Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier: Jqso2eZws17LX2MLrd7WReZ+oyIc9LBypaPyO4d2OeY=
Subject key identifier: 0D:E5:DB:78:E6:5C:3C:12:14:3B:22:73:03:D3:BA:FA:AC:86:BB:C0
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 019A541ADDDF42442C85B06149B33B88B5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number: 16A3
Signing time: Wed 05 Nov 2025 13:00:38 +0000
Manifest this update: Wed 05 Nov 2025 13:00:38 +0000
Manifest next update: Thu 06 Nov 2025 13:00:38 +0000
Files and hashes: 1: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: sF/6m+oOEqwMazcGzBld4YWRGxSI3+PDM66VUaXWFLY=)
2: hD0ar_tHc7p3YZ1QwpI7BJcBiok.roa (hash: wT7KNqysLUSBZ2MK1PEYcvNRcVleye9t9OdQ04Vtz2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:dd:df:42:44:2c:85:b0:61:49:b3:3b:88:b5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Nov 5 13:00:38 2025 GMT
Not After : Nov 6 13:00:38 2025 GMT
Subject: CN=0de5db78e65c3c12143b227303d3bafaac86bbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:e8:1e:cd:5a:2a:cd:13:c3:ef:38:37:da:
fc:1a:80:60:a8:21:77:8f:e1:5e:5d:21:41:67:9a:
4f:82:39:af:9b:b4:d7:5a:2d:64:5c:ea:ae:ad:0e:
3d:e6:53:c4:08:09:e1:4e:08:1a:94:c0:f5:40:37:
3a:28:0a:97:9a:42:c1:8b:3d:a9:85:39:81:e3:7c:
c6:95:a4:8e:ed:88:e3:9e:9e:f0:48:6a:bb:8d:f8:
a9:de:8a:7b:22:c5:a0:24:3c:b9:0d:c4:44:09:16:
a2:d9:31:2d:5a:82:28:11:a4:98:c9:72:71:54:07:
24:9e:a2:a9:2f:da:6c:90:03:ef:79:97:2c:b3:43:
ee:ea:7e:93:06:48:ae:b0:e9:d2:cc:7d:b6:cc:fe:
05:3e:1d:0d:7f:46:ef:45:15:0a:a6:17:a7:89:21:
87:ef:5b:0f:8c:a6:e0:45:79:a6:8f:ce:b5:4a:61:
32:ab:7c:2c:0a:fb:d2:e4:bd:47:e8:3d:34:89:58:
62:7a:0e:6d:21:11:73:b8:0e:71:61:ae:6a:6b:3b:
7f:60:ae:28:3e:4f:10:3c:50:eb:ab:0e:73:f2:5e:
ec:28:ba:8d:2b:c5:b1:89:28:6b:65:56:cc:79:c6:
81:c9:99:e8:a0:d5:90:58:ad:95:db:ba:6f:53:e2:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:DB:78:E6:5C:3C:12:14:3B:22:73:03:D3:BA:FA:AC:86:BB:C0
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bd:ff:38:8f:cf:65:dd:d5:97:c8:d9:c1:0f:69:6e:ca:0e:
e4:82:91:8f:ab:c2:51:1e:3f:48:24:3b:e8:e0:d5:86:e6:75:
6b:00:9f:bb:42:23:92:73:54:01:6f:1a:15:69:e6:5d:49:1b:
ff:15:a4:92:4a:20:1b:a0:b2:32:17:f5:04:91:1c:81:17:b8:
66:5b:e7:b0:56:95:a3:8b:97:10:f2:60:99:04:46:9d:df:d1:
1e:07:76:2f:19:9f:6c:aa:06:b6:e1:c4:ef:be:ce:e3:51:b9:
48:6f:9c:7a:a3:9f:83:1e:03:5a:00:e7:dd:51:87:ca:2a:10:
4c:fb:8a:b8:ff:36:82:59:1c:5a:e8:8c:78:76:29:af:34:2a:
16:74:d6:38:63:d5:dd:63:7b:e3:64:a2:92:00:2e:e9:7d:1b:
ba:1c:cb:21:46:f7:77:97:36:33:65:63:72:cd:9d:ea:9c:11:
d1:2a:64:72:74:d7:eb:48:ff:70:c7:a5:51:1b:d4:b0:3a:23:
54:b6:4e:5f:8e:c2:37:45:3d:55:e1:ed:76:d1:69:e3:c9:55:
54:4e:65:79:4f:1f:c5:bb:66:8b:66:c1:95:7a:0f:33:74:d9:
8a:55:b1:60:05:7d:47:31:c2:58:c5:d8:4e:79:49:6f:93:80:
94:b6:3c:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUGt3fQkQshbBhSbM7iLXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODYyMTYyM2FjNmNhYjhmNmJkZTU1MjZlN2EyOTMxZDYy
NmZlOGMwHhcNMjUxMTA1MTMwMDM4WhcNMjUxMTA2MTMwMDM4WjAzMTEwLwYDVQQD
EygwZGU1ZGI3OGU2NWMzYzEyMTQzYjIyNzMwM2QzYmFmYWFjODZiYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpLoHs1aKs0Tw+84N9r8GoBgqCF3
j+FeXSFBZ5pPgjmvm7TXWi1kXOqurQ495lPECAnhTggalMD1QDc6KAqXmkLBiz2p
hTmB43zGlaSO7Yjjnp7wSGq7jfip3op7IsWgJDy5DcRECRai2TEtWoIoEaSYyXJx
VAcknqKpL9pskAPveZcss0Pu6n6TBkiusOnSzH22zP4FPh0Nf0bvRRUKpheniSGH
71sPjKbgRXmmj861SmEyq3wsCvvS5L1H6D00iVhieg5tIRFzuA5xYa5qazt/YK4o
Pk8QPFDrqw5z8l7sKLqNK8WxiShrZVbMecaByZnooNWQWK2V27pvU+Ig4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3l23jmXDwSFDsicwPTuvqshrvAMB8GA1UdIwQY
MBaAFHWGIWI6xsq49r3lUm56KTHWJv6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDct
ZjAyMTE2MjI2YTg4LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDctZjAyMTE2MjI2YTg4
LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfb3/OI/P
Zd3Vl8jZwQ9pbsoO5IKRj6vCUR4/SCQ76ODVhuZ1awCfu0IjknNUAW8aFWnmXUkb
/xWkkkogG6CyMhf1BJEcgRe4ZlvnsFaVo4uXEPJgmQRGnd/RHgd2LxmfbKoGtuHE
777O41G5SG+ceqOfgx4DWgDn3VGHyioQTPuKuP82glkcWuiMeHYprzQqFnTWOGPV
3WN742SikgAu6X0buhzLIUb3d5c2M2Vjcs2d6pwR0SpkcnTX60j/cMelURvUsDoj
VLZOX47CN0U9VeHtdtFp48lVVE5leU8fxbtmi2bBlXoPM3TZilWxYAV9RzHCWMXY
TnlJb5OAlLY8eQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:14 2025 by rpki-client