Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json)
Hash identifier: W7EK3KFK9PH3an8bc8G4rKVKoJbTbQQdqOaZ/ztYlLY=
Subject key identifier: 32:25:3F:B3:C3:2C:0F:A8:28:BC:69:64:3F:70:7F:D6:4A:30:4B:56
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 0199FD346874D0EDCF5846938E1E7E57E109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: cLrxsl2vKbB4E9xWcma+qaDAFLWTjjv8s266Haof8PA=)
2: f5gkUuOv8CmtQpEO3xPPjhP9Wx4.roa (hash: XrKyMUfqix9Q7fDqjUpFFepbhKG4XNUKO4C0R0W/49E=)
3: u3PN03nF5VRKETuxZ9hrIBp3WRM.roa (hash: rHF4nTbYLmbRxQ2ai3QsJ15aqStQlt+XG0ZvOMJP3fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:68:74:d0:ed:cf:58:46:93:8e:1e:7e:57:e1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=32253fb3c32c0fa828bc69643f707fd64a304b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:6a:3d:b2:93:01:54:4a:8f:2d:83:04:95:
dd:16:7f:55:8f:17:95:10:e3:f1:a1:4f:39:a9:c8:
f9:ab:5c:5e:62:5a:62:29:02:ea:53:a7:8f:4c:55:
d4:bd:d8:3e:8d:9b:c0:5c:6f:0c:fb:db:a1:3d:cc:
a6:5d:57:68:77:ad:f1:bc:95:0d:33:ae:60:bf:bd:
c4:d6:40:c0:61:9f:dd:ec:8c:63:45:c1:c6:d9:a9:
2c:de:6a:4d:7b:b9:66:32:fa:6e:db:bc:12:e8:aa:
81:52:3e:4e:36:da:eb:2f:17:95:14:c7:f8:c2:ae:
c6:ba:ed:15:62:32:df:7c:88:99:30:06:57:02:f1:
90:de:17:30:f4:43:d7:71:1b:15:68:ca:1b:d6:0e:
b4:56:32:50:df:62:8c:c9:54:d7:83:ea:a8:84:3d:
52:45:2a:d8:66:98:36:5b:e8:92:e8:0a:59:d9:9c:
79:57:3b:41:9f:fc:db:45:db:3b:e9:1c:f8:f4:b8:
ad:50:b9:4b:6d:b8:4b:ee:9e:46:ef:61:5f:5b:aa:
ca:77:dc:b8:36:da:63:2f:2c:54:bb:a0:ee:3a:73:
81:07:e5:c5:3a:7f:69:68:1e:23:6b:57:ec:5e:14:
cf:31:eb:03:64:1c:66:d8:9f:37:92:a7:fa:e1:52:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:3F:B3:C3:2C:0F:A8:28:BC:69:64:3F:70:7F:D6:4A:30:4B:56
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:16:e0:47:e6:fc:cc:58:a7:6e:d4:fc:c1:33:a2:81:4d:e0:
5d:42:a9:19:0c:15:0d:56:b0:2b:cd:be:cf:dc:da:e8:cc:89:
5f:23:f4:32:9d:95:97:46:8c:cf:59:e6:67:a1:d2:b5:e8:50:
7e:31:3c:79:8c:da:f3:34:d3:66:5e:46:73:d0:b5:24:e8:07:
6e:40:93:c5:91:ab:38:34:60:31:fa:b1:22:cc:2b:62:55:a6:
5e:90:e0:92:86:d0:f2:19:3c:49:dd:51:af:20:f7:29:98:c1:
ad:a3:a9:c0:c0:03:11:76:76:2b:9f:de:fc:40:60:c1:59:f6:
1e:9b:4e:04:71:e0:94:26:b4:f2:02:ea:b8:24:35:11:26:7e:
f4:3c:3d:a4:0a:70:be:3b:93:d5:b8:08:c0:fd:db:e8:3e:7d:
54:67:bd:08:78:70:e0:92:f3:be:59:7c:b8:1a:16:24:1a:08:
50:9f:04:9e:9b:41:5d:33:fa:5d:df:5e:5d:31:50:90:2c:45:
4c:a1:1c:b9:b9:eb:3f:8b:a3:b2:60:6f:8e:de:7b:22:11:60:
9e:7f:58:72:db:90:e0:25:6b:05:d4:4e:8e:17:e5:fe:cf:3f:
f7:37:45:a8:4f:30:11:95:00:a0:40:78:af:f3:60:fe:c8:77:
7d:11:dc:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NGh00O3PWEaTjh5+V+EJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNzI1MmViYmIzMzQ4NGFkY2VjNzQwNWFkZWE0ZGUwOGEw
YWZiMDQwHhcNMjUxMDE5MTYwMTM0WhcNMjUxMDIwMTYwMTM0WjAzMTEwLwYDVQQD
EygzMjI1M2ZiM2MzMmMwZmE4MjhiYzY5NjQzZjcwN2ZkNjRhMzA0YjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqBqPbKTAVRKjy2DBJXdFn9VjxeV
EOPxoU85qcj5q1xeYlpiKQLqU6ePTFXUvdg+jZvAXG8M+9uhPcymXVdod63xvJUN
M65gv73E1kDAYZ/d7IxjRcHG2aks3mpNe7lmMvpu27wS6KqBUj5ONtrrLxeVFMf4
wq7Guu0VYjLffIiZMAZXAvGQ3hcw9EPXcRsVaMob1g60VjJQ32KMyVTXg+qohD1S
RSrYZpg2W+iS6ApZ2Zx5VztBn/zbRds76Rz49LitULlLbbhL7p5G72FfW6rKd9y4
NtpjLyxUu6DuOnOBB+XFOn9paB4ja1fsXhTPMesDZBxm2J83kqf64VK8PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIlP7PDLA+oKLxpZD9wf9ZKMEtWMB8GA1UdIwQY
MBaAFGFyUuu7M0hK3Ox0Ba3qTeCKCvsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMt
NjYzNWRlYmMzOTVjLzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMtNjYzNWRlYmMzOTVj
LzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxbgR+b8
zFinbtT8wTOigU3gXUKpGQwVDVawK82+z9za6MyJXyP0Mp2Vl0aMz1nmZ6HStehQ
fjE8eYza8zTTZl5Gc9C1JOgHbkCTxZGrODRgMfqxIswrYlWmXpDgkobQ8hk8Sd1R
ryD3KZjBraOpwMADEXZ2K5/e/EBgwVn2HptOBHHglCa08gLquCQ1ESZ+9Dw9pApw
vjuT1bgIwP3b6D59VGe9CHhw4JLzvll8uBoWJBoIUJ8EnptBXTP6Xd9eXTFQkCxF
TKEcubnrP4ujsmBvjt57IhFgnn9YctuQ4CVrBdROjhfl/s8/9zdFqE8wEZUAoEB4
r/Ng/sh3fRHczQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:53:56 2025 by rpki-client