Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: Q6n6TUE50pV3UOP7osUYNrh9CLdVzLakGS7nZ88ERxU=
Subject key identifier: 10:AF:3C:2A:87:39:DF:48:D4:55:81:F9:D0:B1:ED:CE:44:54:39:6D
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019A4F98F8DF357B607FB2BE835A6E13EACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0DFA
Signing time: Tue 04 Nov 2025 16:00:16 +0000
Manifest this update: Tue 04 Nov 2025 16:00:16 +0000
Manifest next update: Wed 05 Nov 2025 16:00:16 +0000
Files and hashes: 1: E7M-AYn157coR3NcaUllny2UPvo.roa (hash: V3zuwIj7KMTNA/2kj/Rg0T1KwXF19AZk9pNIoN8T7eM=)
2: I6C9OUy79kypN0-jFqEW807fCi0.roa (hash: 1Hel0O7FmPuldt5t71KSS/2qCERXV6+QisRzagvf8w8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: iDdw48wyJIa9TvM6aQ3xwR64B3IyAXXWOIMgMWdQ5y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:f8:df:35:7b:60:7f:b2:be:83:5a:6e:13:ea:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Nov 4 16:00:16 2025 GMT
Not After : Nov 5 16:00:16 2025 GMT
Subject: CN=10af3c2a8739df48d45581f9d0b1edce4454396d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:24:42:96:3c:35:7a:a8:67:90:f2:d4:3d:
47:07:91:c1:54:40:b0:ec:b6:99:12:53:7f:83:99:
a3:58:a5:ee:4b:40:8b:5b:08:9f:fe:a9:1c:51:98:
75:8c:9b:06:bc:62:94:f6:c0:95:dc:71:4c:2d:fa:
5c:8c:1c:43:15:20:d6:fe:e3:55:97:2e:3d:23:98:
35:9d:65:94:eb:41:75:45:ba:b2:0a:31:13:6e:9b:
16:9f:33:1f:aa:08:6e:a2:f6:b8:a2:70:91:58:07:
5a:3c:69:1d:d2:ea:fd:c3:1e:8f:85:9a:8e:79:30:
33:52:d8:2a:14:e2:4d:e2:f8:30:d9:d3:1b:c3:d5:
4f:f9:db:c8:2c:c1:bc:f1:70:8a:dd:13:bc:49:df:
5c:43:6b:63:e0:2f:4a:a5:d3:39:cd:04:3c:5f:ce:
12:6f:db:27:87:25:2e:f8:39:41:0e:16:2c:5b:41:
50:7c:25:21:85:4b:7e:0a:87:8e:1d:65:54:3e:5f:
71:07:f8:a8:60:78:16:97:38:6f:f5:72:40:1d:4d:
ec:30:8a:b1:13:ff:3a:ca:91:75:f8:82:28:1e:38:
25:68:d9:9b:08:46:64:a4:87:15:1a:71:d0:f1:b7:
ad:62:8f:3b:2b:67:23:14:9a:1b:9d:b9:d7:e0:56:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AF:3C:2A:87:39:DF:48:D4:55:81:F9:D0:B1:ED:CE:44:54:39:6D
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5f:6a:c2:2d:8d:2d:f0:88:42:14:26:5d:fb:d3:1a:46:eb:
6f:32:07:ac:73:b3:54:83:60:5e:22:04:97:48:d2:50:dd:33:
0a:51:da:75:18:d8:9e:13:98:0f:67:0e:73:3f:56:6d:4e:ad:
bc:29:12:46:58:5c:30:72:4e:52:7c:a9:75:ab:26:d9:59:b8:
e2:7f:07:c5:9e:cd:a3:09:14:c6:fc:00:de:ae:0f:d2:5f:b1:
56:c8:d2:aa:ba:cd:58:ce:0a:99:35:a1:b9:1f:e9:f5:a2:37:
1e:51:a5:f1:88:35:0e:a2:2e:2e:ac:49:31:1f:b6:80:11:4d:
f8:41:6a:1f:fe:1a:35:b9:0f:fe:89:dc:42:dd:5b:f2:9f:22:
3c:8c:50:92:b8:2d:b2:59:79:7f:6b:7b:eb:3a:d9:76:74:f5:
93:09:26:fc:33:36:00:12:72:c7:27:2e:e7:2f:79:c8:43:9c:
8f:80:4c:65:cb:dc:53:25:0d:ce:09:f2:7d:51:5b:8c:cc:da:
04:6a:76:82:e0:b5:9f:7e:e0:2e:37:ff:cc:45:f2:e6:50:3b:
0e:b3:f8:04:9c:ef:42:3c:1c:95:ba:b3:cd:79:77:83:c1:0d:
7e:6e:b4:ab:e1:a5:be:33:79:cf:b5:af:c8:dd:bc:cd:23:41:
28:c9:03:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmPjfNXtgf7K+g1puE+rPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTFjNDJkZmE2YWZiYzExZTc4ZWU5ZGUyZTc4NWY4YTIw
YjUwNDMwHhcNMjUxMTA0MTYwMDE2WhcNMjUxMTA1MTYwMDE2WjAzMTEwLwYDVQQD
EygxMGFmM2MyYTg3MzlkZjQ4ZDQ1NTgxZjlkMGIxZWRjZTQ0NTQzOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI4kQpY8NXqoZ5Dy1D1HB5HBVECw
7LaZElN/g5mjWKXuS0CLWwif/qkcUZh1jJsGvGKU9sCV3HFMLfpcjBxDFSDW/uNV
ly49I5g1nWWU60F1RbqyCjETbpsWnzMfqghuova4onCRWAdaPGkd0ur9wx6PhZqO
eTAzUtgqFOJN4vgw2dMbw9VP+dvILMG88XCK3RO8Sd9cQ2tj4C9KpdM5zQQ8X84S
b9snhyUu+DlBDhYsW0FQfCUhhUt+CoeOHWVUPl9xB/ioYHgWlzhv9XJAHU3sMIqx
E/86ypF1+IIoHjglaNmbCEZkpIcVGnHQ8betYo87K2cjFJobnbnX4Fa9pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCvPCqHOd9I1FWB+dCx7c5EVDltMB8GA1UdIwQY
MBaAFMqRxC36avvBHnjuneLnhfiiC1BDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NTFlODQtMmYxYS00Yzc3LWIxZjIt
ZDU4NjUwNDFhMTRmLzEveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NTFlODQtMmYxYS00Yzc3LWIxZjItZDU4NjUwNDFhMTRm
LzEveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS19qwi2N
LfCIQhQmXfvTGkbrbzIHrHOzVINgXiIEl0jSUN0zClHadRjYnhOYD2cOcz9WbU6t
vCkSRlhcMHJOUnypdasm2Vm44n8HxZ7NowkUxvwA3q4P0l+xVsjSqrrNWM4KmTWh
uR/p9aI3HlGl8Yg1DqIuLqxJMR+2gBFN+EFqH/4aNbkP/oncQt1b8p8iPIxQkrgt
sll5f2t76zrZdnT1kwkm/DM2ABJyxycu5y95yEOcj4BMZcvcUyUNzgnyfVFbjMza
BGp2guC1n37gLjf/zEXy5lA7DrP4BJzvQjwclbqzzXl3g8ENfm60q+GlvjN5z7Wv
yN28zSNBKMkDPA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:19 2025 by rpki-client