd:07:
6e:55:ff:2e:9d:fc:18:49:2b:c6:61:ee:50:81:04:88:66:ef:
7a:86:1d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn765tb4iwsxHi2ThBVO1P/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTMwOTgwMzA1MzQ1ZmQ1MzY1YjM1MTVlMzU2OGY5Y2Vl
NTg1NDEwHhcNMjUxMDE5MTAwMjI1WhcNMjUxMDIwMTAwMjI1WjAzMTEwLwYDVQQD
EyhhZWIwNGZmYTI0MjM2Mjg3MGVhYTY1Mjk5NzE4MjFiN2RiMDBhMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApddh/siJSlWbpRVJXip5ZR33VDW7
V4ZmLDq8EbNoE8fRc69kZ8pll8V/4Idp0hF1Ql56KUK7QKXTrlZ960bB1gyWzuRB
Djn5ryiEEBAGdUHBzz93BkCesypKaCYtYvXh+ydcD3EmaP4/6seZgsluvyPl/hVP
P0DtOhvKXze938c896sPefT8JRdr6oiLmLw8kK+Ou4zWOnFjRuv3mmfFrAt9i6+K
hl5u4L6mM5QCkHduq2ehUqrIBAQO2kN7zPslJ6OeeJ+q70zdmg92FyH+bvZvY//p
vZeqErlv4naHO3XDWxCxr87AzdwzyipYnuHZZdUM7C4k8EtPuIzZTJFrCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6wT/okI2KHDqplKZcYIbfbAKD7MB8GA1UdIwQY
MBaAFGPjCYAwU0X9U2WzUV41aPnO5YVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1NSmdEQlRSZjFUWmJOUlhqVm8tYzdsaFVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjU3ODctYzJjOC00MjliLTgxMzct
Y2JmNmMxODQ5YzQ0LzEvWS1NSmdEQlRSZjFUWmJOUlhqVm8tYzdsaFVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYjU3ODctYzJjOC00MjliLTgxMzctY2JmNmMxODQ5YzQ0
LzEvWS1NSmdEQlRSZjFUWmJOUlhqVm8tYzdsaFVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkWYlBld
oHSqwgYQSi5RIZsPLF/wIdtyOYBBxffiihL2+IQLBhWVpRjDCgNX6uoinyGrW4KZ
7JfuXZQLLXs1l962b7Lpi2pl4/g17fc0+mUyegqGr3PsEN/bmY0pBe2ce8/zIoXN
zfDuU03VWU+w07zMNX+eGgCL3gnShvHFiL551xEwGgJLsbsFUaoVvET1dCWQl2R5
VOoAgz0jV/dbnj8L5AkHkRsrNX8sbzpXkWWQ/kJzpLg354/M8acMXkmOtrcFMgKh
d9gVNpnKKI5N6umdtlWgJCo/cwV2jdHJ5hhTr7pxSslfDP0HblX/Lp38GEkrxmHu
UIEEiGbveoYdrQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:08 2025 by rpki-client