Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: Lm9MmbHq2t4bZDygPAlELOzh2fpGbJ+7ntayU9xSsfg=
Subject key identifier: B3:BD:4C:D5:A6:20:9C:0C:18:94:C8:58:95:6E:F9:65:B9:0C:9B:33
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019A1E3ED7D9EAFFEC7876B51D1784647F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 16F2
Signing time: Sun 26 Oct 2025 02:00:26 +0000
Manifest this update: Sun 26 Oct 2025 02:00:26 +0000
Manifest next update: Mon 27 Oct 2025 02:00:26 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: t1U7g2JyoclUIIR7cKVZWKIFxHjvQbuAMoJfdEldTE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:d7:d9:ea:ff:ec:78:76:b5:1d:17:84:64:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Oct 26 02:00:26 2025 GMT
Not After : Oct 27 02:00:26 2025 GMT
Subject: CN=b3bd4cd5a6209c0c1894c858956ef965b90c9b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:89:61:ea:a5:60:3e:b3:08:84:ad:be:45:
99:e3:e3:1d:97:2b:cf:8a:84:51:e2:0a:b8:05:b2:
3e:2e:b2:20:ce:63:88:5f:5f:b4:42:e2:e9:1a:d5:
f8:19:70:6d:5f:cb:92:84:49:21:ef:17:db:8d:c8:
9a:19:7d:6d:7d:1a:8b:70:fb:b9:4c:18:54:0d:5e:
a6:45:df:2e:49:2b:81:c4:75:fe:f2:f8:a4:06:73:
66:c2:73:89:48:91:97:74:19:10:54:a5:5e:a5:73:
4a:7e:22:dd:f2:72:ca:e8:23:fb:f9:12:f4:29:9a:
83:9d:f2:45:f1:d3:94:ed:91:c5:cc:39:c3:0b:86:
b4:42:b5:87:a2:6d:35:de:bf:cb:14:01:3f:27:dd:
50:99:34:bf:f3:1f:3b:c9:9d:77:dd:08:39:6b:77:
06:4f:88:a9:87:7f:cd:f0:16:5e:47:22:0d:30:5f:
24:04:a7:fa:4b:3a:2a:e5:d5:01:b4:67:ab:64:3d:
7e:7b:16:1c:10:d1:4f:8d:66:fa:75:4f:9b:a3:4d:
fe:7f:f0:1a:72:d1:7a:32:07:0f:d3:8c:24:c9:7f:
83:a1:9e:2a:a8:fb:fa:ef:47:3b:19:f1:ea:d7:5b:
24:f0:71:5f:9a:d4:0f:6c:2a:96:c2:77:05:42:a2:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BD:4C:D5:A6:20:9C:0C:18:94:C8:58:95:6E:F9:65:B9:0C:9B:33
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:25:3e:aa:94:03:60:99:16:ed:90:ef:eb:0a:22:09:37:8a:
d2:36:e5:f1:e6:f9:d7:43:b9:4e:99:7d:a0:f5:38:0f:f8:66:
83:33:1f:38:d1:e0:82:fd:c5:3a:55:1f:0f:69:96:dc:59:58:
17:48:23:7e:1b:8b:db:d8:7d:fb:04:6b:66:26:4a:b4:ec:e8:
4d:49:07:79:1b:3b:ad:9f:39:89:5f:c3:27:65:b7:7e:1c:67:
42:65:cf:c2:0f:a0:2d:fa:37:eb:74:dc:d1:2a:91:a5:11:6b:
43:ea:70:fd:74:ff:f0:67:17:0b:7d:de:12:f5:bc:e9:65:9e:
3f:5f:11:3f:eb:86:05:5d:cb:9e:ae:2e:f2:05:69:d5:27:68:
dc:c2:99:1c:f4:e1:0b:a8:af:64:37:80:65:25:98:ae:19:36:
9d:7e:eb:21:47:23:c2:1f:26:fd:0f:0f:03:74:48:5f:77:6a:
fd:fb:96:d1:b1:59:54:26:92:b0:59:78:8f:b1:ba:22:9f:a0:
47:54:b8:8f:f0:3e:ac:de:86:52:04:0b:4b:c2:90:7a:bf:ec:
e8:8d:35:33:20:50:df:c5:5c:b4:6a:98:90:59:1c:71:6b:f0:
3f:23:58:32:4c:f4:5c:8f:68:58:c6:ce:5d:3b:7b:d9:8f:f6:
80:33:f9:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoePtfZ6v/seHa1HReEZH9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNWUzZWM1YTkwNjIzY2NiOTc3ODRkM2NlZjI0MjEyYTMx
Y2JhZjEwHhcNMjUxMDI2MDIwMDI2WhcNMjUxMDI3MDIwMDI2WjAzMTEwLwYDVQQD
EyhiM2JkNGNkNWE2MjA5YzBjMTg5NGM4NTg5NTZlZjk2NWI5MGM5YjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z2JYeqlYD6zCIStvkWZ4+MdlyvP
ioRR4gq4BbI+LrIgzmOIX1+0QuLpGtX4GXBtX8uShEkh7xfbjciaGX1tfRqLcPu5
TBhUDV6mRd8uSSuBxHX+8vikBnNmwnOJSJGXdBkQVKVepXNKfiLd8nLK6CP7+RL0
KZqDnfJF8dOU7ZHFzDnDC4a0QrWHom013r/LFAE/J91QmTS/8x87yZ133Qg5a3cG
T4iph3/N8BZeRyINMF8kBKf6Szoq5dUBtGerZD1+exYcENFPjWb6dU+bo03+f/Aa
ctF6MgcP04wkyX+DoZ4qqPv670c7GfHq11sk8HFfmtQPbCqWwncFQqKw9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLO9TNWmIJwMGJTIWJVu+WW5DJszMB8GA1UdIwQY
MBaAFMpePsWpBiPMuXeE087yQhKjHLrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMt
NmYzMWY2ZjdmMTZiLzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMtNmYzMWY2ZjdmMTZi
LzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiU+qpQD
YJkW7ZDv6woiCTeK0jbl8eb510O5Tpl9oPU4D/hmgzMfONHggv3FOlUfD2mW3FlY
F0gjfhuL29h9+wRrZiZKtOzoTUkHeRs7rZ85iV/DJ2W3fhxnQmXPwg+gLfo363Tc
0SqRpRFrQ+pw/XT/8GcXC33eEvW86WWeP18RP+uGBV3Lnq4u8gVp1Sdo3MKZHPTh
C6ivZDeAZSWYrhk2nX7rIUcjwh8m/Q8PA3RIX3dq/fuW0bFZVCaSsFl4j7G6Ip+g
R1S4j/A+rN6GUgQLS8KQer/s6I01MyBQ38VctGqYkFkccWvwPyNYMkz0XI9oWMbO
XTt72Y/2gDP5zg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:18:09 2025 by rpki-client