Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: E/bdTq8CQQh63GoTkTlQhLMmm+warsJwrpPB8C2yprs=
Subject key identifier: C7:84:11:AD:47:A3:F8:08:8B:3E:75:CE:1E:9F:89:10:C5:66:E3:E6
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 0199FC58F0203878FF088C172D9421082C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 034F
Signing time: Sun 19 Oct 2025 12:01:50 +0000
Manifest this update: Sun 19 Oct 2025 12:01:50 +0000
Manifest next update: Mon 20 Oct 2025 12:01:50 +0000
Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: dTsKux8QZ/Q3EhFa+Ty1CdRQ91RnZKCNa5Dq94kCApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f0:20:38:78:ff:08:8c:17:2d:94:21:08:2c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Oct 19 12:01:50 2025 GMT
Not After : Oct 20 12:01:50 2025 GMT
Subject: CN=c78411ad47a3f8088b3e75ce1e9f8910c566e3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:64:62:38:86:c3:be:e7:1a:8c:92:3f:f1:
e8:b6:4a:16:c6:5a:45:ec:f7:da:03:e3:7d:31:a9:
97:72:f4:6c:23:ee:9b:9a:93:fd:bb:f6:fb:ef:1d:
ae:16:fd:07:47:7f:22:c0:d4:c0:f6:f4:9c:78:14:
cf:3d:36:f1:fb:8e:8e:ba:9a:28:18:35:0c:c8:5f:
a5:96:a0:2b:2c:b9:94:af:3a:df:dc:8d:a4:5e:7d:
b1:fd:83:1d:ec:aa:64:ce:05:0f:90:35:a2:6d:9a:
e4:ed:4e:7d:43:87:e3:df:ff:6d:17:43:e4:15:b5:
2f:b6:51:5e:f8:8f:27:fc:56:b6:d4:07:76:8a:c5:
44:ae:5a:b2:6d:0b:b5:8c:ae:9e:c4:1e:10:7b:39:
78:c6:33:dc:36:06:da:f9:17:58:89:aa:60:e8:c7:
45:22:c2:80:02:f0:b3:0c:94:10:9c:e8:ef:11:3b:
a6:b1:fd:e2:9a:76:41:49:c0:7f:d8:cc:1b:9b:c6:
df:86:8b:06:a0:ec:ac:35:da:9b:93:9e:ef:1d:95:
83:98:48:82:c2:1c:8a:5d:ab:48:75:2a:5a:16:47:
64:b6:c0:d4:4d:d0:82:5e:07:7e:8a:83:39:39:4b:
76:03:b8:71:0a:06:46:1d:fd:09:a4:8a:d2:17:f5:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:11:AD:47:A3:F8:08:8B:3E:75:CE:1E:9F:89:10:C5:66:E3:E6
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:10:de:0a:4c:ec:db:ab:a9:67:59:a8:38:b8:dd:34:a2:bd:
1a:33:9f:66:77:47:a4:ea:78:2b:0d:b9:d1:97:16:08:e7:6b:
dd:54:77:bf:ae:7d:88:ad:58:40:b6:59:7b:fb:9c:f0:1f:96:
df:46:3e:5c:1d:f8:a8:f6:ac:04:59:92:fa:4d:16:26:c7:2d:
62:14:5f:a3:c3:70:33:6f:c1:2d:d0:74:fb:77:7f:38:61:4d:
b3:b9:cf:e8:21:45:08:f0:15:1a:66:1c:c8:4f:5a:17:b8:d7:
85:6a:92:12:8b:af:5a:76:46:11:18:5c:29:95:63:c6:ff:72:
84:85:ad:3f:c3:ac:d3:2c:03:b6:80:69:a9:09:af:c4:52:4a:
d8:d9:88:08:2c:95:3a:bd:ca:09:b0:65:ef:dc:51:6e:4b:87:
ed:26:72:b5:05:46:cf:df:5e:46:5a:58:e3:dd:42:db:78:0b:
f0:fc:de:5c:58:d5:b1:e4:cf:37:6f:59:42:2f:a7:61:fa:c6:
8e:76:76:56:07:30:7f:c9:ad:41:49:a1:87:c0:12:b9:6e:b3:
10:77:2e:a5:2d:20:a7:a8:80:90:f1:25:11:85:e8:a0:8b:83:
37:38:73:58:8e:7b:c9:6c:d1:be:20:a0:d4:62:9e:2a:60:cd:
e7:b8:11:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPAgOHj/CIwXLZQhCCyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm
ZTI2MWQwHhcNMjUxMDE5MTIwMTUwWhcNMjUxMDIwMTIwMTUwWjAzMTEwLwYDVQQD
EyhjNzg0MTFhZDQ3YTNmODA4OGIzZTc1Y2UxZTlmODkxMGM1NjZlM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlNkYjiGw77nGoySP/HotkoWxlpF
7PfaA+N9MamXcvRsI+6bmpP9u/b77x2uFv0HR38iwNTA9vSceBTPPTbx+46Oupoo
GDUMyF+llqArLLmUrzrf3I2kXn2x/YMd7KpkzgUPkDWibZrk7U59Q4fj3/9tF0Pk
FbUvtlFe+I8n/Fa21Ad2isVErlqybQu1jK6exB4Qezl4xjPcNgba+RdYiapg6MdF
IsKAAvCzDJQQnOjvETumsf3imnZBScB/2Mwbm8bfhosGoOysNdqbk57vHZWDmEiC
whyKXatIdSpaFkdktsDUTdCCXgd+ioM5OUt2A7hxCgZGHf0JpIrSF/W6gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeEEa1Ho/gIiz51zh6fiRDFZuPmMB8GA1UdIwQY
MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt
NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw
LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRDeCkzs
26upZ1moOLjdNKK9GjOfZndHpOp4Kw250ZcWCOdr3VR3v659iK1YQLZZe/uc8B+W
30Y+XB34qPasBFmS+k0WJsctYhRfo8NwM2/BLdB0+3d/OGFNs7nP6CFFCPAVGmYc
yE9aF7jXhWqSEouvWnZGERhcKZVjxv9yhIWtP8Os0ywDtoBpqQmvxFJK2NmICCyV
Or3KCbBl79xRbkuH7SZytQVGz99eRlpY491C23gL8PzeXFjVseTPN29ZQi+nYfrG
jnZ2Vgcwf8mtQUmhh8ASuW6zEHcupS0gp6iAkPElEYXooIuDNzhzWI57yWzRviCg
1GKeKmDN57gRDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:27:54 2025 by rpki-client