Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: ipqKB5XiyKmUrB5+f9klznqZ1dsIAew+LOjpmCNtH7M=
Subject key identifier: EC:E4:F9:08:24:46:FF:F6:BB:5B:73:2D:A3:59:EE:13:FF:DE:74:2E
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 0199FCC631CFFFA662F30BBDB22F7EB5213D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0DB4
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: Htw+fmT381DKxuofuC4LGP/XIbuI9xMXRtSPhCXTBsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:31:cf:ff:a6:62:f3:0b:bd:b2:2f:7e:b5:21:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=ece4f9082446fff6bb5b732da359ee13ffde742e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:20:62:c4:97:f0:ed:26:6b:94:58:53:37:
e2:f0:32:5f:fa:af:14:1c:09:e6:90:0c:de:ea:b6:
bd:10:55:5d:b2:6f:63:01:60:7c:ba:dd:0c:cf:5a:
64:85:e7:ee:21:d3:13:18:7f:3a:42:8f:a2:ea:19:
10:26:1d:d5:d2:42:4f:f0:a9:ba:fc:89:22:e4:a3:
e2:ba:70:0c:ea:df:51:af:ae:97:00:af:05:5d:a3:
85:6a:79:c0:d7:ea:9b:8d:10:d3:2b:2a:24:e5:6b:
0b:ea:40:f8:b6:e9:6a:3a:0d:48:d3:97:67:1a:b4:
eb:20:b8:1e:0a:b6:01:b0:e4:ae:44:df:78:0e:d6:
4b:cf:12:bd:ab:a4:f7:93:e0:dc:fc:7a:80:f1:6c:
fe:d0:49:72:3e:ba:30:94:11:92:ea:da:3e:be:b7:
19:06:d9:7f:79:e1:93:35:e2:b1:19:07:21:e7:28:
ae:d4:b8:69:e5:98:86:de:77:55:04:54:02:16:4d:
98:75:5c:64:f0:76:11:bd:ab:fe:2f:ab:22:57:70:
12:4a:0d:40:9c:cf:91:1e:a0:34:4c:90:7b:8e:fc:
3c:87:d1:91:66:db:6b:53:e4:64:07:08:65:c2:1d:
e4:ef:84:e5:f2:37:9b:48:0f:6f:24:42:2f:66:b8:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E4:F9:08:24:46:FF:F6:BB:5B:73:2D:A3:59:EE:13:FF:DE:74:2E
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:37:dc:1f:24:e0:e4:c1:bd:68:02:82:98:76:ee:4c:e7:62:
3e:69:3b:20:ae:09:13:18:24:82:fb:fc:78:83:48:a4:d2:56:
56:f2:6e:7a:b4:c8:d1:9e:69:ea:c3:0f:07:30:dd:f3:11:60:
72:9d:bf:5c:33:15:83:c8:9a:3f:6f:99:e0:75:09:72:78:67:
c5:89:17:57:72:8a:76:5a:df:6e:ea:46:9f:4b:89:9d:8c:83:
14:ce:4c:7e:6d:96:37:89:3f:df:eb:ff:27:1a:86:cc:48:9c:
48:69:03:28:00:78:f9:ba:d7:6b:cc:fb:42:9c:67:14:6f:66:
90:b6:41:76:33:23:f0:3b:1c:51:72:ab:05:83:c2:56:c0:a5:
d0:ef:f9:01:37:cc:60:8b:28:64:ec:86:45:7e:99:3b:ce:f6:
e7:36:af:24:c6:db:4b:e7:ea:9b:8c:07:d8:4d:f6:7b:4a:e7:
c7:79:05:96:04:7b:23:bf:1c:7c:d7:00:b1:ae:87:f1:90:4a:
72:c1:db:54:24:67:c7:2b:e9:f9:a1:d6:af:bc:9e:11:51:7f:
8d:d7:1f:d9:a6:4a:b9:cf:60:eb:f2:92:3a:66:1a:bf:7e:ca:
0e:2d:eb:28:9b:47:13:16:7e:03:8a:e6:13:71:af:61:85:08:
ff:f0:b3:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xjHP/6Zi8wu9si9+tSE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWI1YjI5Njk5ZTJkZDQxODA0MGMwZWRmNzUwMDg1ZDg3
MjA0NDIwHhcNMjUxMDE5MTQwMTExWhcNMjUxMDIwMTQwMTExWjAzMTEwLwYDVQQD
EyhlY2U0ZjkwODI0NDZmZmY2YmI1YjczMmRhMzU5ZWUxM2ZmZGU3NDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGMgYsSX8O0ma5RYUzfi8DJf+q8U
HAnmkAze6ra9EFVdsm9jAWB8ut0Mz1pkhefuIdMTGH86Qo+i6hkQJh3V0kJP8Km6
/Iki5KPiunAM6t9Rr66XAK8FXaOFannA1+qbjRDTKyok5WsL6kD4tulqOg1I05dn
GrTrILgeCrYBsOSuRN94DtZLzxK9q6T3k+Dc/HqA8Wz+0ElyProwlBGS6to+vrcZ
Btl/eeGTNeKxGQch5yiu1Lhp5ZiG3ndVBFQCFk2YdVxk8HYRvav+L6siV3ASSg1A
nM+RHqA0TJB7jvw8h9GRZttrU+RkBwhlwh3k74Tl8jebSA9vJEIvZrjxawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzk+QgkRv/2u1tzLaNZ7hP/3nQuMB8GA1UdIwQY
MBaAFMibWylpni3UGAQMDt91AIXYcgRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEt
Njc1NzU5YTNiMGI3LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEtNjc1NzU5YTNiMGI3
LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTfcHyTg
5MG9aAKCmHbuTOdiPmk7IK4JExgkgvv8eINIpNJWVvJuerTI0Z5p6sMPBzDd8xFg
cp2/XDMVg8iaP2+Z4HUJcnhnxYkXV3KKdlrfbupGn0uJnYyDFM5Mfm2WN4k/3+v/
JxqGzEicSGkDKAB4+brXa8z7QpxnFG9mkLZBdjMj8DscUXKrBYPCVsCl0O/5ATfM
YIsoZOyGRX6ZO8725zavJMbbS+fqm4wH2E32e0rnx3kFlgR7I78cfNcAsa6H8ZBK
csHbVCRnxyvp+aHWr7yeEVF/jdcf2aZKuc9g6/KSOmYav37KDi3rKJtHExZ+A4rm
E3GvYYUI//CznA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:39 2025 by rpki-client