Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: o2s3bp/4+p9Y4Sd9pfm0goHGoGlaZw+Swk03XugL3Vw=
Subject key identifier: 7B:04:49:61:9E:DC:25:4F:1C:FC:5F:A3:FA:D6:3D:81:E1:59:A7:06
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 0199FCFD20986278B2B08401EDC72C3A7519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 0622
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=)
2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: qiY5RMhQ22jTpQpWD9uCVtdg/z4GXAvMEEoIt0Sc1Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:20:98:62:78:b2:b0:84:01:ed:c7:2c:3a:75:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=7b0449619edc254f1cfc5fa3fad63d81e159a706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:aa:e2:bf:f5:9d:8c:75:af:69:96:d0:bc:
c1:16:e1:71:38:65:27:e0:6f:df:62:23:87:3a:84:
f6:af:c0:8d:93:8f:70:3c:02:7e:bf:71:fe:09:32:
72:76:ab:df:96:be:bc:9f:78:8c:69:bd:11:72:cf:
3f:e1:08:73:46:4d:73:8f:91:e5:d2:98:54:65:4c:
4e:cc:82:d6:cb:59:75:23:d3:79:ea:1b:07:86:95:
f9:a6:d2:95:77:db:34:af:56:6c:b0:49:82:e6:06:
cc:e1:9f:a5:6a:c6:96:16:77:53:4f:5b:93:3d:73:
01:69:13:03:b7:01:01:ca:20:bf:5b:7e:0b:a9:01:
ba:70:d5:64:36:40:d4:94:65:43:16:c0:1b:19:26:
27:c0:26:58:70:7b:a7:42:6c:a9:ca:e8:35:bb:64:
7e:56:92:be:c2:27:1d:79:a0:76:02:86:0c:3c:ce:
65:cd:67:81:c2:2c:59:3a:56:64:3c:a2:1a:db:b4:
13:fc:ad:40:23:be:c5:1c:4d:65:5a:d8:6d:cd:14:
0e:d2:da:67:d3:bf:f9:56:4f:dd:a5:12:af:94:af:
10:4e:f3:da:55:06:dc:c5:ef:da:02:0c:34:16:63:
26:85:69:bc:96:0a:7e:dc:aa:82:13:cd:4e:cf:2d:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:04:49:61:9E:DC:25:4F:1C:FC:5F:A3:FA:D6:3D:81:E1:59:A7:06
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fc:b6:17:e9:62:10:32:a4:c6:5a:10:b7:71:66:a8:33:1d:
3f:fa:98:b2:c6:bc:38:0a:ba:78:8c:f4:0c:04:91:ac:e4:33:
8a:20:3b:3c:00:27:5d:11:87:7d:12:4f:db:f6:dc:66:11:d1:
db:37:e7:41:55:d7:2d:ad:4d:cc:5e:db:a3:13:b6:51:79:6e:
72:00:04:fc:2a:02:65:23:02:3b:cb:f0:bb:10:d0:bf:2e:15:
66:32:e8:1d:90:1d:dc:47:32:2f:b6:e9:91:a6:43:f6:d8:5f:
dd:5a:72:c3:48:5f:d2:7e:62:60:b6:9f:3e:d1:0b:3a:5b:23:
97:3d:c1:33:f7:da:b7:00:ad:81:65:65:df:d5:f2:2a:38:0e:
b1:5c:69:f9:14:23:6c:b2:de:f8:34:40:c7:e9:4d:70:44:2a:
be:dd:8f:4f:31:57:00:77:75:ec:21:7e:9c:c6:96:f3:83:73:
04:60:39:ee:2b:71:e9:83:4a:50:62:55:11:f7:40:05:1e:0e:
4e:22:57:5b:8e:6c:57:4f:88:a2:73:a9:24:92:e4:1e:c9:98:
74:53:05:89:e3:70:a1:89:14:8a:61:90:05:70:e9:38:ef:11:
bc:8f:ac:d2:b4:2c:67:dd:e3:36:e8:ab:d5:34:11:bb:0f:b3:
f4:f0:36:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/SCYYniysIQB7ccsOnUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDBlOTIzNGNjNjcyMTk1N2E0YWMyMTNlYWM2NzUzZWQ4
NWVlYTcwHhcNMjUxMDE5MTUwMTExWhcNMjUxMDIwMTUwMTExWjAzMTEwLwYDVQQD
Eyg3YjA0NDk2MTllZGMyNTRmMWNmYzVmYTNmYWQ2M2Q4MWUxNTlhNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Yyq4r/1nYx1r2mW0LzBFuFxOGUn
4G/fYiOHOoT2r8CNk49wPAJ+v3H+CTJydqvflr68n3iMab0Rcs8/4QhzRk1zj5Hl
0phUZUxOzILWy1l1I9N56hsHhpX5ptKVd9s0r1ZssEmC5gbM4Z+lasaWFndTT1uT
PXMBaRMDtwEByiC/W34LqQG6cNVkNkDUlGVDFsAbGSYnwCZYcHunQmypyug1u2R+
VpK+wicdeaB2AoYMPM5lzWeBwixZOlZkPKIa27QT/K1AI77FHE1lWthtzRQO0tpn
07/5Vk/dpRKvlK8QTvPaVQbcxe/aAgw0FmMmhWm8lgp+3KqCE81Ozy08FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsESWGe3CVPHPxfo/rWPYHhWacGMB8GA1UdIwQY
MBaAFMnQ6SNMxnIZV6SsIT6sZ1Pthe6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgt
OWEzMDBiMGE3ZWQyLzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgtOWEzMDBiMGE3ZWQy
LzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfy2F+li
EDKkxloQt3FmqDMdP/qYssa8OAq6eIz0DASRrOQziiA7PAAnXRGHfRJP2/bcZhHR
2zfnQVXXLa1NzF7boxO2UXlucgAE/CoCZSMCO8vwuxDQvy4VZjLoHZAd3EcyL7bp
kaZD9thf3Vpyw0hf0n5iYLafPtELOlsjlz3BM/fatwCtgWVl39XyKjgOsVxp+RQj
bLLe+DRAx+lNcEQqvt2PTzFXAHd17CF+nMaW84NzBGA57itx6YNKUGJVEfdABR4O
TiJXW45sV0+IonOpJJLkHsmYdFMFieNwoYkUimGQBXDpOO8RvI+s0rQsZ93jNuir
1TQRuw+z9PA2ew==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:00 2025 by rpki-client