Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: M8BQ7Iwdau8zvD8dx+RgBucWRBPfhHo6Okt3oEirmTk=
Subject key identifier: 31:90:32:DD:BB:9B:8A:8A:3C:A5:66:57:15:3A:82:DC:93:52:E0:3C
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 019A1ACFC596C626531A64DC21AD050291FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 0603
Signing time: Sat 25 Oct 2025 10:00:15 +0000
Manifest this update: Sat 25 Oct 2025 10:00:15 +0000
Manifest next update: Sun 26 Oct 2025 10:00:15 +0000
Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=)
2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: fT6WvTnqIqvYp0OzMggmYRxAWqNJs7d/ucQyMqN8WBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:cf:c5:96:c6:26:53:1a:64:dc:21:ad:05:02:91:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Oct 25 10:00:15 2025 GMT
Not After : Oct 26 10:00:15 2025 GMT
Subject: CN=319032ddbb9b8a8a3ca56657153a82dc9352e03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:f5:22:f3:33:0c:e0:34:d7:7c:ca:10:15:
30:c3:97:7c:c4:14:27:92:f7:a1:e5:c9:7f:b9:06:
c1:a1:cf:61:bd:68:39:87:eb:de:90:37:e5:9e:8b:
29:96:ee:8e:2c:76:37:a4:f9:84:09:18:97:b9:85:
28:7d:10:8e:df:9e:c4:e2:82:ff:7a:65:3f:86:b4:
df:e7:73:43:67:66:e0:39:20:30:24:8d:03:61:3d:
cc:40:38:88:31:5f:57:e9:e4:4b:bc:4a:c4:ed:c1:
34:7d:fa:fc:a5:56:43:61:99:86:8f:eb:1a:c4:bb:
26:7c:d5:af:4e:6f:90:81:81:b2:fb:8c:b9:e1:33:
70:f1:7e:23:23:81:61:7b:dc:9e:d7:89:2b:d3:f5:
69:1b:a9:06:7e:bd:cd:5c:99:86:05:e4:99:14:bf:
41:77:d3:e7:f9:c7:33:3f:7f:b5:ee:37:aa:ac:c6:
50:fd:0e:e4:96:d3:9c:37:5d:e1:16:09:b5:37:40:
30:0b:f9:1b:cc:4b:23:b6:5f:79:a5:2c:c8:72:95:
3b:b5:4f:7d:14:17:98:e2:7f:3a:46:81:21:b1:89:
e3:30:1e:a3:28:ab:60:e5:59:31:30:8c:b7:ee:88:
77:f7:15:c0:8f:d5:fa:91:62:65:30:65:77:26:fe:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:90:32:DD:BB:9B:8A:8A:3C:A5:66:57:15:3A:82:DC:93:52:E0:3C
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:db:8e:29:48:4c:7c:76:89:e9:ff:21:0b:09:f6:b8:05:35:
64:0c:87:6f:9f:44:1d:ac:1e:68:47:5d:cd:f9:0d:89:2c:3e:
3f:5c:41:8e:91:fc:bc:8e:02:9d:46:46:c6:95:3a:93:bf:fc:
26:70:e3:e1:14:8a:fe:09:43:bb:d3:fa:e1:12:fb:b9:c9:aa:
00:04:a6:93:3e:c0:ec:5d:e6:63:7b:2d:9d:f1:26:4c:78:1b:
e4:29:52:e8:7b:44:3d:13:d8:e9:48:a0:37:56:36:d8:11:fb:
89:02:5f:17:36:77:2c:a1:e2:bc:15:58:0d:8a:7d:6f:3a:88:
5c:de:90:1f:f7:67:6d:30:07:d9:c7:e8:4e:01:c8:9f:a9:69:
60:8b:74:f5:80:64:29:66:59:85:04:9d:b9:1a:65:4e:2d:4b:
80:75:9a:25:fe:93:9b:82:35:09:5c:b9:b6:82:ec:3e:eb:a8:
ad:1f:6f:79:4a:8b:8f:50:b3:66:85:55:fd:65:4b:bb:2e:5f:
4f:92:88:8e:9b:0d:2d:01:d0:f4:68:78:83:9b:91:78:fe:98:
f1:45:a2:d3:7f:0b:9b:6d:ab:6a:98:b5:c3:77:5e:ba:d1:bd:
2c:46:a0:d3:9f:e7:99:7b:f8:92:ea:eb:b4:76:42:9f:95:e3:
e1:fb:dc:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaz8WWxiZTGmTcIa0FApH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTEwMjk2ODZiMmM4MGE3ZjA0NjBiNmM2ZWYxYjkwODY3
MjgwOTcwHhcNMjUxMDI1MTAwMDE1WhcNMjUxMDI2MTAwMDE1WjAzMTEwLwYDVQQD
EygzMTkwMzJkZGJiOWI4YThhM2NhNTY2NTcxNTNhODJkYzkzNTJlMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyH1IvMzDOA013zKEBUww5d8xBQn
kveh5cl/uQbBoc9hvWg5h+vekDflnosplu6OLHY3pPmECRiXuYUofRCO357E4oL/
emU/hrTf53NDZ2bgOSAwJI0DYT3MQDiIMV9X6eRLvErE7cE0ffr8pVZDYZmGj+sa
xLsmfNWvTm+QgYGy+4y54TNw8X4jI4Fhe9ye14kr0/VpG6kGfr3NXJmGBeSZFL9B
d9Pn+cczP3+17jeqrMZQ/Q7kltOcN13hFgm1N0AwC/kbzEsjtl95pSzIcpU7tU99
FBeY4n86RoEhsYnjMB6jKKtg5VkxMIy37oh39xXAj9X6kWJlMGV3Jv4b5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGQMt27m4qKPKVmVxU6gtyTUuA8MB8GA1UdIwQY
MBaAFMgRApaGssgKfwRgtsbvG5CGcoCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTIt
NTBlMzMzMzg0NjY5LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTItNTBlMzMzMzg0NjY5
LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPduOKUhM
fHaJ6f8hCwn2uAU1ZAyHb59EHaweaEddzfkNiSw+P1xBjpH8vI4CnUZGxpU6k7/8
JnDj4RSK/glDu9P64RL7ucmqAASmkz7A7F3mY3stnfEmTHgb5ClS6HtEPRPY6Uig
N1Y22BH7iQJfFzZ3LKHivBVYDYp9bzqIXN6QH/dnbTAH2cfoTgHIn6lpYIt09YBk
KWZZhQSduRplTi1LgHWaJf6Tm4I1CVy5toLsPuuorR9veUqLj1CzZoVV/WVLuy5f
T5KIjpsNLQHQ9Gh4g5uReP6Y8UWi038Lm22rapi1w3deutG9LEag05/nmXv4kurr
tHZCn5Xj4fvcMg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 20:12:12 2025 by rpki-client