Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: UiheIIMBTWqV5Rp+jHoF5+qeDKtFmCzlLkEEKj90tLA=
Subject key identifier: E9:AC:DB:7B:5C:6D:07:60:7D:32:DD:BF:B0:18:38:90:20:5A:26:57
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 0199FB7C7F28675A01A927525B889A4B10BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: EsrwCgSKLwMhVS8n9exMg28/10oY0kICYXVaSENXlaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7f:28:67:5a:01:a9:27:52:5b:88:9a:4b:10:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=e9acdb7b5c6d07607d32ddbfb0183890205a2657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:e4:23:67:c7:fa:4d:fd:cf:a2:93:1c:74:
4b:6d:b3:25:ad:6d:61:ab:d5:6e:c6:e5:b8:9b:f3:
91:9c:6c:f8:6d:86:86:32:7f:5f:4e:ee:6d:07:41:
96:53:1e:3b:d4:d4:d8:9f:7b:4f:7f:f7:2c:70:4c:
49:ab:b0:67:83:a4:29:0d:a5:ad:6b:fe:9b:2a:44:
70:a9:52:26:cc:4a:10:a4:b2:fb:d5:d9:bb:bf:e5:
0a:84:0a:17:af:11:8f:d0:30:4b:92:0f:fa:8f:4e:
d9:d2:64:88:28:4f:bf:f7:fa:92:c8:1b:6a:00:8e:
1e:94:5f:27:29:59:15:ba:01:9f:c6:8c:dc:3d:17:
f5:5c:51:65:31:fa:f3:39:4c:81:27:f4:c2:a3:63:
22:2a:51:d9:4e:0e:7a:a6:52:09:e1:4e:c3:70:c2:
f2:fb:55:0a:e4:62:5a:7e:35:e3:08:7e:2a:00:d3:
09:5c:03:4c:6f:8c:95:45:ac:f6:b2:97:b8:19:c6:
b8:05:63:19:98:dc:21:e5:49:a6:e0:e6:0b:01:3b:
b9:dc:a5:04:b0:0d:c3:45:49:0a:e6:7b:61:19:83:
65:76:87:a0:d8:94:38:c6:88:0a:c4:47:2a:48:24:
21:2e:c3:f7:81:a4:06:f9:9a:87:83:a5:d7:99:bb:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:DB:7B:5C:6D:07:60:7D:32:DD:BF:B0:18:38:90:20:5A:26:57
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7a:07:dc:ba:58:19:54:66:6f:df:69:83:a2:f1:2f:9f:0b:
94:07:fd:12:08:db:f5:07:aa:44:3e:61:44:31:d3:6d:0a:8c:
04:e4:7a:55:3a:09:7c:63:57:f6:3b:8b:24:d3:66:04:e5:10:
20:28:fe:90:cc:92:ea:0f:8e:c3:4c:c0:69:ea:fc:77:73:7e:
84:04:b4:64:95:30:10:b4:e5:13:d3:12:7b:f0:22:9a:64:31:
b1:40:a0:dc:b8:1d:ef:83:b2:2b:56:c2:84:cb:a2:cf:56:d4:
28:f0:a6:6c:c4:36:1d:40:65:95:87:1e:14:ba:5d:93:3a:46:
93:da:3a:7e:f5:37:1d:1c:22:82:11:e3:a0:99:92:86:28:bb:
ec:e4:8e:26:c1:86:38:2d:fb:a1:2e:c1:01:fb:51:d3:59:ee:
ac:a6:6c:97:ce:06:a4:60:16:21:f7:78:c7:63:28:b2:1c:2f:
c3:b2:53:f0:1b:77:d7:5a:b9:3d:89:7e:92:85:86:9a:58:93:
47:aa:46:63:26:c9:11:66:8d:92:6b:8b:61:bd:82:e9:02:98:
0f:8c:b7:25:97:01:d7:98:82:f5:30:f8:76:c8:eb:1d:ab:64:
8b:d9:ca:86:39:8a:a1:5e:5b:16:b7:2a:f9:35:d1:e0:0b:86:
8e:1e:31:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fH8oZ1oBqSdSW4iaSxC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTVlMWNiYzY3ZTc4MmRiZjlmOGU3NDRlNDM3MjY4YmRj
YzM5Y2UwHhcNMjUxMDE5MDgwMTA0WhcNMjUxMDIwMDgwMTA0WjAzMTEwLwYDVQQD
EyhlOWFjZGI3YjVjNmQwNzYwN2QzMmRkYmZiMDE4Mzg5MDIwNWEyNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB7kI2fH+k39z6KTHHRLbbMlrW1h
q9VuxuW4m/ORnGz4bYaGMn9fTu5tB0GWUx471NTYn3tPf/cscExJq7Bng6QpDaWt
a/6bKkRwqVImzEoQpLL71dm7v+UKhAoXrxGP0DBLkg/6j07Z0mSIKE+/9/qSyBtq
AI4elF8nKVkVugGfxozcPRf1XFFlMfrzOUyBJ/TCo2MiKlHZTg56plIJ4U7DcMLy
+1UK5GJafjXjCH4qANMJXANMb4yVRaz2spe4Gca4BWMZmNwh5Umm4OYLATu53KUE
sA3DRUkK5nthGYNldoeg2JQ4xogKxEcqSCQhLsP3gaQG+ZqHg6XXmbuW/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOms23tcbQdgfTLdv7AYOJAgWiZXMB8GA1UdIwQY
MBaAFMuV4cvGfngtv5+OdE5Dcmi9zDnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmIt
NzY2ODJlNzk0Y2MzLzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmItNzY2ODJlNzk0Y2Mz
LzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXoH3LpY
GVRmb99pg6LxL58LlAf9Egjb9QeqRD5hRDHTbQqMBOR6VToJfGNX9juLJNNmBOUQ
ICj+kMyS6g+Ow0zAaer8d3N+hAS0ZJUwELTlE9MSe/AimmQxsUCg3Lgd74OyK1bC
hMuiz1bUKPCmbMQ2HUBllYceFLpdkzpGk9o6fvU3HRwighHjoJmShii77OSOJsGG
OC37oS7BAftR01nurKZsl84GpGAWIfd4x2Moshwvw7JT8Bt311q5PYl+koWGmliT
R6pGYybJEWaNkmuLYb2C6QKYD4y3JZcB15iC9TD4dsjrHatki9nKhjmKoV5bFrcq
+TXR4AuGjh4x4A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:54 2025 by rpki-client