Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
File: Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft (raw, json)
Hash identifier: vJgaLglJVttxYrTqEUuUhpVgCm7Etf7/MwO7DKmpA/M=
Subject key identifier: 9F:8E:61:0D:08:14:AD:31:80:EF:AD:5A:50:2C:B4:78:F7:A5:B4:AE
Authority key identifier: 63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0
Certificate issuer: /CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0
Certificate serial: 0199FC8F155904BE556B68B31C2805BDCFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
Manifest number: 086D
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl (hash: LEVyKp0OxQMhWbzQe28Ua5WmKVN0JXRRywOHEGZ61FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:15:59:04:be:55:6b:68:b3:1c:28:05:bd:cf:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=9f8e610d0814ad3180efad5a502cb478f7a5b4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:81:4a:43:52:d6:d9:29:2f:ad:b4:85:30:
7e:ed:80:41:7e:df:22:2e:5b:1c:80:b9:f2:8f:68:
3c:b6:43:f5:c5:97:39:ad:a9:f4:01:87:0b:b9:15:
0e:ba:6f:97:4e:ed:6d:4b:c5:c8:e5:72:d1:f1:ce:
df:97:4c:b8:42:1e:00:dc:f3:9d:b1:bf:54:5c:45:
1c:35:67:95:a5:a9:cc:13:25:33:7d:5e:e0:1d:e0:
a9:8b:cc:fd:b2:7d:06:25:a0:9d:af:90:3c:12:46:
d1:65:a3:3e:a5:ef:c3:62:8a:9f:3e:f4:30:e4:24:
91:58:52:2c:45:0a:22:d7:75:d9:c7:c1:46:7f:b3:
fb:e2:14:c6:2f:59:c8:39:53:d7:4f:25:71:55:e6:
12:f4:47:19:6b:51:e7:e6:6d:6d:2b:c3:35:b9:75:
72:c9:96:ed:68:c1:74:66:24:67:5f:9e:13:fa:0d:
3f:3b:fb:fd:45:c4:e4:7c:c4:f0:c9:ce:0a:ec:f8:
9b:65:53:ac:5a:3f:89:df:97:87:52:76:fc:f2:27:
5a:e2:50:43:17:0a:b8:21:7e:81:98:83:9c:69:07:
11:40:61:0f:40:ec:e4:32:9c:3b:11:3c:de:27:00:
98:95:64:cd:10:e2:9f:4a:a7:67:77:f3:25:5d:ce:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8E:61:0D:08:14:AD:31:80:EF:AD:5A:50:2C:B4:78:F7:A5:B4:AE
X509v3 Authority Key Identifier:
keyid:63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d5:e4:93:74:24:9b:7a:67:0f:19:d8:c5:1c:c0:d5:21:d4:
50:21:2e:16:32:f9:27:1c:eb:24:b7:4b:37:99:e3:bb:57:5a:
0c:29:67:dc:88:5b:71:b9:ec:96:f6:d6:01:b0:1e:ba:b1:ed:
c0:b1:10:f8:da:40:f9:ba:43:9e:74:a4:d8:8c:06:31:62:5d:
1d:17:8b:08:98:ab:fe:51:85:db:0c:46:40:dd:84:2b:cf:73:
b1:3c:78:5d:9b:76:b6:c2:bb:46:49:72:db:13:1c:d7:a0:64:
c1:27:0c:1f:aa:15:f5:a0:e5:ae:73:c0:d3:61:98:7b:4a:d8:
23:fd:b3:af:e9:e2:0f:f9:3f:ee:cf:71:31:26:4d:28:b8:e7:
d4:a5:fd:80:8c:2f:90:8f:5d:cf:f7:b6:f9:81:c6:1d:6b:12:
1b:94:ef:13:58:ac:01:c4:b6:9c:9b:a1:5c:17:b0:10:f0:e5:
ae:6a:63:41:7e:1a:fc:65:94:68:38:29:7f:44:72:b2:f0:42:
f0:70:ee:35:15:95:1f:8e:e3:67:a9:3b:b6:00:07:9e:38:31:
e0:84:b1:6a:b0:3e:9a:8b:87:c5:e6:09:92:b6:d1:1c:bd:51:
3a:ff:04:88:d4:a5:1d:df:ca:fb:61:6d:3a:8a:3b:61:fe:33:
3a:6d:89:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jxVZBL5Va2izHCgFvc/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYThjYTE2NjYyMDZkMmNmMTJiNTA3ODcyZWFkMGY1YTc5
M2QwZTAwHhcNMjUxMDE5MTMwMDU5WhcNMjUxMDIwMTMwMDU5WjAzMTEwLwYDVQQD
Eyg5ZjhlNjEwZDA4MTRhZDMxODBlZmFkNWE1MDJjYjQ3OGY3YTViNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18CBSkNS1tkpL620hTB+7YBBft8i
LlscgLnyj2g8tkP1xZc5ran0AYcLuRUOum+XTu1tS8XI5XLR8c7fl0y4Qh4A3POd
sb9UXEUcNWeVpanMEyUzfV7gHeCpi8z9sn0GJaCdr5A8EkbRZaM+pe/DYoqfPvQw
5CSRWFIsRQoi13XZx8FGf7P74hTGL1nIOVPXTyVxVeYS9EcZa1Hn5m1tK8M1uXVy
yZbtaMF0ZiRnX54T+g0/O/v9RcTkfMTwyc4K7PibZVOsWj+J35eHUnb88ida4lBD
Fwq4IX6BmIOcaQcRQGEPQOzkMpw7ETzeJwCYlWTNEOKfSqdnd/MlXc61zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+OYQ0IFK0xgO+tWlAstHj3pbSuMB8GA1UdIwQY
MBaAFGOoyhZmIG0s8StQeHLq0PWnk9DgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTZqS0ZtWWdiU3p4SzFCNGN1clE5YWVUME9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8wNDQ2YjEtZGYyZi00MjYxLWExYmEt
NzVhYjIxZjNiM2QwLzEvWTZqS0ZtWWdiU3p4SzFCNGN1clE5YWVUME9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8wNDQ2YjEtZGYyZi00MjYxLWExYmEtNzVhYjIxZjNiM2Qw
LzEvWTZqS0ZtWWdiU3p4SzFCNGN1clE5YWVUME9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdXkk3Qk
m3pnDxnYxRzA1SHUUCEuFjL5JxzrJLdLN5nju1daDCln3IhbcbnslvbWAbAeurHt
wLEQ+NpA+bpDnnSk2IwGMWJdHReLCJir/lGF2wxGQN2EK89zsTx4XZt2tsK7Rkly
2xMc16BkwScMH6oV9aDlrnPA02GYe0rYI/2zr+niD/k/7s9xMSZNKLjn1KX9gIwv
kI9dz/e2+YHGHWsSG5TvE1isAcS2nJuhXBewEPDlrmpjQX4a/GWUaDgpf0RysvBC
8HDuNRWVH47jZ6k7tgAHnjgx4ISxarA+mouHxeYJkrbRHL1ROv8EiNSlHd/K+2Ft
Ooo7Yf4zOm2JhA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:02 2025 by rpki-client