Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: fMlWNpT3pgOYttv7xw3fPvBJ+8sNgXeaqx2Djizpq5g=
Subject key identifier: 07:FE:B7:2C:01:0E:7E:61:B7:12:C8:7B:F4:FD:03:A5:EE:19:B2:CE
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 0199FCC6A55C2A6F493147CCAD1269F2C514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 0137
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: b44VrDWeDSLQp8z4xq7Q4vFd4kCj/+UXF9MhTLqZj/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a5:5c:2a:6f:49:31:47:cc:ad:12:69:f2:c5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=07feb72c010e7e61b712c87bf4fd03a5ee19b2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:dc:1e:0a:c8:44:20:85:0a:85:28:b0:95:
98:7c:5f:5b:5f:d9:25:38:82:c7:b0:df:cc:50:d4:
28:e8:14:9b:60:b6:f9:95:49:74:1f:e1:63:f2:81:
e3:8c:f6:1b:68:7f:ae:17:6c:6a:f3:56:44:00:31:
45:c6:bb:67:7c:5a:fb:57:79:f1:66:68:87:14:d6:
a4:0a:6f:ab:fc:15:dc:9c:8d:fd:b1:f5:9b:38:c2:
7b:37:da:ec:be:b5:6a:6d:4f:ad:85:fc:03:14:59:
71:29:a7:82:db:19:03:08:bc:7c:89:f1:f2:40:a1:
ac:f0:c4:e1:82:12:14:4f:b0:58:0a:5d:83:49:0f:
fb:15:84:35:15:0f:06:13:16:c6:a4:5d:13:78:83:
e8:17:18:aa:8c:9f:c8:98:98:bd:a8:a7:f6:05:d0:
38:4e:74:b6:f0:c2:b1:b2:48:c3:3c:b8:29:4c:8b:
b4:a3:73:75:20:4d:10:a5:26:05:da:1d:c5:e6:dd:
e5:c1:be:d6:c5:f2:a3:f5:91:e3:76:ff:04:87:2f:
dd:e3:87:87:bd:f6:11:c0:86:e1:a9:70:ed:86:88:
a3:b8:73:a7:9d:1f:61:9d:37:d2:7b:75:1e:c0:95:
73:85:c9:eb:92:c0:ed:b9:57:e7:9a:2c:90:d1:ee:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FE:B7:2C:01:0E:7E:61:B7:12:C8:7B:F4:FD:03:A5:EE:19:B2:CE
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:14:82:96:13:53:b7:4e:d5:91:60:be:81:3c:a2:a9:1b:bb:
f0:cd:5e:cc:32:09:85:b6:ef:71:84:68:25:99:c0:10:c1:e3:
69:3a:5a:5b:c4:4a:9d:a3:02:04:a1:1a:0b:df:6e:f4:0d:df:
6d:bb:7d:47:9a:1c:9a:6c:00:23:79:f0:b5:a7:72:02:c9:bf:
d5:43:3f:a5:07:8b:f1:01:07:f7:b0:8e:95:eb:5a:96:7c:9c:
bf:a7:07:77:dd:68:d6:e6:97:6b:5b:72:cc:d3:5a:be:e4:70:
d6:f5:6d:e3:f6:0c:ef:ee:f7:ec:37:76:06:e3:d3:2e:e5:77:
45:b7:8d:4e:58:f7:c9:a0:9a:f5:bb:e6:cd:f5:6e:93:aa:a7:
7c:cb:90:78:38:a0:42:61:52:09:a4:ed:af:16:b7:8f:b5:d6:
96:ea:e0:d9:d1:b1:b6:ee:ec:33:22:6b:96:be:38:a0:dc:8e:
6c:05:d8:d8:c7:d3:ca:bf:08:14:9c:ab:c0:ed:c3:30:67:7e:
9e:77:22:2e:72:ae:89:07:f1:27:0b:88:11:f6:00:f2:1a:bf:
39:bf:fb:8b:a9:c2:d5:58:5a:1a:1d:7c:7f:33:42:cd:48:73:
19:46:e8:d9:6f:71:cf:b7:d3:c6:c7:5c:d5:0e:8d:5c:da:e5:
a8:2b:a6:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xqVcKm9JMUfMrRJp8sUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj
YzcwYTkwHhcNMjUxMDE5MTQwMTQwWhcNMjUxMDIwMTQwMTQwWjAzMTEwLwYDVQQD
EygwN2ZlYjcyYzAxMGU3ZTYxYjcxMmM4N2JmNGZkMDNhNWVlMTliMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiffcHgrIRCCFCoUosJWYfF9bX9kl
OILHsN/MUNQo6BSbYLb5lUl0H+Fj8oHjjPYbaH+uF2xq81ZEADFFxrtnfFr7V3nx
ZmiHFNakCm+r/BXcnI39sfWbOMJ7N9rsvrVqbU+thfwDFFlxKaeC2xkDCLx8ifHy
QKGs8MThghIUT7BYCl2DSQ/7FYQ1FQ8GExbGpF0TeIPoFxiqjJ/ImJi9qKf2BdA4
TnS28MKxskjDPLgpTIu0o3N1IE0QpSYF2h3F5t3lwb7WxfKj9ZHjdv8Ehy/d44eH
vfYRwIbhqXDthoijuHOnnR9hnTfSe3UewJVzhcnrksDtuVfnmiyQ0e4lBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf+tywBDn5htxLIe/T9A6XuGbLOMB8GA1UdIwQY
MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt
ODk3YTRjYzkyOTIyLzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy
LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxSClhNT
t07VkWC+gTyiqRu78M1ezDIJhbbvcYRoJZnAEMHjaTpaW8RKnaMCBKEaC99u9A3f
bbt9R5ocmmwAI3nwtadyAsm/1UM/pQeL8QEH97COletalnycv6cHd91o1uaXa1ty
zNNavuRw1vVt4/YM7+737Dd2BuPTLuV3RbeNTlj3yaCa9bvmzfVuk6qnfMuQeDig
QmFSCaTtrxa3j7XWlurg2dGxtu7sMyJrlr44oNyObAXY2MfTyr8IFJyrwO3DMGd+
nnciLnKuiQfxJwuIEfYA8hq/Ob/7i6nC1VhaGh18fzNCzUhzGUbo2W9xz7fTxsdc
1Q6NXNrlqCumHw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:33 2025 by rpki-client