Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: 5EQQ81i2nKu6n2rjaY28YMRd8/+OpbyQKmZObqLYv7w=
Subject key identifier: A9:A5:3C:B0:72:FE:1D:44:2F:54:A3:BC:66:C1:F1:B0:46:68:00:C9
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 0199FD6B1F542261C544F62642DFCD924C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 152A
Signing time: Sun 19 Oct 2025 17:01:19 +0000
Manifest this update: Sun 19 Oct 2025 17:01:19 +0000
Manifest next update: Mon 20 Oct 2025 17:01:19 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: 6tmr/r5du4g60N8uqPnFyjaM4mdAnFPnmB3gYv8r0e4=)
2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:1f:54:22:61:c5:44:f6:26:42:df:cd:92:4c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Oct 19 17:01:19 2025 GMT
Not After : Oct 20 17:01:19 2025 GMT
Subject: CN=a9a53cb072fe1d442f54a3bc66c1f1b0466800c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:8d:e8:3d:47:dd:71:c0:79:7c:b5:32:23:
ad:21:e9:b0:7f:87:19:1b:84:31:65:49:dd:12:bd:
96:6e:64:85:d2:c7:46:7c:ae:da:60:31:52:5f:3f:
be:2c:3b:8e:e3:d2:c1:14:07:fa:2c:e3:81:32:ef:
e6:f7:26:05:e2:3f:fd:4a:3c:b0:0b:a8:99:44:01:
5c:df:d9:b0:58:08:e1:db:f5:48:30:29:2c:b4:10:
f0:ea:3b:66:dd:68:cd:90:f9:cf:9a:88:62:b1:e1:
fd:d9:ab:36:19:d6:75:89:0d:1d:f9:72:86:21:71:
5d:b1:c5:b3:4a:4f:bd:25:4b:dd:45:68:4f:4c:86:
a1:35:35:1d:cc:47:ef:19:37:1a:b1:16:5f:1c:0b:
f0:5f:58:a1:96:72:70:5c:02:57:6e:a1:58:d1:1e:
11:a4:7f:e9:d5:94:34:55:15:82:e7:27:c8:17:d2:
7d:eb:a7:8d:3a:c7:0a:54:2a:78:06:45:8f:56:20:
7f:e0:98:0f:1f:2a:c1:14:7d:9e:1f:ee:9c:4b:c8:
b3:3c:97:db:67:13:58:75:28:c4:23:18:ac:d5:4b:
3b:67:d1:fe:e9:2b:b0:fd:47:e0:ba:fc:d2:88:1f:
87:7b:ba:87:a6:eb:26:8c:a8:ed:d6:5d:1d:1d:68:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A5:3C:B0:72:FE:1D:44:2F:54:A3:BC:66:C1:F1:B0:46:68:00:C9
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0e:ca:b7:c9:40:f4:3a:7f:ba:0e:73:8f:e0:03:d5:d3:1d:
55:14:98:55:1b:13:88:dc:ed:8e:19:93:75:7e:3d:f1:d4:ed:
ab:89:c8:4b:2a:a2:07:65:f3:d7:4f:81:c1:fe:d8:39:3f:97:
b6:89:22:72:e3:12:56:93:84:6c:58:71:dc:86:2f:5b:c0:58:
39:4f:a6:87:ac:bd:a6:3b:56:5d:dc:82:02:ed:7c:a3:a1:e0:
27:89:76:bd:24:a4:1a:3b:b5:94:f4:f4:e7:05:37:a0:dd:51:
06:a6:9e:eb:b2:8d:a9:4e:d5:fb:fc:f4:39:34:b8:89:a6:f0:
8c:59:60:18:83:a3:db:93:04:50:e5:cc:ff:c0:ae:2f:ee:15:
5a:f9:bb:90:ec:d8:22:b7:04:b3:b4:ad:55:da:3d:83:b9:12:
5f:07:02:c4:40:95:5f:d9:1e:9d:85:0c:43:d8:e6:08:f9:10:
32:0e:fa:b5:25:d7:78:5e:83:41:0e:1e:5e:56:df:56:34:1b:
7e:53:bf:a6:e3:8d:2a:63:27:14:4e:16:ab:74:c3:ef:8b:ea:
e9:0c:11:fa:60:cb:be:21:41:2b:98:26:4e:2b:da:2b:c6:51:
aa:35:ff:77:db:32:05:bd:05:a6:ee:69:6c:5c:05:95:8b:57:
23:9a:5c:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ax9UImHFRPYmQt/NkkwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMTMzMWVjY2Q5NmQwMmMxMDM1NzM0Y2QwMGEzOTBlODMx
MWQ5NDIwHhcNMjUxMDE5MTcwMTE5WhcNMjUxMDIwMTcwMTE5WjAzMTEwLwYDVQQD
EyhhOWE1M2NiMDcyZmUxZDQ0MmY1NGEzYmM2NmMxZjFiMDQ2NjgwMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY2N6D1H3XHAeXy1MiOtIemwf4cZ
G4QxZUndEr2WbmSF0sdGfK7aYDFSXz++LDuO49LBFAf6LOOBMu/m9yYF4j/9Sjyw
C6iZRAFc39mwWAjh2/VIMCkstBDw6jtm3WjNkPnPmohiseH92as2GdZ1iQ0d+XKG
IXFdscWzSk+9JUvdRWhPTIahNTUdzEfvGTcasRZfHAvwX1ihlnJwXAJXbqFY0R4R
pH/p1ZQ0VRWC5yfIF9J966eNOscKVCp4BkWPViB/4JgPHyrBFH2eH+6cS8izPJfb
ZxNYdSjEIxis1Us7Z9H+6Suw/UfguvzSiB+He7qHpusmjKjt1l0dHWgpgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmlPLBy/h1EL1SjvGbB8bBGaADJMB8GA1UdIwQY
MBaAFGATMezNltAsEDVzTNAKOQ6DEdlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUt
M2IxMTMxZTUwNGI4LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUtM2IxMTMxZTUwNGI4
LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQ7Kt8lA
9Dp/ug5zj+AD1dMdVRSYVRsTiNztjhmTdX498dTtq4nISyqiB2Xz10+Bwf7YOT+X
tokicuMSVpOEbFhx3IYvW8BYOU+mh6y9pjtWXdyCAu18o6HgJ4l2vSSkGju1lPT0
5wU3oN1RBqae67KNqU7V+/z0OTS4iabwjFlgGIOj25MEUOXM/8CuL+4VWvm7kOzY
IrcEs7StVdo9g7kSXwcCxECVX9kenYUMQ9jmCPkQMg76tSXXeF6DQQ4eXlbfVjQb
flO/puONKmMnFE4Wq3TD74vq6QwR+mDLviFBK5gmTivaK8ZRqjX/d9syBb0Fpu5p
bFwFlYtXI5pc9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:35 2025 by rpki-client