Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: fFvmxgZta+vC8t7mFGcwYtUqQmThScKtYSiWq8ZhBH4=
Subject key identifier: D7:EE:D6:E9:E1:20:31:9B:E6:29:96:C5:55:D5:5E:1D:A2:4E:C8:36
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 019A706E3C96869590F721E531386299AA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 01:01:03 +0000
Manifest this update: Tue 11 Nov 2025 01:01:03 +0000
Manifest next update: Wed 12 Nov 2025 01:01:03 +0000
Files and hashes: 1: 1F8onmseCNCuGUO4DR0wCF969LM.roa (hash: 5Q04Z/04ubuR0XnIvzjk6WhZzGAxE4KZkR5m6+NYcEk=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: SjycvCYJ/KaoLBTydJYL9/pqhUEmNTFQohIh9loRc9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:3c:96:86:95:90:f7:21:e5:31:38:62:99:aa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Nov 11 01:01:03 2025 GMT
Not After : Nov 12 01:01:03 2025 GMT
Subject: CN=d7eed6e9e120319be62996c555d55e1da24ec836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:1e:83:58:ed:9c:3c:61:34:56:45:ed:83:
a5:2e:00:cf:7f:be:85:37:36:de:1a:3d:3f:2b:a5:
76:85:19:df:5e:a8:d2:bc:b4:89:a5:e7:8a:cb:5a:
68:9b:e4:5c:31:c1:4e:91:d0:e2:29:fc:9c:54:01:
0a:1e:4e:c8:f8:28:50:c2:01:cb:f8:da:47:9b:1a:
0d:82:07:8a:e4:d6:04:42:a8:34:d4:39:02:f1:3d:
23:63:f0:a6:5b:31:3a:8f:6d:8e:de:23:ef:01:df:
63:44:b4:03:e6:0f:b1:89:bd:d8:37:7d:58:18:0a:
bb:01:fa:e1:0c:3a:70:3e:a3:1f:ab:75:32:b3:f7:
38:16:a7:87:b2:2f:27:e1:bd:9b:f6:b7:79:d0:64:
c8:06:03:e6:c5:b9:91:34:19:02:a4:b8:98:eb:fb:
5d:49:6f:7d:eb:d6:bf:53:26:c4:f0:fe:fd:4e:52:
f6:26:56:f6:62:6c:88:50:19:4e:5c:a0:4c:2d:39:
91:76:b9:eb:9e:1c:a3:60:0f:f3:a1:29:5c:e8:09:
e3:33:32:7e:a2:c4:ec:58:fb:59:b2:09:44:72:ce:
16:6a:66:0e:71:92:a7:63:75:7f:49:6c:ae:81:3a:
a3:08:3e:a5:54:15:be:57:d8:67:ef:17:38:d8:a5:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EE:D6:E9:E1:20:31:9B:E6:29:96:C5:55:D5:5E:1D:A2:4E:C8:36
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b3:86:5b:10:6c:62:ce:f4:5e:d3:23:3c:c1:7c:78:49:88:
eb:f7:69:17:e7:b7:32:e1:94:5f:30:47:a0:10:af:a8:ed:12:
35:6f:f1:01:df:a9:d0:d8:17:6b:d4:b0:1b:c3:f2:dc:22:70:
91:1c:78:c4:08:29:ec:16:c8:1f:10:f6:81:b2:95:78:3d:f5:
6e:17:e2:58:32:2e:c6:7f:21:3c:32:5b:6e:0a:d2:7d:6c:ca:
26:25:c7:cf:49:e3:d4:ce:41:79:bf:a3:c0:4b:e5:c9:5f:eb:
a0:bc:8a:0c:2f:d3:e5:b8:00:e4:02:70:da:b9:9c:ab:ef:6d:
1d:8e:24:11:11:0d:3c:b6:57:70:0b:32:80:d9:a8:bf:e2:50:
69:9c:50:c7:fb:fb:63:da:24:65:c6:ca:ab:c8:b5:c0:27:6b:
35:47:ec:2e:44:e9:1e:b8:1a:97:31:9c:78:b6:60:5f:7a:f9:
a4:5a:d7:ea:de:38:ee:43:9d:e3:61:8f:1c:dc:62:56:27:44:
34:0e:68:b8:da:f4:6e:1b:3a:26:e2:44:55:d3:4a:2b:bd:92:
78:e5:93:9d:b1:0d:5a:76:c4:88:ce:ca:1d:83:c1:b1:e6:0c:
76:16:24:5a:82:98:2a:36:a4:ca:5a:67:22:4b:99:3e:e5:05:
2d:96:6c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbjyWhpWQ9yHlMThimaoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5M2IwNjNmYzYzZThhMWFiYTFmNDMwYjJkMDc0ZGJlMjcw
YmUzOTUwHhcNMjUxMTExMDEwMTAzWhcNMjUxMTEyMDEwMTAzWjAzMTEwLwYDVQQD
EyhkN2VlZDZlOWUxMjAzMTliZTYyOTk2YzU1NWQ1NWUxZGEyNGVjODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Yeg1jtnDxhNFZF7YOlLgDPf76F
NzbeGj0/K6V2hRnfXqjSvLSJpeeKy1pom+RcMcFOkdDiKfycVAEKHk7I+ChQwgHL
+NpHmxoNggeK5NYEQqg01DkC8T0jY/CmWzE6j22O3iPvAd9jRLQD5g+xib3YN31Y
GAq7AfrhDDpwPqMfq3Uys/c4FqeHsi8n4b2b9rd50GTIBgPmxbmRNBkCpLiY6/td
SW9969a/UybE8P79TlL2Jlb2YmyIUBlOXKBMLTmRdrnrnhyjYA/zoSlc6AnjMzJ+
osTsWPtZsglEcs4WamYOcZKnY3V/SWyugTqjCD6lVBW+V9hn7xc42KU/3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfu1unhIDGb5imWxVXVXh2iTsg2MB8GA1UdIwQY
MBaAFMk7Bj/GPooauh9DCy0HTb4nC+OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMt
OTQwYmM4MTkxNjU5LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMtOTQwYmM4MTkxNjU5
LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLOGWxBs
Ys70XtMjPMF8eEmI6/dpF+e3MuGUXzBHoBCvqO0SNW/xAd+p0NgXa9SwG8Py3CJw
kRx4xAgp7BbIHxD2gbKVeD31bhfiWDIuxn8hPDJbbgrSfWzKJiXHz0nj1M5Beb+j
wEvlyV/roLyKDC/T5bgA5AJw2rmcq+9tHY4kERENPLZXcAsygNmov+JQaZxQx/v7
Y9okZcbKq8i1wCdrNUfsLkTpHrgalzGceLZgX3r5pFrX6t447kOd42GPHNxiVidE
NA5ouNr0bhs6JuJEVdNKK72SeOWTnbENWnbEiM7KHYPBseYMdhYkWoKYKjakylpn
IkuZPuUFLZZs2w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:00 2025 by rpki-client