Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File: Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier: QUjJ/oZnUa4D1qP69HslqTkR/8XwG7xQUuhQvqeGI9w=
Subject key identifier: A4:11:12:34:FE:AB:07:47:E9:71:FE:8F:73:6D:7C:DF:CC:EB:7C:49
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 019A1E757061725B529C59225C540069AB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number: 0D24
Signing time: Sun 26 Oct 2025 03:00:04 +0000
Manifest this update: Sun 26 Oct 2025 03:00:04 +0000
Manifest next update: Mon 27 Oct 2025 03:00:04 +0000
Files and hashes: 1: 8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa (hash: PIXJikr44w+6nZYZyCRJ915rQc/SIe+DvX16n4ZT0no=)
2: G_qyBKK6ClXdG1bs8Wh_ckDLkeI.roa (hash: 05zKtGqeHJmsZPaIinYmSC+r/nrmG7SF+AMON4UTZOQ=)
3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: qDJ6jArNIa+4mgyMvMpDHPLRly0/F+wYNAMfTEcVbMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:75:70:61:72:5b:52:9c:59:22:5c:54:00:69:ab:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Oct 26 03:00:04 2025 GMT
Not After : Oct 27 03:00:04 2025 GMT
Subject: CN=a4111234feab0747e971fe8f736d7cdfcceb7c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:4f:8a:cb:ed:5f:7b:fe:1d:d0:a8:01:99:
4d:d6:c3:29:e1:69:12:06:fd:bd:bc:f5:05:8d:b0:
0c:3d:b9:7f:62:b3:2d:7a:9f:ef:f0:0c:ba:be:ee:
00:07:fb:22:24:72:9d:e4:62:99:e4:38:a8:d7:49:
7d:20:54:16:a7:00:07:4a:24:d9:f2:a2:86:74:ee:
87:96:96:c0:06:e7:ce:96:da:a1:9c:fe:ed:22:74:
c7:85:0a:4e:a5:05:f1:42:86:3c:d5:0f:20:63:9a:
4d:e0:32:c0:bb:ab:db:54:3b:a0:41:b2:6e:92:34:
69:19:1c:2c:fc:63:c2:63:25:29:d1:32:70:27:49:
4d:94:1c:be:21:16:48:ef:c4:28:cc:84:0f:8e:d7:
ca:84:09:96:a6:9a:17:a2:08:64:b4:77:38:25:f0:
7b:89:cc:ba:b3:4b:39:a4:eb:05:d7:68:7d:33:c8:
90:6d:6e:bf:14:a8:a6:e7:24:a7:87:22:22:b8:48:
5b:41:8c:96:71:c4:e0:fa:40:91:90:60:83:b9:b8:
37:22:fe:db:d7:65:78:fa:65:5f:1c:c6:e7:c7:9f:
2b:c7:15:3b:b5:a1:8e:94:84:de:59:a9:b7:1d:2b:
36:d7:07:c8:90:e2:4c:63:2d:8d:d6:99:c7:ac:81:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:11:12:34:FE:AB:07:47:E9:71:FE:8F:73:6D:7C:DF:CC:EB:7C:49
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e8:24:f5:b6:a9:cb:42:fc:a4:00:4a:3a:5c:c7:aa:0f:91:
6e:02:94:f1:ad:ae:eb:24:d1:d9:05:d5:0f:48:90:39:76:0c:
30:ca:08:ce:16:31:07:e0:0d:d6:99:80:56:11:91:bd:b0:93:
23:0a:e5:a3:b5:45:95:b6:fb:60:33:94:b4:ed:a2:98:90:ea:
32:dc:c9:fc:52:80:1a:c7:e9:aa:42:60:12:43:f8:08:cb:6c:
71:34:0d:ef:6d:ec:52:e2:59:cd:66:d8:00:f2:d9:2a:f2:c0:
fe:bb:ea:95:0d:5f:bb:95:57:a9:33:73:e0:d0:dd:45:d2:69:
7d:d3:a5:e6:db:93:ed:55:d3:1d:3b:36:6c:88:ee:19:60:19:
e0:a7:c9:0d:94:89:22:2e:65:7b:d9:d8:bd:a8:75:70:3b:ef:
48:21:fe:9f:5a:1b:8c:8e:14:50:a2:35:2e:1c:e4:83:fa:71:
b3:2c:41:f9:51:d1:d3:8d:72:68:e8:03:97:09:35:24:db:71:
03:e3:29:cd:e3:15:80:f1:b3:16:a4:c1:d9:02:84:b0:15:ca:
71:7b:56:49:5d:9f:78:92:b6:96:b7:f5:5c:cb:1b:db:8d:81:
0a:f9:78:3f:4f:19:e0:d7:03:70:af:a0:4a:33:c4:4f:1f:e3:
f6:c9:27:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoedXBhcltSnFkiXFQAaasiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDI2MDBiZjFjYzkyMTZhZTZmZTE2OWExZTlkNTQxOGFk
OTNhMjIwHhcNMjUxMDI2MDMwMDA0WhcNMjUxMDI3MDMwMDA0WjAzMTEwLwYDVQQD
EyhhNDExMTIzNGZlYWIwNzQ3ZTk3MWZlOGY3MzZkN2NkZmNjZWI3YzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWBPisvtX3v+HdCoAZlN1sMp4WkS
Bv29vPUFjbAMPbl/YrMtep/v8Ay6vu4AB/siJHKd5GKZ5Dio10l9IFQWpwAHSiTZ
8qKGdO6HlpbABufOltqhnP7tInTHhQpOpQXxQoY81Q8gY5pN4DLAu6vbVDugQbJu
kjRpGRws/GPCYyUp0TJwJ0lNlBy+IRZI78QozIQPjtfKhAmWppoXoghktHc4JfB7
icy6s0s5pOsF12h9M8iQbW6/FKim5ySnhyIiuEhbQYyWccTg+kCRkGCDubg3Iv7b
12V4+mVfHMbnx58rxxU7taGOlITeWam3HSs21wfIkOJMYy2N1pnHrIFr+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQREjT+qwdH6XH+j3NtfN/M63xJMB8GA1UdIwQY
MBaAFGNCYAvxzJIWrm/haaHp1UGK2ToiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZjA3NmQtZjBlOS00MmI0LWFkNWYt
NzMxMjA2M2ZmYTdmLzEvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZjA3NmQtZjBlOS00MmI0LWFkNWYtNzMxMjA2M2ZmYTdm
LzEvWTBKZ0NfSE1raGF1Yi1GcG9lblZRWXJaT2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoegk9bap
y0L8pABKOlzHqg+RbgKU8a2u6yTR2QXVD0iQOXYMMMoIzhYxB+AN1pmAVhGRvbCT
Iwrlo7VFlbb7YDOUtO2imJDqMtzJ/FKAGsfpqkJgEkP4CMtscTQN723sUuJZzWbY
APLZKvLA/rvqlQ1fu5VXqTNz4NDdRdJpfdOl5tuT7VXTHTs2bIjuGWAZ4KfJDZSJ
Ii5le9nYvah1cDvvSCH+n1objI4UUKI1Lhzkg/pxsyxB+VHR041yaOgDlwk1JNtx
A+MpzeMVgPGzFqTB2QKEsBXKcXtWSV2feJK2lrf1XMsb242BCvl4P08Z4NcDcK+g
SjPETx/j9sknqA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:50:35 2025 by rpki-client