Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier: fpH6dZC5vyf76io/ICTqSjXVe6wNPcxAoRC+Yy8/nzI=
Subject key identifier: C5:E4:F5:6B:D2:D8:71:4F:FA:C1:E5:9D:E7:F1:77:55:D7:11:2B:4A
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 0199FC582DB6EA4CC44E5BF906EA5A867750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:01 +0000
Manifest this update: Sun 19 Oct 2025 12:01:01 +0000
Manifest next update: Mon 20 Oct 2025 12:01:01 +0000
Files and hashes: 1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=)
2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=)
3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: lovX2XUOjnms0qyrs7l8vj99gLpmceoScJ0Fa5YYJ6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2d:b6:ea:4c:c4:4e:5b:f9:06:ea:5a:86:77:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Oct 19 12:01:01 2025 GMT
Not After : Oct 20 12:01:01 2025 GMT
Subject: CN=c5e4f56bd2d8714ffac1e59de7f17755d7112b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:ce:01:4d:56:3c:e4:aa:2c:60:b1:92:07:
99:c4:4e:30:ab:a0:45:9b:d9:94:c5:c8:47:37:b4:
7b:18:08:b3:70:54:03:45:26:5f:51:e3:e1:0c:bd:
5f:2b:68:b4:ac:ad:44:93:a0:d7:e0:95:f9:61:66:
f1:b3:9e:72:49:96:54:01:bd:07:94:f7:eb:9c:ab:
3f:99:6e:f9:2c:f2:0e:3e:9d:01:1a:04:a1:4c:1c:
88:e0:2b:d3:a2:29:c6:38:12:3c:ac:3e:35:4c:f0:
d8:0a:1e:6b:f7:0e:d2:86:fe:35:c7:9d:0c:2b:83:
15:86:25:d7:c2:96:69:af:03:9b:f5:3d:87:9f:2f:
1c:f2:b3:76:da:fe:75:8d:34:1f:af:5d:51:1c:8c:
3a:61:e2:98:4e:8e:35:3f:bd:6a:f3:a9:54:dc:2f:
06:cf:07:33:83:57:a4:bf:3f:0d:99:aa:04:c3:04:
78:e0:52:c6:0a:80:e4:4c:23:a7:30:4e:02:0b:1a:
6d:0c:17:ec:6c:3c:7b:0c:90:36:6c:73:a3:d5:07:
b3:72:6f:82:8f:69:2e:11:4a:98:3e:53:99:80:a4:
04:8b:76:c8:b9:22:82:47:74:51:b4:ed:5b:be:27:
32:31:e3:1f:8f:18:68:99:e9:6d:5d:d3:17:d8:a6:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E4:F5:6B:D2:D8:71:4F:FA:C1:E5:9D:E7:F1:77:55:D7:11:2B:4A
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:66:d2:8f:76:9d:bf:25:8c:91:35:a8:32:27:03:e8:74:58:
f2:58:9a:e6:df:ec:3c:7d:bb:c2:ae:24:1e:54:63:7b:66:b2:
54:ca:49:c5:c2:b1:d8:91:db:98:2c:ef:1a:8c:ff:a9:10:cc:
b0:24:07:93:e6:ba:27:50:3a:d5:09:7b:f1:af:2d:90:c0:82:
ab:d4:31:11:5a:ca:27:95:f7:e3:04:f8:d6:31:19:eb:11:d9:
20:c2:65:8b:d3:da:b0:f6:3d:0b:d9:1a:6a:49:e1:6a:df:68:
6e:70:30:f5:65:b4:b9:08:74:e9:04:14:68:07:75:3e:a0:82:
2d:6c:d9:70:4b:16:0a:02:da:69:de:71:44:b9:4c:8b:a6:82:
20:b3:2e:39:56:2c:1e:21:43:1e:5b:8a:16:24:c1:4b:f6:bd:
73:93:f1:39:13:91:6e:eb:49:db:f0:2f:eb:2a:85:b5:05:fa:
33:ef:48:93:1c:fa:22:73:0e:5b:31:b1:e9:35:2c:29:c2:08:
e9:24:e7:6e:c6:f2:29:1f:02:a2:d8:df:03:fc:b9:45:25:a3:
03:21:17:33:45:62:b9:8d:e1:50:2b:21:0d:1b:5c:b4:14:c0:
d1:ee:95:71:0d:7f:4e:e0:b1:11:0c:11:6b:c0:94:4a:77:48:
f7:8a:6a:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WC226kzETlv5BupahndQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWE4Mzg1YTE0ZmQ5OTY3OTc4YWU3ZjA2ZWM0ZGQ1MjIy
OWE0NGEwHhcNMjUxMDE5MTIwMTAxWhcNMjUxMDIwMTIwMTAxWjAzMTEwLwYDVQQD
EyhjNWU0ZjU2YmQyZDg3MTRmZmFjMWU1OWRlN2YxNzc1NWQ3MTEyYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaXOAU1WPOSqLGCxkgeZxE4wq6BF
m9mUxchHN7R7GAizcFQDRSZfUePhDL1fK2i0rK1Ek6DX4JX5YWbxs55ySZZUAb0H
lPfrnKs/mW75LPIOPp0BGgShTByI4CvToinGOBI8rD41TPDYCh5r9w7Shv41x50M
K4MVhiXXwpZprwOb9T2Hny8c8rN22v51jTQfr11RHIw6YeKYTo41P71q86lU3C8G
zwczg1ekvz8NmaoEwwR44FLGCoDkTCOnME4CCxptDBfsbDx7DJA2bHOj1Qezcm+C
j2kuEUqYPlOZgKQEi3bIuSKCR3RRtO1bvicyMeMfjxhomeltXdMX2KY4+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXk9WvS2HFP+sHlnefxd1XXEStKMB8GA1UdIwQY
MBaAFGDqg4WhT9mWeXiufwbsTdUiKaRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEt
ZjU0NTc3ZjdjYzBmLzEvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEtZjU0NTc3ZjdjYzBm
LzEvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2bSj3ad
vyWMkTWoMicD6HRY8lia5t/sPH27wq4kHlRje2ayVMpJxcKx2JHbmCzvGoz/qRDM
sCQHk+a6J1A61Ql78a8tkMCCq9QxEVrKJ5X34wT41jEZ6xHZIMJli9PasPY9C9ka
aknhat9obnAw9WW0uQh06QQUaAd1PqCCLWzZcEsWCgLaad5xRLlMi6aCILMuOVYs
HiFDHluKFiTBS/a9c5PxORORbutJ2/Av6yqFtQX6M+9Ikxz6InMOWzGx6TUsKcII
6STnbsbyKR8CotjfA/y5RSWjAyEXM0ViuY3hUCshDRtctBTA0e6VcQ1/TuCxEQwR
a8CUSndI94pqyw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:04 2025 by rpki-client