Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: OOh+MQ2O0WckD1UR8zsHoA2BtG7YmPVMbVQPo4j2QD8=
Subject key identifier: 69:8E:DC:52:55:F3:E1:26:B9:B8:36:AA:CD:21:DC:D6:85:04:47:61
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 019963908DD21B3E05431C5E42D5EF6C8CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 1692
Signing time: Fri 19 Sep 2025 20:00:41 +0000
Manifest this update: Fri 19 Sep 2025 20:00:41 +0000
Manifest next update: Sat 20 Sep 2025 20:00:41 +0000
Files and hashes: 1: 1-4YCAM0PPWpbsIo98h9fkDFWnfg.roa (hash: 3vMBuIr7SB4QB0M6+bNSVLgKbzy+afGhB2NFcCi6J/M=)
2: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: WgCL7+H0NBVXI43JtVzp9uH884Jp/5GFJcES7VsShSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:90:8d:d2:1b:3e:05:43:1c:5e:42:d5:ef:6c:8c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Sep 19 20:00:41 2025 GMT
Not After : Sep 20 20:00:41 2025 GMT
Subject: CN=698edc5255f3e126b9b836aacd21dcd685044761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:68:3f:a0:bc:db:45:7c:c8:47:74:43:9e:
76:e9:e5:7c:1d:48:bd:d8:2c:56:7b:5c:b2:62:43:
d1:1b:a2:87:b0:47:6b:30:3e:28:41:08:62:de:b7:
03:7e:7b:f8:86:8f:f2:90:3e:d7:74:1a:d6:73:4d:
07:7b:fa:a1:f9:5b:51:b8:8c:9e:b4:10:51:a3:43:
a4:86:e9:5e:3b:32:cd:1b:b6:8c:07:07:d4:c2:e9:
c0:83:fb:fa:d9:d7:6e:ce:c4:e2:87:e7:ef:d9:57:
a5:9c:bb:61:5f:91:7a:db:e8:6c:07:09:35:cf:e1:
a6:20:27:47:d6:e3:d9:3a:21:08:ae:f4:03:35:ef:
8c:1f:c0:c8:5f:0f:8e:fd:b2:56:e8:ef:39:c6:e3:
6b:f9:a0:93:f5:ee:9c:e2:fe:2a:55:cc:d5:48:c8:
c4:14:42:56:9b:20:fe:32:d5:de:16:3e:c8:63:c9:
55:7e:05:ee:99:ac:18:94:92:15:06:59:37:c6:27:
fe:2a:32:f9:b5:4b:58:fe:50:72:98:4a:4a:40:85:
28:81:cb:82:40:70:81:57:30:ce:cd:d2:8f:93:06:
05:88:de:90:e3:33:98:5d:3b:7f:12:12:01:ae:f0:
07:4a:32:bc:2d:14:5c:15:f6:d9:39:19:eb:6b:93:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:DC:52:55:F3:E1:26:B9:B8:36:AA:CD:21:DC:D6:85:04:47:61
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:81:87:0f:60:65:32:69:31:c3:dd:2c:b4:c9:74:29:18:d8:
22:da:e4:a6:4d:06:db:f8:df:03:1c:1a:e2:5d:5a:d2:25:5b:
51:5c:31:93:ea:60:19:5d:80:5e:d6:37:60:47:36:70:bd:73:
ee:e0:a0:c8:8e:93:5e:ad:ff:f6:87:c2:4d:68:be:dc:cd:ac:
b9:d6:b7:c5:e7:77:96:b7:41:60:dc:13:29:c4:39:ba:01:25:
3d:ec:f8:13:dc:1a:33:2a:33:f1:38:79:80:85:c0:87:5d:cd:
d0:98:ae:81:db:2d:c6:f6:9b:fb:87:a9:37:d8:75:b6:4f:ff:
9e:a1:84:f6:23:87:12:8a:5a:d9:10:98:e2:ff:56:e3:a3:24:
13:f3:a1:dd:2f:62:ba:42:18:68:72:b3:6f:54:e5:22:2a:0b:
3a:cc:be:bd:fc:63:c3:4c:76:5a:30:2b:88:81:97:73:8d:e5:
83:ae:39:b3:0c:c2:d8:f2:d1:b9:39:bb:11:0a:82:e8:cd:c1:
bc:4d:48:0e:16:d1:0d:1c:18:6d:cd:2a:ca:97:35:e7:da:3b:
46:28:3e:e6:c3:04:14:ca:9a:49:30:70:2f:ba:8e:30:0f:8f:
6d:d4:5d:41:1c:88:09:50:e5:fb:51:ad:44:41:16:4c:df:c2:
06:8f:14:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZljkI3SGz4FQxxeQtXvbIyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDc3ZjIyYzY0MjhiYzg4OWIzNjViMDA2Y2I1MjQ4ZDRi
ZjYxY2YwHhcNMjUwOTE5MjAwMDQxWhcNMjUwOTIwMjAwMDQxWjAzMTEwLwYDVQQD
Eyg2OThlZGM1MjU1ZjNlMTI2YjliODM2YWFjZDIxZGNkNjg1MDQ0NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRBoP6C820V8yEd0Q5526eV8HUi9
2CxWe1yyYkPRG6KHsEdrMD4oQQhi3rcDfnv4ho/ykD7XdBrWc00He/qh+VtRuIye
tBBRo0OkhuleOzLNG7aMBwfUwunAg/v62dduzsTih+fv2VelnLthX5F62+hsBwk1
z+GmICdH1uPZOiEIrvQDNe+MH8DIXw+O/bJW6O85xuNr+aCT9e6c4v4qVczVSMjE
FEJWmyD+MtXeFj7IY8lVfgXumawYlJIVBlk3xif+KjL5tUtY/lBymEpKQIUogcuC
QHCBVzDOzdKPkwYFiN6Q4zOYXTt/EhIBrvAHSjK8LRRcFfbZORnra5MHXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmO3FJV8+Emubg2qs0h3NaFBEdhMB8GA1UdIwQY
MBaAFGAHfyLGQovIibNlsAbLUkjUv2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDct
ODdmZTJlNTRiYTc5LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDctODdmZTJlNTRiYTc5
LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYGHD2Bl
Mmkxw90stMl0KRjYItrkpk0G2/jfAxwa4l1a0iVbUVwxk+pgGV2AXtY3YEc2cL1z
7uCgyI6TXq3/9ofCTWi+3M2suda3xed3lrdBYNwTKcQ5ugElPez4E9waMyoz8Th5
gIXAh13N0Jiugdstxvab+4epN9h1tk//nqGE9iOHEopa2RCY4v9W46MkE/Oh3S9i
ukIYaHKzb1TlIioLOsy+vfxjw0x2WjAriIGXc43lg645swzC2PLRuTm7EQqC6M3B
vE1IDhbRDRwYbc0qypc159o7Rig+5sMEFMqaSTBwL7qOMA+PbdRdQRyICVDl+1Gt
REEWTN/CBo8UPw==
-----END CERTIFICATE-----
Generated at Sat Sep 20 00:22:08 2025 by rpki-client