Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: KwnnE7DoHwWxLg17q16pOh2Fdi/KXia0J/derx1mw7M=
Subject key identifier: F5:A6:F5:1D:6E:25:3F:D0:AB:FF:75:51:8E:98:65:76:B2:03:4D:E1
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019A240A27C85F9B5E5DB9BDC8C0A91D0234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 05:00:36 +0000
Manifest this update: Mon 27 Oct 2025 05:00:36 +0000
Manifest next update: Tue 28 Oct 2025 05:00:36 +0000
Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: DPp0w208lECcqZehqdWF+AEyEk9lvL95Ja2yu7g0s4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:27:c8:5f:9b:5e:5d:b9:bd:c8:c0:a9:1d:02:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Oct 27 05:00:36 2025 GMT
Not After : Oct 28 05:00:36 2025 GMT
Subject: CN=f5a6f51d6e253fd0abff75518e986576b2034de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:48:33:6e:9f:c0:1a:51:5a:1c:96:15:ff:
e0:6d:47:2c:69:f9:a0:81:c8:a1:db:64:cb:3e:a7:
20:b7:e2:01:7e:19:ff:2f:75:93:f3:50:ec:bc:3c:
10:a4:da:0c:05:7d:c7:09:7d:fc:bf:5f:04:38:84:
1b:42:95:fd:a6:b1:c8:5b:34:be:eb:6f:fa:07:8d:
b7:4f:7a:06:68:63:fd:5a:41:4b:64:8b:31:7d:97:
22:7d:cd:45:51:2c:bb:1f:bb:e8:61:01:4e:9d:42:
36:78:1b:a0:61:2e:e6:6a:48:88:3a:91:c8:41:b0:
1d:69:43:7c:29:8d:47:3a:56:f2:48:4f:45:ac:e5:
fb:58:f0:41:d2:c9:0c:cd:00:16:97:f5:79:40:a5:
29:d7:2c:4f:65:b5:fc:4c:2c:ea:58:ef:a6:0f:90:
b3:a7:ea:57:6a:63:9d:e8:f8:10:f4:bb:15:e5:80:
8a:bc:08:d2:ab:bd:84:fe:27:56:95:ef:05:71:76:
9b:e8:27:20:63:4f:d6:34:9e:77:96:da:98:4a:e5:
e1:48:7a:61:8f:7b:37:26:ca:eb:0d:37:f7:dc:b0:
93:38:65:f4:c8:66:8d:4d:3d:2c:8e:fe:db:a8:7f:
23:67:7e:08:af:d3:77:2c:d4:45:ca:fc:98:5e:53:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A6:F5:1D:6E:25:3F:D0:AB:FF:75:51:8E:98:65:76:B2:03:4D:E1
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:be:93:2e:40:86:19:44:30:bf:66:c3:85:35:5a:f2:68:d0:
1f:35:39:95:c2:6b:e9:57:26:71:d1:a6:3c:7b:f5:ff:3f:1c:
a7:78:7d:06:6b:56:9b:71:1e:0f:47:de:85:13:1e:8e:e8:bb:
db:ed:55:3c:c5:4f:48:e8:1e:74:12:8b:92:90:ef:c3:01:2f:
c0:16:4b:32:4f:89:10:8a:9d:fe:74:f3:7f:0d:15:89:05:78:
09:1b:a7:10:1b:13:5c:d5:ea:42:e2:a3:ff:ec:85:71:d0:61:
5a:35:7e:46:da:f5:8a:b4:4f:b9:a4:82:95:c8:85:41:fb:1c:
b0:77:4f:bf:13:ee:bc:02:ec:69:f5:4c:d7:f2:46:59:04:ef:
7f:4e:72:71:ff:90:f8:ff:48:50:a5:4e:54:e6:d1:94:0d:32:
b4:ed:5f:ff:51:7d:9e:ea:d0:01:ce:73:52:b1:1d:5b:3c:82:
e8:a4:91:5b:9c:ec:8b:fe:81:70:98:c9:b7:ff:da:96:20:10:
be:ba:55:25:71:6d:d8:78:a2:74:aa:58:4b:81:d6:64:57:76:
d6:90:bc:00:05:f1:64:64:e1:01:9e:2e:a7:c6:48:d4:05:ca:
71:24:bd:2a:67:c6:fc:88:b5:1f:b1:97:8a:83:bc:ab:fc:af:
02:ac:35:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokCifIX5teXbm9yMCpHQI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4YzQxZTEyMmM4ODFkOTM2ZDkxZDViMDJkYmQ4NmEy
ZTcwYTUwHhcNMjUxMDI3MDUwMDM2WhcNMjUxMDI4MDUwMDM2WjAzMTEwLwYDVQQD
EyhmNWE2ZjUxZDZlMjUzZmQwYWJmZjc1NTE4ZTk4NjU3NmIyMDM0ZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwahIM26fwBpRWhyWFf/gbUcsafmg
gcih22TLPqcgt+IBfhn/L3WT81DsvDwQpNoMBX3HCX38v18EOIQbQpX9prHIWzS+
62/6B423T3oGaGP9WkFLZIsxfZcifc1FUSy7H7voYQFOnUI2eBugYS7makiIOpHI
QbAdaUN8KY1HOlbySE9FrOX7WPBB0skMzQAWl/V5QKUp1yxPZbX8TCzqWO+mD5Cz
p+pXamOd6PgQ9LsV5YCKvAjSq72E/idWle8FcXab6CcgY0/WNJ53ltqYSuXhSHph
j3s3JsrrDTf33LCTOGX0yGaNTT0sjv7bqH8jZ34Ir9N3LNRFyvyYXlP4+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWm9R1uJT/Qq/91UY6YZXayA03hMB8GA1UdIwQY
MBaAFMtNjEHhIsiB2TbZHVsC29hqLnClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAt
MTM2OTYxOTdkM2I2LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAtMTM2OTYxOTdkM2I2
LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcL6TLkCG
GUQwv2bDhTVa8mjQHzU5lcJr6VcmcdGmPHv1/z8cp3h9BmtWm3EeD0fehRMejui7
2+1VPMVPSOgedBKLkpDvwwEvwBZLMk+JEIqd/nTzfw0ViQV4CRunEBsTXNXqQuKj
/+yFcdBhWjV+Rtr1irRPuaSClciFQfscsHdPvxPuvALsafVM1/JGWQTvf05ycf+Q
+P9IUKVOVObRlA0ytO1f/1F9nurQAc5zUrEdWzyC6KSRW5zsi/6BcJjJt//aliAQ
vrpVJXFt2HiidKpYS4HWZFd21pC8AAXxZGThAZ4up8ZI1AXKcSS9KmfG/Ii1H7GX
ioO8q/yvAqw1+g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:07:41 2025 by rpki-client