Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: FGOsi2jLLccOb55Cu41JGIMhCsOiMqk4I6EJaujIZfk=
Subject key identifier: 2B:3A:D5:FB:FF:7C:BD:07:8E:2A:68:34:73:DD:BE:0C:73:E1:5E:72
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 0199FCFD9E341529C15A6B7D709F50D65D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: hcrnpwqbi6iXAQGRjrMeNCe8CyI1hgvl2CPta9eONyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9e:34:15:29:c1:5a:6b:7d:70:9f:50:d6:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=2b3ad5fbff7cbd078e2a683473ddbe0c73e15e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:82:92:03:d9:2f:1e:0d:a0:d3:ab:fa:27:
e9:87:04:da:f6:bc:87:ea:03:0b:21:29:32:59:70:
59:43:67:68:0e:4a:0b:30:70:fc:ff:df:19:32:02:
7a:3e:a8:81:0f:dd:29:07:2e:03:c6:07:c1:29:cc:
63:83:78:dd:d7:0f:74:0c:31:a8:d4:2c:bc:de:95:
b1:17:77:d0:86:0a:1f:83:31:92:0a:4d:52:84:ea:
79:d8:2a:c2:c6:f3:41:ff:95:e5:51:e7:ce:de:70:
5f:7a:69:b5:91:0f:0a:57:bd:80:70:2a:05:54:c7:
1a:64:5a:20:df:33:bc:73:94:74:48:c9:24:30:e7:
22:c4:1c:8b:4c:8b:4f:d3:91:42:7c:c9:1a:4d:7a:
69:57:89:13:1e:1e:ae:cc:c2:ac:a1:11:a2:40:ec:
2d:07:46:c4:ca:0b:1a:4b:ef:9b:64:26:af:32:32:
94:79:1d:10:24:3a:61:92:d7:92:62:9e:58:ea:4c:
f9:56:7c:87:bb:f4:69:96:18:67:f1:a0:70:28:3f:
01:07:07:f1:c0:65:55:fc:e9:b7:be:11:68:7c:d6:
55:fe:06:4d:eb:18:43:3d:13:d4:dc:c0:b4:67:04:
fe:14:3f:5a:5a:45:0a:86:16:95:f5:76:0a:88:06:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3A:D5:FB:FF:7C:BD:07:8E:2A:68:34:73:DD:BE:0C:73:E1:5E:72
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b4:32:76:33:b5:c3:a2:1a:48:99:5a:1f:32:54:0c:0c:a3:
02:c2:2c:97:06:63:51:a3:d9:22:96:3e:49:ad:92:84:78:1e:
32:10:23:57:03:4d:9e:74:85:de:35:ec:04:68:bb:58:02:d2:
19:8c:f9:52:14:ea:d7:2f:eb:57:3b:a9:af:a5:6f:f1:44:32:
8c:84:03:05:6b:27:09:65:17:f4:63:f8:33:40:8a:49:5c:31:
2c:14:92:fc:1d:ce:a7:50:43:5e:e8:70:13:de:1e:31:73:8a:
b9:91:c7:54:6b:40:e6:36:e0:a3:ef:c5:0f:97:0d:fd:9b:ad:
01:78:50:f7:30:39:32:cf:43:67:fb:4c:d4:04:14:2a:b7:c6:
d4:52:62:7c:e7:ec:2d:e8:0e:2c:db:48:e8:5c:c8:dc:af:09:
e2:bb:21:1b:d2:b6:66:0f:77:5e:a6:aa:bf:08:e8:12:4e:29:
fc:36:82:31:cc:be:97:37:b8:f1:a3:d0:bc:b2:f6:5d:46:47:
4e:37:77:9b:f8:f0:ca:48:71:32:e3:ac:c6:e1:97:40:c0:ed:
a8:7e:43:3e:29:3a:81:99:f1:3c:29:12:e5:3d:1f:47:fb:e0:
45:8c:26:d6:0b:06:95:aa:82:a8:47:0e:f7:88:81:a4:0c:28:
be:d4:b1:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Z40FSnBWmt9cJ9Q1l1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyODRjZmE3ODQ0MzQwMjM3ZmU1OWEzODI1YjU0ZjNmNzdl
ZDg1MzIwHhcNMjUxMDE5MTUwMTQzWhcNMjUxMDIwMTUwMTQzWjAzMTEwLwYDVQQD
EygyYjNhZDVmYmZmN2NiZDA3OGUyYTY4MzQ3M2RkYmUwYzczZTE1ZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPeCkgPZLx4NoNOr+ifphwTa9ryH
6gMLISkyWXBZQ2doDkoLMHD8/98ZMgJ6PqiBD90pBy4DxgfBKcxjg3jd1w90DDGo
1Cy83pWxF3fQhgofgzGSCk1ShOp52CrCxvNB/5XlUefO3nBfemm1kQ8KV72AcCoF
VMcaZFog3zO8c5R0SMkkMOcixByLTItP05FCfMkaTXppV4kTHh6uzMKsoRGiQOwt
B0bEygsaS++bZCavMjKUeR0QJDphkteSYp5Y6kz5VnyHu/Rplhhn8aBwKD8BBwfx
wGVV/Om3vhFofNZV/gZN6xhDPRPU3MC0ZwT+FD9aWkUKhhaV9XYKiAbyvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCs61fv/fL0HjipoNHPdvgxz4V5yMB8GA1UdIwQY
MBaAFGKEz6eEQ0Ajf+WaOCW1Tz937YUyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mYzFlMzItMGJhNy00ZjhkLWE1YWEt
ZjM4ZjhmZTc5NGQ0LzEvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mYzFlMzItMGJhNy00ZjhkLWE1YWEtZjM4ZjhmZTc5NGQ0
LzEvWW9UUHA0UkRRQ05fNVpvNEpiVlBQM2Z0aFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7QydjO1
w6IaSJlaHzJUDAyjAsIslwZjUaPZIpY+Sa2ShHgeMhAjVwNNnnSF3jXsBGi7WALS
GYz5UhTq1y/rVzupr6Vv8UQyjIQDBWsnCWUX9GP4M0CKSVwxLBSS/B3Op1BDXuhw
E94eMXOKuZHHVGtA5jbgo+/FD5cN/ZutAXhQ9zA5Ms9DZ/tM1AQUKrfG1FJifOfs
LegOLNtI6FzI3K8J4rshG9K2Zg93XqaqvwjoEk4p/DaCMcy+lze48aPQvLL2XUZH
Tjd3m/jwykhxMuOsxuGXQMDtqH5DPik6gZnxPCkS5T0fR/vgRYwm1gsGlaqCqEcO
94iBpAwovtSxfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:20 2025 by rpki-client