Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: y+9qbPlBSfkVLeyqjP7hJpSmayHaxll9tLwI10y563A=
Subject key identifier: 37:4A:BB:42:13:B4:CE:17:40:50:69:84:31:B0:F7:42:19:F0:E7:92
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 0199FFC8CA4AD668CBAC826296ADF9934AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 03CC
Signing time: Mon 20 Oct 2025 04:02:53 +0000
Manifest this update: Mon 20 Oct 2025 04:02:53 +0000
Manifest next update: Tue 21 Oct 2025 04:02:53 +0000
Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=)
2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: Hb6KdE1mRaWkBuQFYjy4FNV3quWvdXxuiUP9kmOQA2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:ca:4a:d6:68:cb:ac:82:62:96:ad:f9:93:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Oct 20 04:02:53 2025 GMT
Not After : Oct 21 04:02:53 2025 GMT
Subject: CN=374abb4213b4ce174050698431b0f74219f0e792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:00:02:cc:99:f5:bc:8f:a1:e5:b2:f2:63:
5f:de:38:cd:e9:02:90:29:6a:66:e6:a2:1f:cc:5f:
da:98:ce:74:1f:96:52:d4:7b:0a:f3:c2:d6:1f:43:
32:d5:61:88:7c:e2:06:3e:6d:bb:be:65:4a:eb:96:
07:49:36:6a:98:70:90:fb:2f:b3:30:71:c0:68:5f:
7b:52:bd:2e:e7:17:3f:ab:0a:96:30:1e:18:08:e2:
73:28:2e:74:1a:85:1d:fb:44:0b:36:7f:ff:45:cb:
e4:7c:9f:75:4e:c9:73:6d:41:10:ee:4d:5b:b5:57:
74:81:5b:a0:84:da:eb:00:05:37:55:4d:6e:78:11:
c8:6f:c2:f7:97:f3:f6:97:2d:b8:bd:53:d7:5c:3e:
ff:ce:38:88:6c:b1:37:0f:24:a5:04:99:51:35:a2:
6d:02:cb:cc:9e:77:54:8a:cd:fa:bb:9f:c3:f9:32:
e7:39:e5:15:4b:c1:ac:70:50:41:59:8b:7f:47:ef:
01:83:23:fb:0e:9f:08:03:af:0c:b5:ad:54:83:8e:
3f:37:5f:20:d1:e4:2a:bb:67:26:7d:5a:0b:b2:31:
15:97:a7:ee:11:21:3e:aa:93:c3:00:e3:1a:8e:06:
7e:8d:23:75:f1:4f:cd:77:9a:76:59:cb:cc:18:4b:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:BB:42:13:B4:CE:17:40:50:69:84:31:B0:F7:42:19:F0:E7:92
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dc:35:b7:3e:72:c1:57:79:29:78:aa:5a:af:9c:99:28:55:
1e:62:af:2e:08:5a:13:37:1e:1a:d1:15:43:5c:85:2c:32:a6:
0e:5f:c2:57:6f:aa:3c:62:d8:6c:b4:66:8b:01:76:cd:f4:ff:
69:b8:1c:57:e2:7b:6f:dd:1b:d2:e2:d4:a6:07:32:9e:8f:d7:
fa:a9:6d:aa:8d:87:e8:e1:d4:06:10:e5:b3:d6:fb:0a:0b:10:
08:5a:12:f6:0d:e3:d3:e7:11:3e:d5:39:ba:75:33:17:ee:f6:
3d:96:5d:9a:de:ab:06:18:ad:4c:a9:02:50:e9:6a:4e:37:4f:
eb:bd:6a:fa:35:d8:f1:72:57:8e:ce:1c:16:d7:fc:e6:ae:77:
dd:72:51:26:cc:a8:f2:f0:d6:bc:e6:83:e5:fd:c3:d6:a0:8e:
d9:03:96:a0:10:5a:b4:10:fd:25:94:e5:d4:0e:1f:3a:b1:a8:
5a:60:fd:95:d4:e9:3e:57:53:74:52:f4:df:d0:d7:bb:ca:50:
31:f8:ab:de:b3:fa:2e:89:0a:3e:f0:ac:7a:29:c8:c6:80:83:
7b:3a:ed:ad:98:a1:47:66:ed:0e:cd:2c:99:d1:8e:c3:cd:2b:
76:38:ad:c4:e0:c7:0b:c0:48:29:8a:d1:c9:b3:e6:b0:0a:3a:
80:bd:db:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yMpK1mjLrIJilq35k0qgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjBiNjAxMTM5YmUwMTM1NjllYmY4ZTFiZWI1YTY5NGI5
Yzg3ZWMwHhcNMjUxMDIwMDQwMjUzWhcNMjUxMDIxMDQwMjUzWjAzMTEwLwYDVQQD
EygzNzRhYmI0MjEzYjRjZTE3NDA1MDY5ODQzMWIwZjc0MjE5ZjBlNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFAAAsyZ9byPoeWy8mNf3jjN6QKQ
KWpm5qIfzF/amM50H5ZS1HsK88LWH0My1WGIfOIGPm27vmVK65YHSTZqmHCQ+y+z
MHHAaF97Ur0u5xc/qwqWMB4YCOJzKC50GoUd+0QLNn//RcvkfJ91TslzbUEQ7k1b
tVd0gVughNrrAAU3VU1ueBHIb8L3l/P2ly24vVPXXD7/zjiIbLE3DySlBJlRNaJt
AsvMnndUis36u5/D+TLnOeUVS8GscFBBWYt/R+8BgyP7Dp8IA68Mta1Ug44/N18g
0eQqu2cmfVoLsjEVl6fuESE+qpPDAOMajgZ+jSN18U/Nd5p2WcvMGEsLgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdKu0ITtM4XQFBphDGw90IZ8OeSMB8GA1UdIwQY
MBaAFGJgtgETm+ATVp6/jhvrWmlLnIfsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEt
MjliYjZhYjJjZjVjLzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEtMjliYjZhYjJjZjVj
LzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdw1tz5y
wVd5KXiqWq+cmShVHmKvLghaEzceGtEVQ1yFLDKmDl/CV2+qPGLYbLRmiwF2zfT/
abgcV+J7b90b0uLUpgcyno/X+qltqo2H6OHUBhDls9b7CgsQCFoS9g3j0+cRPtU5
unUzF+72PZZdmt6rBhitTKkCUOlqTjdP671q+jXY8XJXjs4cFtf85q533XJRJsyo
8vDWvOaD5f3D1qCO2QOWoBBatBD9JZTl1A4fOrGoWmD9ldTpPldTdFL039DXu8pQ
Mfir3rP6LokKPvCseinIxoCDezrtrZihR2btDs0smdGOw80rdjitxODHC8BIKYrR
ybPmsAo6gL3bAg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:49 2025 by rpki-client