Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: YCCrhwC44K1jLxdPo4a80hG2Guk/sCW78Xo0gaYXpXE=
Subject key identifier: DB:57:5E:A3:93:76:27:1D:8A:00:76:D7:76:FF:73:40:88:E3:87:24
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019A269D21078A75E7780FF210A1B1F9F746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 17:00:22 +0000
Manifest this update: Mon 27 Oct 2025 17:00:22 +0000
Manifest next update: Tue 28 Oct 2025 17:00:22 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: 0/lvnXyGwQ5wtxMN8Qn9NBjlkfYXnOkPtKOqrI0nI0Q=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:21:07:8a:75:e7:78:0f:f2:10:a1:b1:f9:f7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Oct 27 17:00:22 2025 GMT
Not After : Oct 28 17:00:22 2025 GMT
Subject: CN=db575ea39376271d8a0076d776ff734088e38724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:f0:6c:d0:db:bc:c8:e0:e3:c4:03:cd:cc:
39:a1:43:15:39:2e:b7:c9:27:eb:1e:d6:d1:9b:b3:
2a:80:1c:65:a7:08:4c:62:3e:96:30:71:13:13:0a:
2c:7a:24:e6:ed:30:b6:b5:6a:83:5a:8f:9e:79:95:
75:00:67:a2:71:aa:cd:fe:1f:11:fa:fb:2a:0c:d2:
27:75:47:35:20:ff:93:1b:f1:1d:c9:68:51:3e:00:
ca:82:5b:c8:07:23:f1:92:02:47:00:b7:62:ac:38:
14:f2:f0:a2:08:2f:45:83:95:c3:9d:e5:76:38:82:
34:8e:8b:88:36:b1:c9:b1:00:5e:60:28:d5:5b:ca:
c9:8e:bc:e2:bf:38:a1:a9:5b:f8:40:94:f9:cc:ea:
10:0a:7f:08:ed:17:cc:68:d7:40:94:65:9f:d2:4c:
33:8d:d4:cc:89:04:28:ae:a6:85:c8:2d:b5:23:af:
7b:15:52:29:c2:04:b3:33:e0:d6:39:8d:1d:93:00:
0a:60:04:15:7a:6a:7f:a4:66:2a:91:98:85:dc:99:
f8:a8:bf:40:16:87:fa:f9:d8:92:61:38:a3:34:29:
af:ce:96:78:85:07:e5:73:48:0f:6f:4e:67:96:e6:
b8:71:d2:2e:c8:57:2c:4c:2a:e7:48:60:03:47:49:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:57:5E:A3:93:76:27:1D:8A:00:76:D7:76:FF:73:40:88:E3:87:24
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4e:75:4d:eb:3b:f3:16:06:0b:76:8f:4f:16:51:4b:2b:2a:
6a:d9:81:93:60:cd:b5:a1:6c:b0:cc:d2:77:fc:2e:a6:1d:61:
89:fc:49:47:6b:3f:4f:e1:22:35:cf:61:61:e4:59:2d:81:9c:
9d:5b:98:b6:3b:ca:fc:b0:09:46:b8:ec:c4:0c:6d:bc:89:24:
8c:91:33:d0:4b:3b:85:4e:21:76:22:1b:e8:7b:7f:29:69:d0:
fe:1b:0b:57:a9:2f:4e:69:58:1f:7d:82:00:e5:83:c9:dc:4f:
bc:86:ce:91:a5:77:0a:c6:cb:fe:11:21:6b:ab:df:f6:03:e2:
5d:a5:c8:84:d0:b1:6e:ba:b0:b1:80:8e:d6:a8:3d:35:43:4e:
04:49:11:b7:8e:a6:7d:8c:72:f3:4b:f5:59:a1:99:be:75:d1:
14:3f:db:e1:e8:01:d1:ac:60:1d:90:e6:7c:08:37:5a:2c:8d:
73:69:b8:bb:e4:4d:21:74:fc:fb:dc:f6:62:0c:e3:0b:ff:57:
7a:d3:f7:63:e8:3d:52:74:7a:23:57:72:99:78:85:8b:2b:23:
de:dd:71:6f:18:a6:24:0c:37:6b:d8:08:db:ef:19:a1:55:47:
7d:c5:ef:48:e8:f0:a8:fd:46:20:d8:68:c7:84:78:a0:a3:f7:
7d:48:28:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomnSEHinXneA/yEKGx+fdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzODgzYTc5Nzg5ZDlmNjU4MTUyOTJmMThkNDk4MGJhOWM1
ZWQyMjEwHhcNMjUxMDI3MTcwMDIyWhcNMjUxMDI4MTcwMDIyWjAzMTEwLwYDVQQD
EyhkYjU3NWVhMzkzNzYyNzFkOGEwMDc2ZDc3NmZmNzM0MDg4ZTM4NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFjwbNDbvMjg48QDzcw5oUMVOS63
ySfrHtbRm7MqgBxlpwhMYj6WMHETEwoseiTm7TC2tWqDWo+eeZV1AGeicarN/h8R
+vsqDNIndUc1IP+TG/EdyWhRPgDKglvIByPxkgJHALdirDgU8vCiCC9Fg5XDneV2
OII0jouINrHJsQBeYCjVW8rJjrzivzihqVv4QJT5zOoQCn8I7RfMaNdAlGWf0kwz
jdTMiQQorqaFyC21I697FVIpwgSzM+DWOY0dkwAKYAQVemp/pGYqkZiF3Jn4qL9A
Fof6+diSYTijNCmvzpZ4hQflc0gPb05nlua4cdIuyFcsTCrnSGADR0nGDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtXXqOTdicdigB213b/c0CI44ckMB8GA1UdIwQY
MBaAFGOIOnl4nZ9lgVKS8Y1JgLqcXtIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYt
MzVkMDU5NWUxMmYwLzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYtMzVkMDU5NWUxMmYw
LzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg051Tes7
8xYGC3aPTxZRSysqatmBk2DNtaFssMzSd/wuph1hifxJR2s/T+EiNc9hYeRZLYGc
nVuYtjvK/LAJRrjsxAxtvIkkjJEz0Es7hU4hdiIb6Ht/KWnQ/hsLV6kvTmlYH32C
AOWDydxPvIbOkaV3CsbL/hEha6vf9gPiXaXIhNCxbrqwsYCO1qg9NUNOBEkRt46m
fYxy80v1WaGZvnXRFD/b4egB0axgHZDmfAg3WiyNc2m4u+RNIXT8+9z2YgzjC/9X
etP3Y+g9UnR6I1dymXiFiysj3t1xbximJAw3a9gI2+8ZoVVHfcXvSOjwqP1GINho
x4R4oKP3fUgo/w==
-----END CERTIFICATE-----
Generated at Tue Oct 28 02:02:42 2025 by rpki-client