Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: NQgivFajObKcA3HTFWk8mJ18TRpNPEgJA77j5KZfVkQ=
Subject key identifier: E5:5F:06:B0:2B:43:C0:7C:4D:11:57:62:91:B4:5B:2A:E4:15:1C:98
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 0198D4736ABD4309FFD5EE6862E306DFDF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 14E4
Signing time: Sat 23 Aug 2025 01:03:10 +0000
Manifest this update: Sat 23 Aug 2025 01:03:10 +0000
Manifest next update: Sun 24 Aug 2025 01:03:10 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: z/GVguKworZn01Hkl1KDo2iATacY+X+XBdpNa6HP9W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6a:bd:43:09:ff:d5:ee:68:62:e3:06:df:df:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Aug 23 01:03:10 2025 GMT
Not After : Aug 24 01:03:10 2025 GMT
Subject: CN=e55f06b02b43c07c4d11576291b45b2ae4151c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:06:de:25:70:d5:fb:58:bf:e7:4b:c5:3a:
03:40:eb:69:68:f9:03:9d:19:42:f4:ef:e0:dd:ae:
28:5b:7f:cc:8b:61:66:18:14:33:87:a9:8a:48:ca:
fa:bb:d5:36:d0:0e:71:c8:02:ec:fe:d7:b5:cc:4e:
3d:2d:ae:1e:f0:39:e1:08:36:72:83:d3:d8:be:55:
f4:17:d5:a7:e7:11:3d:51:7f:8f:bf:1b:2f:4b:b7:
6f:e8:61:73:b4:6a:ef:8b:d3:f7:07:6e:4d:53:13:
1c:86:b5:40:c0:78:00:b3:c4:ab:2d:af:f4:8d:e8:
8c:fd:5c:9d:16:32:e5:01:39:6c:fc:7a:da:69:f1:
cf:66:7f:4d:96:61:1c:ff:d0:38:d5:76:80:c6:53:
de:a0:c3:22:e9:8b:68:73:e3:41:69:2c:b2:58:c9:
3c:5b:9f:ed:ca:59:33:33:47:25:66:79:91:0a:ff:
52:2b:f5:3e:e6:79:d9:21:49:2e:6d:f8:2e:93:14:
5e:73:2a:5b:3a:ea:9f:65:b6:ff:8c:61:96:44:61:
8b:0f:e9:46:5b:3c:27:f3:66:48:59:ea:d1:2c:ee:
e0:cf:32:c8:c2:c2:20:a8:0a:47:bb:7d:33:0c:23:
3f:7b:d9:a1:db:78:d3:63:93:ad:3a:4e:84:68:9b:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:06:B0:2B:43:C0:7C:4D:11:57:62:91:B4:5B:2A:E4:15:1C:98
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ee:0e:2c:81:f2:51:6b:47:c3:d5:fc:a8:8b:0e:d5:60:d6:
26:50:ec:84:1e:4e:f8:38:fd:ee:84:30:13:e2:d8:ce:c8:99:
05:01:8c:91:be:bf:77:40:19:19:b1:ea:be:10:0f:4a:d3:92:
d1:2f:7e:aa:ef:82:7e:73:d6:e5:b6:fb:25:20:6d:c6:e7:46:
d2:ab:1e:c6:69:c1:03:f1:40:98:82:64:47:c6:1d:df:3e:21:
72:bc:1b:88:a7:1e:71:a6:fd:fe:14:9c:e9:ff:ff:63:d5:4e:
08:0f:eb:6b:3b:c8:4d:ca:67:3d:fb:89:22:a4:07:5e:b0:4d:
52:b1:0d:fa:ee:8c:80:98:32:20:94:c3:17:1c:8f:bf:d5:7e:
dc:48:94:26:8a:a7:1a:02:ec:8d:57:66:70:20:49:9d:d1:67:
06:85:12:e0:fb:07:7f:59:79:46:4e:32:b9:d2:3c:4a:6c:bd:
e1:f0:53:80:87:3a:b8:b6:03:ec:53:35:96:b0:73:0e:1d:c3:
b0:34:61:28:a6:be:81:3d:09:ee:09:29:a2:fd:e2:8a:e2:b8:
59:07:7b:7f:32:99:05:03:ca:1c:c9:15:08:9d:fe:62:9d:02:
12:b9:d9:dc:38:24:6c:71:c0:df:88:3c:35:79:1c:3a:f9:81:
25:51:f3:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc2q9Qwn/1e5oYuMG398DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNDc5MjFlNDQzMDUyMWE3NzI3ODg4YzEzYmM3YjhlMTA0
Y2JkYmUwHhcNMjUwODIzMDEwMzEwWhcNMjUwODI0MDEwMzEwWjAzMTEwLwYDVQQD
EyhlNTVmMDZiMDJiNDNjMDdjNGQxMTU3NjI5MWI0NWIyYWU0MTUxYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaEG3iVw1ftYv+dLxToDQOtpaPkD
nRlC9O/g3a4oW3/Mi2FmGBQzh6mKSMr6u9U20A5xyALs/te1zE49La4e8DnhCDZy
g9PYvlX0F9Wn5xE9UX+PvxsvS7dv6GFztGrvi9P3B25NUxMchrVAwHgAs8SrLa/0
jeiM/VydFjLlATls/HraafHPZn9NlmEc/9A41XaAxlPeoMMi6Ytoc+NBaSyyWMk8
W5/tylkzM0clZnmRCv9SK/U+5nnZIUkubfgukxRecypbOuqfZbb/jGGWRGGLD+lG
Wzwn82ZIWerRLO7gzzLIwsIgqApHu30zDCM/e9mh23jTY5OtOk6EaJujfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVfBrArQ8B8TRFXYpG0WyrkFRyYMB8GA1UdIwQY
MBaAFMpHkh5EMFIadyeIjBO8e44QTL2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2It
ODNlNTVjNWY2ZjdkLzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2ItODNlNTVjNWY2Zjdk
LzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUO4OLIHy
UWtHw9X8qIsO1WDWJlDshB5O+Dj97oQwE+LYzsiZBQGMkb6/d0AZGbHqvhAPStOS
0S9+qu+CfnPW5bb7JSBtxudG0qsexmnBA/FAmIJkR8Yd3z4hcrwbiKcecab9/hSc
6f//Y9VOCA/razvITcpnPfuJIqQHXrBNUrEN+u6MgJgyIJTDFxyPv9V+3EiUJoqn
GgLsjVdmcCBJndFnBoUS4PsHf1l5Rk4yudI8Smy94fBTgIc6uLYD7FM1lrBzDh3D
sDRhKKa+gT0J7gkpov3iiuK4WQd7fzKZBQPKHMkVCJ3+Yp0CErnZ3DgkbHHA34g8
NXkcOvmBJVHzZA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:04 2025 by rpki-client