
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier: Vy+xyHloot/vaSuIqTlcwm7tb7aJ7rwaZ8yzpaem5TU=
Subject key identifier: F2:48:39:78:3E:D4:1F:28:D2:0F:39:14:EE:A5:D2:1C:7C:11:F9:37
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 0199FAD8247EC8BB177F3D183AAFDD9F17ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 05:01:32 +0000
Manifest this update: Sun 19 Oct 2025 05:01:32 +0000
Manifest next update: Mon 20 Oct 2025 05:01:32 +0000
Files and hashes: 1: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: EwXbU4FKaMb5oE2VPk6xKh2zF+Y1ffw0A2tXZx7WjbM=)
2: sWYhGXeqyssjSaIBaIHXBsJLaf0.roa (hash: kaXrbIabkDodddf746vh0MWQpeqh3LiJ27zAPi60XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:24:7e:c8:bb:17:7f:3d:18:3a:af:dd:9f:17:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: Oct 19 05:01:32 2025 GMT
Not After : Oct 20 05:01:32 2025 GMT
Subject: CN=f24839783ed41f28d20f3914eea5d21c7c11f937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:85:37:69:97:11:69:da:56:f0:7a:1e:39:
ff:ba:8c:e8:d5:b7:ee:9c:ea:4e:b1:46:c5:5d:7e:
15:33:66:63:fe:2d:a7:8b:a2:ee:01:5b:45:16:b7:
08:b6:af:c3:aa:13:8f:ec:1e:48:24:a3:fa:a4:0e:
c9:ba:fc:ee:ff:19:ed:29:51:ae:84:9d:99:ae:7f:
43:00:26:50:9e:d0:3f:c6:4a:40:74:da:4a:e0:06:
25:63:cd:b9:29:8c:c8:00:dc:db:56:bb:69:88:5e:
f1:c3:2b:34:ad:51:9f:d1:e6:64:b4:7e:38:5b:43:
0c:13:b4:03:32:bf:a8:fd:2d:4a:80:8e:4a:52:fe:
bf:9e:7c:31:a5:35:4b:95:f3:22:36:0f:8a:8e:50:
08:25:7a:d2:32:36:fe:cf:14:e2:ab:37:40:88:6c:
b7:18:d1:fc:f9:11:ba:97:02:52:f2:3a:28:60:3a:
05:55:8a:da:72:af:2b:16:57:e3:fb:52:08:3a:c3:
84:de:a5:d7:3d:57:f0:eb:83:dc:92:79:f2:b8:fd:
c6:09:93:2c:52:85:aa:0f:02:ab:e3:85:47:92:c7:
e3:a2:e1:05:62:d5:73:4c:3f:29:04:01:1b:22:9e:
10:97:97:10:af:25:c7:26:4f:73:1e:0e:e7:a1:0f:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:48:39:78:3E:D4:1F:28:D2:0F:39:14:EE:A5:D2:1C:7C:11:F9:37
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2b:93:d4:28:4d:77:c6:f8:e3:82:bd:05:be:cf:61:10:40:
e4:d9:bb:5a:87:58:86:3c:b4:86:7b:ef:11:53:98:33:c9:83:
d1:e6:7e:a1:d2:c6:a7:3e:2d:73:45:d9:c8:fd:6d:ca:68:f2:
48:be:2c:e3:d4:f2:7d:79:21:e5:ba:a6:3d:57:85:36:19:21:
ee:c0:07:e3:9e:b5:5d:c1:0f:72:0b:16:91:a6:4f:8d:37:40:
ed:70:51:72:34:87:0e:11:9f:d2:15:0c:1a:bb:5f:7d:ac:b1:
b3:51:87:d5:83:42:44:b3:36:34:f0:dd:f6:c7:b6:24:2e:51:
ef:47:78:00:f4:af:45:d3:1f:7d:bf:3b:ad:c3:d9:89:0d:6c:
46:4f:ac:d8:f8:73:f4:00:76:a1:57:c9:91:5f:36:9d:98:74:
06:6e:b1:cc:89:1a:1f:33:65:bf:34:cf:be:f8:c1:8c:93:46:
94:4b:2b:e4:b1:9b:3c:69:08:30:bb:d1:9b:68:20:62:b7:75:
fb:12:4b:39:3a:11:ea:21:31:30:e1:ff:b1:36:38:01:5c:b6:
6b:62:86:43:90:3b:d6:0f:0b:ec:67:c2:69:f8:4e:27:d2:e6:
32:ee:8e:85:1b:ad:0c:75:15:4c:96:8d:02:9a:47:7d:06:da:
74:df:ae:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62CR+yLsXfz0YOq/dnxftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjQ5OGI3N2FkOTljZDM2ZTg3NmYwZTJmZWQ2OTk4MTky
YmM2MTIwHhcNMjUxMDE5MDUwMTMyWhcNMjUxMDIwMDUwMTMyWjAzMTEwLwYDVQQD
EyhmMjQ4Mzk3ODNlZDQxZjI4ZDIwZjM5MTRlZWE1ZDIxYzdjMTFmOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0eFN2mXEWnaVvB6Hjn/uozo1bfu
nOpOsUbFXX4VM2Zj/i2ni6LuAVtFFrcItq/DqhOP7B5IJKP6pA7Juvzu/xntKVGu
hJ2Zrn9DACZQntA/xkpAdNpK4AYlY825KYzIANzbVrtpiF7xwys0rVGf0eZktH44
W0MME7QDMr+o/S1KgI5KUv6/nnwxpTVLlfMiNg+KjlAIJXrSMjb+zxTiqzdAiGy3
GNH8+RG6lwJS8jooYDoFVYracq8rFlfj+1IIOsOE3qXXPVfw64PcknnyuP3GCZMs
UoWqDwKr44VHksfjouEFYtVzTD8pBAEbIp4Ql5cQryXHJk9zHg7noQ9/owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJIOXg+1B8o0g85FO6l0hx8Efk3MB8GA1UdIwQY
MBaAFGO0mLd62ZzTbodvDi/taZgZK8YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2It
OTdkY2RhM2EzY2E1LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zYjQ5ZDQtZDkyZS00ZmI2LWFiN2ItOTdkY2RhM2EzY2E1
LzEvWTdTWXQzclpuTk51aDI4T0wtMXBtQmtyeGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSuT1ChN
d8b444K9Bb7PYRBA5Nm7WodYhjy0hnvvEVOYM8mD0eZ+odLGpz4tc0XZyP1tymjy
SL4s49TyfXkh5bqmPVeFNhkh7sAH4561XcEPcgsWkaZPjTdA7XBRcjSHDhGf0hUM
Grtffayxs1GH1YNCRLM2NPDd9se2JC5R70d4APSvRdMffb87rcPZiQ1sRk+s2Phz
9AB2oVfJkV82nZh0Bm6xzIkaHzNlvzTPvvjBjJNGlEsr5LGbPGkIMLvRm2ggYrd1
+xJLOToR6iExMOH/sTY4AVy2a2KGQ5A71g8L7GfCafhOJ9LmMu6OhRutDHUVTJaN
AppHfQbadN+u7A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:49 2025 by rpki-client