Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: taHNKt2tWfzuTwFG3mHloyZ8DNk9K90my1ZCdG+Yc9k=
Subject key identifier: DB:30:1F:2B:49:E3:43:B6:BD:91:78:D3:BC:85:19:05:B2:22:3C:0A
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 0199FC58CB2BAF9096AF16D47D98663516EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 0150
Signing time: Sun 19 Oct 2025 12:01:41 +0000
Manifest this update: Sun 19 Oct 2025 12:01:41 +0000
Manifest next update: Mon 20 Oct 2025 12:01:41 +0000
Files and hashes: 1: XeHwlV4_nC5T8BptDxih7yIgLeg.roa (hash: SOsMIv7q0cLJ7sDVkddmO8lkJPy7j4qBPOmyU0Pco9g=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: rhKZPRmF4+I/oc95mquVmSD1pIArRGtf/EL95cgaIE0=)
3: _CP3e0WLgHreGwKUhpdfEeFss0U.roa (hash: QypuSrQ37amqxwFK8xiRJM3wGtIQUHMjSUwWELe4qw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cb:2b:af:90:96:af:16:d4:7d:98:66:35:16:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Oct 19 12:01:41 2025 GMT
Not After : Oct 20 12:01:41 2025 GMT
Subject: CN=db301f2b49e343b6bd9178d3bc851905b2223c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:16:ba:66:09:90:1e:40:7c:ec:34:98:48:
23:12:49:7f:d1:05:eb:04:a3:07:50:09:30:f7:43:
b2:79:54:88:b2:a6:94:fe:71:ae:20:d4:bb:18:cf:
ac:b6:48:c4:28:01:92:73:09:47:04:db:01:8c:8e:
a4:d6:f1:7d:47:a8:a4:6f:3b:4b:70:99:72:8e:ec:
9c:ef:38:c2:66:82:33:45:88:81:f8:20:ee:d4:4a:
79:e6:5e:06:ae:38:7f:ba:78:9f:4b:77:1c:05:6c:
eb:49:3e:b5:66:97:a5:bc:e5:73:8b:34:b1:39:c5:
2d:85:13:74:c2:1f:40:5b:25:dc:ab:09:0f:d4:d3:
d3:20:85:d7:e7:55:7f:82:c1:fc:ca:16:2a:cf:cc:
c9:8c:b3:8a:01:51:15:73:f9:0a:61:ff:60:ca:fb:
d8:e7:d1:30:ef:62:23:6a:7a:f1:e2:6f:b6:63:cc:
11:93:27:b1:a1:de:2d:8f:01:fe:e9:47:22:ce:6f:
0a:a9:d0:fb:b1:36:dc:d3:a9:89:5f:8f:32:7a:33:
8d:e1:69:7c:07:60:d9:46:c2:a1:d4:f6:cd:cd:e4:
2d:54:0d:2f:5e:1a:ab:14:e5:6f:9c:e7:d6:65:7e:
a6:9f:25:8d:54:6d:4f:05:cb:56:0a:64:db:08:88:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:30:1F:2B:49:E3:43:B6:BD:91:78:D3:BC:85:19:05:B2:22:3C:0A
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cb:79:ea:94:27:c1:df:6c:98:98:34:c9:a5:fe:8b:aa:d6:
1d:39:3b:b6:e2:bb:61:78:25:b2:2d:f3:6c:a1:55:f1:e4:9b:
f2:26:80:42:5e:0b:b9:d9:f2:51:5f:3c:6b:f1:3d:a9:02:00:
46:df:23:a0:d4:5d:58:4f:cf:5b:17:53:58:54:27:2e:50:05:
98:ba:0b:ea:b5:a3:8f:95:3d:d0:15:a8:b7:3d:8a:53:73:7c:
1f:00:82:6c:37:fb:51:36:a2:b0:ee:c9:62:21:08:a9:f3:a9:
55:aa:d4:fe:00:fb:4a:81:0e:a0:66:1b:be:54:b6:78:93:97:
a8:ea:43:c4:1e:65:4b:14:5d:19:e0:70:9d:f9:5c:68:da:f9:
de:77:7b:4e:11:fc:72:dd:18:58:e3:c7:1f:fc:d2:bf:1c:79:
49:4c:d2:0a:e4:df:fe:df:fb:b9:60:ea:f9:42:52:9a:b6:cc:
cc:8c:24:a6:ea:87:4a:ee:09:e9:17:5b:11:b8:c7:af:86:49:
6f:5b:08:47:53:44:b0:23:62:6a:d1:7b:90:94:5b:ae:65:22:
57:20:3c:b8:6a:95:eb:a5:d0:94:90:45:fc:45:5f:b2:43:6e:
ba:7b:71:34:f3:49:23:e2:46:76:f8:87:86:6e:2d:b1:0e:cf:
58:ce:39:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WMsrr5CWrxbUfZhmNRbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOWVhN2FiYWZjNTJjN2ZmYTIwYTdhNmFhZTRhZTJkMjYy
NTIwNzYwHhcNMjUxMDE5MTIwMTQxWhcNMjUxMDIwMTIwMTQxWjAzMTEwLwYDVQQD
EyhkYjMwMWYyYjQ5ZTM0M2I2YmQ5MTc4ZDNiYzg1MTkwNWIyMjIzYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmQWumYJkB5AfOw0mEgjEkl/0QXr
BKMHUAkw90OyeVSIsqaU/nGuINS7GM+stkjEKAGScwlHBNsBjI6k1vF9R6ikbztL
cJlyjuyc7zjCZoIzRYiB+CDu1Ep55l4Grjh/unifS3ccBWzrST61ZpelvOVzizSx
OcUthRN0wh9AWyXcqwkP1NPTIIXX51V/gsH8yhYqz8zJjLOKAVEVc/kKYf9gyvvY
59Ew72Ijanrx4m+2Y8wRkyexod4tjwH+6Ucizm8KqdD7sTbc06mJX48yejON4Wl8
B2DZRsKh1PbNzeQtVA0vXhqrFOVvnOfWZX6mnyWNVG1PBctWCmTbCIglQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNswHytJ40O2vZF407yFGQWyIjwKMB8GA1UdIwQY
MBaAFGCep6uvxSx/+iCnpqrkri0mJSB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEt
NDE3MGI4MmFkZjVkLzEvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEtNDE3MGI4MmFkZjVk
LzEvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQst56pQn
wd9smJg0yaX+i6rWHTk7tuK7YXglsi3zbKFV8eSb8iaAQl4LudnyUV88a/E9qQIA
Rt8joNRdWE/PWxdTWFQnLlAFmLoL6rWjj5U90BWotz2KU3N8HwCCbDf7UTaisO7J
YiEIqfOpVarU/gD7SoEOoGYbvlS2eJOXqOpDxB5lSxRdGeBwnflcaNr53nd7ThH8
ct0YWOPHH/zSvxx5SUzSCuTf/t/7uWDq+UJSmrbMzIwkpuqHSu4J6RdbEbjHr4ZJ
b1sIR1NEsCNiatF7kJRbrmUiVyA8uGqV66XQlJBF/EVfskNuuntxNPNJI+JGdviH
hm4tsQ7PWM45dA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:53 2025 by rpki-client