Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: yAe2VrIt6AzORze8EqabuHiLdfUysqnOh49v8G7d7hs=
Subject key identifier: 01:3E:5A:A0:42:94:C6:4D:09:AD:54:6C:03:4E:74:37:B1:F1:25:9D
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019A4D7477B5AB7DF99FFC26DFD6007A37E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 11EC
Signing time: Tue 04 Nov 2025 06:01:09 +0000
Manifest this update: Tue 04 Nov 2025 06:01:09 +0000
Manifest next update: Wed 05 Nov 2025 06:01:09 +0000
Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: RSIo50UPJqClUZf7TEMjFwMhkPDA3yk/ubSyJbJIPKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:77:b5:ab:7d:f9:9f:fc:26:df:d6:00:7a:37:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Nov 4 06:01:09 2025 GMT
Not After : Nov 5 06:01:09 2025 GMT
Subject: CN=013e5aa04294c64d09ad546c034e7437b1f1259d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:e6:64:46:e0:59:45:80:b5:ca:a1:04:32:
8f:57:87:f1:65:94:a7:8d:76:f1:b4:ec:81:31:8a:
4c:78:4f:0f:c6:75:7e:db:1d:ef:3f:8e:59:19:6b:
d7:db:1f:59:8c:df:0c:55:c4:23:5c:dc:29:ec:e0:
e1:78:0c:8d:25:fd:30:f2:aa:97:1e:44:2e:2f:2e:
56:9e:4b:bf:47:ce:3c:ae:b8:5e:b0:d5:36:5b:41:
45:d7:51:c9:22:80:5c:bf:aa:4b:9e:f9:7e:33:02:
23:4c:bc:09:30:b8:1d:97:50:46:9d:9b:a9:6b:85:
a2:bb:52:a1:36:e1:64:b9:b9:61:cb:4e:a4:fb:d6:
ec:9a:b2:b6:ea:11:79:f8:37:f1:9f:fd:e2:a7:1b:
38:28:18:33:da:32:67:2d:e9:68:7e:16:72:92:d0:
f2:e3:6a:1c:8f:87:bb:97:6b:e9:09:77:bf:8b:4f:
36:2c:26:61:e2:b5:60:83:5e:11:88:70:7f:92:7c:
c3:42:59:97:a1:5e:81:74:fe:4b:55:e6:52:37:84:
20:9f:c4:8a:e9:f6:fa:ca:db:65:3d:5e:59:d9:ef:
42:2b:f3:11:e3:df:bf:47:2a:6a:d8:6c:10:92:37:
f3:3c:8a:32:27:ea:a5:17:af:80:ec:86:f2:09:c0:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3E:5A:A0:42:94:C6:4D:09:AD:54:6C:03:4E:74:37:B1:F1:25:9D
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:58:b7:69:87:a5:43:de:5c:01:e5:99:f8:6d:94:63:19:5b:
cc:9f:78:18:cf:60:11:29:f7:af:55:43:44:20:b3:1e:6c:0e:
db:8c:df:ab:06:43:3b:09:e4:69:1d:ef:29:5d:3e:4f:9f:3d:
a9:d6:04:f0:0f:b7:1b:4c:aa:7e:05:67:e6:38:cf:dc:d7:69:
e5:55:5b:48:40:db:38:8d:e1:a1:06:57:0e:23:ef:d6:7a:58:
8b:18:24:69:6e:a6:33:4f:02:2b:52:a5:a9:e2:94:22:31:90:
90:30:26:56:ca:16:79:84:1b:3e:c3:8a:d6:e2:a3:78:73:9e:
8f:41:56:65:37:b0:ef:e9:e4:d2:e7:10:a7:e9:af:63:c3:c0:
7e:d0:7b:f4:89:a3:3f:82:49:42:ac:b7:59:2c:86:1a:0d:52:
a8:ee:c6:55:c7:a0:0f:85:39:93:84:b5:4a:b5:c2:82:f1:65:
1a:db:94:f8:ef:48:4f:a5:c5:7c:d2:06:f2:d7:a0:51:85:a8:
27:12:d8:e8:17:2c:6f:ce:20:84:a9:87:90:cd:c9:53:94:cc:
8d:d7:1c:d6:d6:2e:d3:eb:32:f1:38:7f:4d:a6:10:f8:0c:29:
60:0a:56:cd:29:ce:34:bc:ee:6f:6f:d2:3d:d8:08:a5:1c:b0:
bd:d2:b3:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdHe1q335n/wm39YAejfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj
OWRiNWYwHhcNMjUxMTA0MDYwMTA5WhcNMjUxMTA1MDYwMTA5WjAzMTEwLwYDVQQD
EygwMTNlNWFhMDQyOTRjNjRkMDlhZDU0NmMwMzRlNzQzN2IxZjEyNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6bmZEbgWUWAtcqhBDKPV4fxZZSn
jXbxtOyBMYpMeE8PxnV+2x3vP45ZGWvX2x9ZjN8MVcQjXNwp7ODheAyNJf0w8qqX
HkQuLy5Wnku/R848rrhesNU2W0FF11HJIoBcv6pLnvl+MwIjTLwJMLgdl1BGnZup
a4Wiu1KhNuFkublhy06k+9bsmrK26hF5+Dfxn/3ipxs4KBgz2jJnLelofhZyktDy
42ocj4e7l2vpCXe/i082LCZh4rVgg14RiHB/knzDQlmXoV6BdP5LVeZSN4Qgn8SK
6fb6yttlPV5Z2e9CK/MR49+/Rypq2GwQkjfzPIoyJ+qlF6+A7IbyCcAUkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAE+WqBClMZNCa1UbANOdDex8SWdMB8GA1UdIwQY
MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt
MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri
LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyVi3aYel
Q95cAeWZ+G2UYxlbzJ94GM9gESn3r1VDRCCzHmwO24zfqwZDOwnkaR3vKV0+T589
qdYE8A+3G0yqfgVn5jjP3Ndp5VVbSEDbOI3hoQZXDiPv1npYixgkaW6mM08CK1Kl
qeKUIjGQkDAmVsoWeYQbPsOK1uKjeHOej0FWZTew7+nk0ucQp+mvY8PAftB79Imj
P4JJQqy3WSyGGg1SqO7GVcegD4U5k4S1SrXCgvFlGtuU+O9IT6XFfNIG8tegUYWo
JxLY6Bcsb84ghKmHkM3JU5TMjdcc1tYu0+sy8Th/TaYQ+AwpYApWzSnONLzub2/S
PdgIpRywvdKzIw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:16:46 2025 by rpki-client