Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: yk2T53cRtLFOM9UvwiAPoN4bq/7nMY0aVjKQqRLwKww=
Subject key identifier: 2C:53:AC:55:E1:B0:69:8E:28:0C:3C:DF:8F:D6:97:8A:D7:DE:FA:26
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 01993501C92220261D3E69173DC2AC2A0B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0D0D
Signing time: Wed 10 Sep 2025 19:02:13 +0000
Manifest this update: Wed 10 Sep 2025 19:02:13 +0000
Manifest next update: Thu 11 Sep 2025 19:02:13 +0000
Files and hashes: 1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: rRMw+QJtg0ncuHQhqmXT7FhfOXLI68ifvCp/ff5NUQQ=)
3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:c9:22:20:26:1d:3e:69:17:3d:c2:ac:2a:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Sep 10 19:02:13 2025 GMT
Not After : Sep 11 19:02:13 2025 GMT
Subject: CN=2c53ac55e1b0698e280c3cdf8fd6978ad7defa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:3e:a2:35:83:9c:ab:43:31:08:92:1e:d6:
14:79:ec:6d:b8:83:a8:d0:46:3e:fd:4f:c1:43:74:
ef:0e:ca:ff:33:50:ac:3f:b4:ab:1d:4e:3e:f8:03:
c2:94:79:d3:35:3f:2d:6d:68:2d:7c:3e:e5:1f:6c:
0d:93:28:91:db:da:fd:24:ef:58:36:12:c2:56:27:
6a:44:9c:2e:9d:72:4b:47:8c:24:bc:96:eb:d1:df:
81:58:73:71:c2:4f:78:9f:a4:85:9a:51:86:d5:69:
a1:0c:28:14:6a:a5:b8:00:cf:8e:79:12:58:26:41:
86:8b:4b:89:c8:63:ec:ae:ab:6a:ec:77:c8:7f:79:
d3:b6:ed:4c:40:99:13:8d:bc:23:2e:32:2e:67:5f:
31:30:ea:96:7c:c4:38:86:64:b9:7d:fd:a0:7c:86:
fa:c4:1d:f9:08:a4:f0:f2:2b:6c:53:33:98:ea:5c:
ab:d2:6b:e3:d1:f9:d8:ee:90:42:d0:46:9f:dc:14:
8e:8a:85:f8:28:f1:81:d9:91:ad:44:f1:a4:09:15:
dc:91:4e:b5:90:56:ae:1b:a1:4a:63:07:ed:e4:7f:
28:36:4e:b2:26:f6:ad:1b:cd:15:33:bf:34:e4:b3:
7f:34:01:ca:8d:cd:64:b4:52:99:19:84:b4:e5:be:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:53:AC:55:E1:B0:69:8E:28:0C:3C:DF:8F:D6:97:8A:D7:DE:FA:26
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e7:25:a4:f7:a5:bf:d6:d5:2c:34:58:5a:85:13:19:1e:c9:
13:c4:67:5b:a1:c5:fb:ae:5c:08:eb:dd:bf:0b:85:f4:63:b2:
00:7f:e7:15:12:c0:da:0d:0a:cb:03:87:29:c1:37:63:74:34:
0c:85:7f:9f:3f:59:71:0d:fb:36:ea:58:5d:c9:49:a6:67:05:
0c:69:4d:21:fc:2f:db:dc:46:7d:bb:b7:7b:dd:df:0c:61:ce:
f2:36:0a:19:29:67:82:63:42:08:9b:e1:b7:f8:75:65:41:14:
dc:81:df:5e:11:a6:06:73:93:9b:25:ad:69:f0:22:d6:cb:b8:
e7:26:84:88:39:29:7d:64:cf:84:af:7f:e1:78:13:2a:9e:96:
f2:95:52:29:6a:32:e4:f3:26:d7:58:d2:b3:7c:90:e5:0a:e9:
9f:47:1d:1e:14:2c:88:53:13:7f:32:79:9a:e4:72:46:3a:3e:
0d:8e:e6:26:64:f4:84:b6:8b:d8:f1:af:76:a9:b3:5f:9e:1e:
60:71:0a:d4:7c:de:20:8c:2c:be:3f:ed:35:61:77:ba:d1:7b:
c5:11:28:80:c8:a9:61:19:db:7d:e9:ef:40:37:6b:b0:b1:59:
9c:a9:ba:83:38:ed:72:5a:fe:57:39:fb:8a:79:b6:dc:d9:78:
65:29:31:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1AckiICYdPmkXPcKsKgsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh
NDY0ZWUwHhcNMjUwOTEwMTkwMjEzWhcNMjUwOTExMTkwMjEzWjAzMTEwLwYDVQQD
EygyYzUzYWM1NWUxYjA2OThlMjgwYzNjZGY4ZmQ2OTc4YWQ3ZGVmYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeE+ojWDnKtDMQiSHtYUeextuIOo
0EY+/U/BQ3TvDsr/M1CsP7SrHU4++APClHnTNT8tbWgtfD7lH2wNkyiR29r9JO9Y
NhLCVidqRJwunXJLR4wkvJbr0d+BWHNxwk94n6SFmlGG1WmhDCgUaqW4AM+OeRJY
JkGGi0uJyGPsrqtq7HfIf3nTtu1MQJkTjbwjLjIuZ18xMOqWfMQ4hmS5ff2gfIb6
xB35CKTw8itsUzOY6lyr0mvj0fnY7pBC0Eaf3BSOioX4KPGB2ZGtRPGkCRXckU61
kFauG6FKYwft5H8oNk6yJvatG80VM7805LN/NAHKjc1ktFKZGYS05b5jxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxTrFXhsGmOKAw834/Wl4rX3vomMB8GA1UdIwQY
MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt
MzgyMGY3ZWUyY2I4LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4
LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruclpPel
v9bVLDRYWoUTGR7JE8RnW6HF+65cCOvdvwuF9GOyAH/nFRLA2g0KywOHKcE3Y3Q0
DIV/nz9ZcQ37NupYXclJpmcFDGlNIfwv29xGfbu3e93fDGHO8jYKGSlngmNCCJvh
t/h1ZUEU3IHfXhGmBnOTmyWtafAi1su45yaEiDkpfWTPhK9/4XgTKp6W8pVSKWoy
5PMm11jSs3yQ5Qrpn0cdHhQsiFMTfzJ5muRyRjo+DY7mJmT0hLaL2PGvdqmzX54e
YHEK1HzeIIwsvj/tNWF3utF7xREogMipYRnbfenvQDdrsLFZnKm6gzjtclr+Vzn7
inm23Nl4ZSkxRQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:20:55 2025 by rpki-client