Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: tmNOmyiTFmBFA2lnVRdTYRhdys7v3F/j0sErKTAXdNA=
Subject key identifier: 31:3C:47:2B:CF:4F:49:50:5F:89:F5:61:45:4B:E1:9D:40:98:9B:0B
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019A515095047D9C40BCA6E9D13825DFA788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 163B
Signing time: Wed 05 Nov 2025 00:00:26 +0000
Manifest this update: Wed 05 Nov 2025 00:00:26 +0000
Manifest next update: Thu 06 Nov 2025 00:00:26 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: QbSc/SEwhV0uyKvI+iuKb7fhj4oQ4XlU+6//kspQnQA=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:95:04:7d:9c:40:bc:a6:e9:d1:38:25:df:a7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Nov 5 00:00:26 2025 GMT
Not After : Nov 6 00:00:26 2025 GMT
Subject: CN=313c472bcf4f49505f89f561454be19d40989b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:c0:a0:c0:0c:59:32:49:3b:9e:a7:1f:dd:
0d:91:b8:bd:95:a3:be:c6:1a:98:42:d5:87:a8:13:
99:8f:3d:97:9e:96:5c:97:05:92:8c:f3:9e:b5:ed:
1b:8f:60:5d:93:34:fc:b7:27:12:26:9f:29:a9:0a:
33:14:33:a3:b2:cc:45:e3:3b:e8:77:15:6f:f5:6d:
71:ef:be:d0:4b:aa:ff:c3:eb:b9:3a:7a:b6:72:64:
b6:3e:1e:77:0b:58:2d:ed:fc:5b:ce:55:5b:66:95:
70:d3:d2:cb:d6:40:72:bb:8c:66:33:fb:19:1a:44:
68:70:36:d4:56:12:7a:02:04:fd:d7:55:15:b3:bb:
45:f9:89:a0:f9:77:c2:cf:c3:38:e4:b9:14:18:a1:
03:57:f6:00:4d:f6:68:e0:f9:0d:f1:63:a2:93:ef:
c3:0a:57:8f:20:63:8a:ef:87:2d:88:07:bf:c7:02:
f1:2f:41:a6:be:f0:f0:d3:2d:a7:cb:17:22:f4:43:
fb:31:1e:31:40:cd:08:37:48:28:3a:75:f1:5a:38:
a1:4f:41:55:aa:1d:99:5b:63:a3:97:5f:6e:0a:2c:
76:b2:f8:87:0e:45:3b:63:94:1c:ca:87:9f:bf:e8:
2d:cf:c8:2a:68:63:e6:e8:06:5d:bb:9d:99:26:e8:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:47:2B:CF:4F:49:50:5F:89:F5:61:45:4B:E1:9D:40:98:9B:0B
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c5:bc:c8:5b:82:30:20:33:2f:19:0a:b3:49:e2:b5:5f:7a:
94:d4:e3:7d:60:bb:31:c9:ae:c4:a3:a2:6a:1d:a2:de:d9:d2:
ee:09:c9:4b:5c:37:c5:13:7e:d8:03:a1:7e:39:4e:3b:78:36:
1a:32:f3:1c:55:08:73:40:ae:b7:7e:72:58:3c:04:70:00:da:
8d:c7:09:b0:8b:70:6a:90:eb:5f:79:5a:fd:27:68:76:f7:ec:
d2:52:7d:03:5d:5d:e5:ef:93:c3:26:ae:5f:2a:0f:0a:72:22:
52:fd:bc:94:b8:24:3f:88:05:04:ec:07:51:1a:23:71:99:e8:
d2:d1:f8:86:aa:a1:5a:bd:8c:cf:14:bb:4a:a9:dc:32:bc:8b:
8b:99:63:aa:5f:52:85:6f:cb:ad:f0:94:65:f6:21:43:85:cc:
24:ac:86:86:27:15:ce:8f:5f:d5:10:1c:20:a2:1b:c5:77:8f:
58:d5:28:40:95:4b:b8:59:84:d3:ef:92:27:30:27:a5:e2:55:
bb:25:96:cf:39:c2:5b:ba:58:85:ee:b8:a5:45:85:b3:4a:05:
fc:92:b1:ed:ea:41:e0:e7:b0:53:97:a6:40:b5:09:ec:b0:d8:
33:66:a9:ad:44:d4:43:78:ca:67:a7:1e:3f:11:aa:8c:0a:48:
ad:b7:bd:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUJUEfZxAvKbp0Tgl36eIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1
NDFiMjUwHhcNMjUxMTA1MDAwMDI2WhcNMjUxMTA2MDAwMDI2WjAzMTEwLwYDVQQD
EygzMTNjNDcyYmNmNGY0OTUwNWY4OWY1NjE0NTRiZTE5ZDQwOTg5YjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuDAoMAMWTJJO56nH90Nkbi9laO+
xhqYQtWHqBOZjz2XnpZclwWSjPOete0bj2BdkzT8tycSJp8pqQozFDOjssxF4zvo
dxVv9W1x777QS6r/w+u5Onq2cmS2Ph53C1gt7fxbzlVbZpVw09LL1kByu4xmM/sZ
GkRocDbUVhJ6AgT911UVs7tF+Ymg+XfCz8M45LkUGKEDV/YATfZo4PkN8WOik+/D
ClePIGOK74ctiAe/xwLxL0GmvvDw0y2nyxci9EP7MR4xQM0IN0goOnXxWjihT0FV
qh2ZW2Ojl19uCix2sviHDkU7Y5Qcyoefv+gtz8gqaGPm6AZdu52ZJugoUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE8RyvPT0lQX4n1YUVL4Z1AmJsLMB8GA1UdIwQY
MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt
ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz
LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcW8yFuC
MCAzLxkKs0nitV96lNTjfWC7McmuxKOiah2i3tnS7gnJS1w3xRN+2AOhfjlOO3g2
GjLzHFUIc0Cut35yWDwEcADajccJsItwapDrX3la/Sdodvfs0lJ9A11d5e+Twyau
XyoPCnIiUv28lLgkP4gFBOwHURojcZno0tH4hqqhWr2MzxS7SqncMryLi5ljql9S
hW/LrfCUZfYhQ4XMJKyGhicVzo9f1RAcIKIbxXePWNUoQJVLuFmE0++SJzAnpeJV
uyWWzznCW7pYhe64pUWFs0oF/JKx7epB4OewU5emQLUJ7LDYM2aprUTUQ3jKZ6ce
PxGqjApIrbe9bA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:39:27 2025 by rpki-client