Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: rVv0Zno+gadlkcoNNdxb+7rL7VjxJvTNb4NTGnwnCFU=
Subject key identifier: 20:48:0A:B3:76:EE:0C:B2:33:15:3D:C1:F4:3B:FF:48:DB:7D:CE:2E
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019A4D3D24DF3779663E5DC6DC1D5BD41434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 05:00:43 +0000
Manifest this update: Tue 04 Nov 2025 05:00:43 +0000
Manifest next update: Wed 05 Nov 2025 05:00:43 +0000
Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=)
2: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=)
3: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=)
4: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=)
5: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=)
6: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=)
7: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=)
8: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: OdVqcxZD6HTVayJNF2k21jLmnn2Rb5esjfGyG+8xRA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:24:df:37:79:66:3e:5d:c6:dc:1d:5b:d4:14:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Nov 4 05:00:43 2025 GMT
Not After : Nov 5 05:00:43 2025 GMT
Subject: CN=20480ab376ee0cb233153dc1f43bff48db7dce2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:50:b7:d4:a9:0e:a1:dd:a5:a5:5f:87:20:
80:67:40:9b:36:62:fa:f6:b9:52:98:e3:52:ce:c3:
19:58:f5:87:27:ae:65:ed:db:eb:af:f4:62:f0:48:
7f:1e:52:fa:34:dd:1f:9e:a0:ec:94:22:2d:91:d1:
d5:7a:e3:4c:e8:48:29:53:69:07:dc:86:3d:f2:b3:
d1:bf:fb:3f:8a:66:97:7d:e6:7a:b3:1d:98:1b:0b:
d7:e1:80:f3:e7:b9:5b:3d:e6:41:51:ba:54:a7:3d:
5b:4f:d8:70:9a:1d:62:dc:db:7a:58:aa:aa:00:e3:
d3:a3:e4:69:d7:39:12:4f:14:e6:4f:a1:4c:1b:a2:
5b:b7:fd:0d:e5:d9:ea:23:44:01:39:44:f4:64:47:
da:fd:6e:98:77:cd:a8:b9:d6:1d:e4:d4:d9:69:63:
6b:fb:5c:3f:18:14:73:45:27:15:62:23:c8:45:22:
dc:f1:19:5d:ad:89:b5:1a:93:b1:b8:f6:17:4d:d3:
cc:8a:82:6f:4d:66:68:9d:5b:60:5a:60:86:13:08:
c4:7f:be:b1:ae:c6:32:01:c1:28:af:c3:9d:16:59:
3b:42:af:c7:0d:a5:7c:1c:ec:9b:d8:5a:10:32:a8:
c9:2b:7a:eb:97:bd:ee:ef:0a:e8:ad:5b:61:8d:4c:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:0A:B3:76:EE:0C:B2:33:15:3D:C1:F4:3B:FF:48:DB:7D:CE:2E
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8e:ba:af:2b:a5:4d:43:f7:54:01:bd:30:ba:cf:3f:dd:47:
56:be:68:89:63:92:3b:49:b2:d3:25:33:0d:e0:5d:39:1e:dc:
f3:03:3e:09:c3:01:28:b7:db:ff:04:7d:dc:f6:0f:21:1e:54:
5a:6d:ed:95:ea:ab:c7:6c:d4:26:03:bf:bc:78:08:e6:c5:94:
e3:50:10:52:a3:d6:62:fb:36:3a:fb:14:2f:d9:9c:be:bd:55:
52:02:4a:cb:85:bd:9d:51:f9:51:44:70:5e:7f:3f:58:9b:f4:
a6:cb:3e:cf:ba:dc:e0:69:4f:94:53:d0:fd:d8:6e:b8:b6:c7:
4d:56:be:a3:00:b1:19:9e:61:4d:61:79:db:5f:7b:22:55:f3:
dd:d1:1d:b4:01:77:a3:c9:75:be:18:68:a6:e5:b5:d3:9f:bc:
e3:a6:e6:83:4a:51:d3:0a:2c:9c:72:58:16:8e:1d:e4:2a:73:
da:98:c3:d4:e7:f7:04:b4:c3:eb:94:99:c9:56:89:4f:b4:58:
87:57:08:d4:1a:f5:7d:f1:e3:41:74:22:2d:8f:ed:e8:ed:b6:
cd:70:b7:a7:62:9d:48:d3:63:9f:8e:d8:2f:ee:6c:15:6f:24:
8a:00:c2:32:91:24:02:0a:af:3b:0e:b5:9d:32:1d:02:9b:e4:
8e:e0:7e:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPSTfN3lmPl3G3B1b1BQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh
YzZmMDUwHhcNMjUxMTA0MDUwMDQzWhcNMjUxMTA1MDUwMDQzWjAzMTEwLwYDVQQD
EygyMDQ4MGFiMzc2ZWUwY2IyMzMxNTNkYzFmNDNiZmY0OGRiN2RjZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r5Qt9SpDqHdpaVfhyCAZ0CbNmL6
9rlSmONSzsMZWPWHJ65l7dvrr/Ri8Eh/HlL6NN0fnqDslCItkdHVeuNM6EgpU2kH
3IY98rPRv/s/imaXfeZ6sx2YGwvX4YDz57lbPeZBUbpUpz1bT9hwmh1i3Nt6WKqq
AOPTo+Rp1zkSTxTmT6FMG6Jbt/0N5dnqI0QBOUT0ZEfa/W6Yd82oudYd5NTZaWNr
+1w/GBRzRScVYiPIRSLc8RldrYm1GpOxuPYXTdPMioJvTWZonVtgWmCGEwjEf76x
rsYyAcEor8OdFlk7Qq/HDaV8HOyb2FoQMqjJK3rrl73u7wrorVthjUxL3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBICrN27gyyMxU9wfQ7/0jbfc4uMB8GA1UdIwQY
MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt
YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0
LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApY66ryul
TUP3VAG9MLrPP91HVr5oiWOSO0my0yUzDeBdOR7c8wM+CcMBKLfb/wR93PYPIR5U
Wm3tleqrx2zUJgO/vHgI5sWU41AQUqPWYvs2OvsUL9mcvr1VUgJKy4W9nVH5UURw
Xn8/WJv0pss+z7rc4GlPlFPQ/dhuuLbHTVa+owCxGZ5hTWF52197IlXz3dEdtAF3
o8l1vhhopuW105+846bmg0pR0wosnHJYFo4d5Cpz2pjD1Of3BLTD65SZyVaJT7RY
h1cI1Br1ffHjQXQiLY/t6O22zXC3p2KdSNNjn47YL+5sFW8kigDCMpEkAgqvOw61
nTIdApvkjuB+YQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:51 2025 by rpki-client