Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: 4T/KdqHcYG0OD2jaeNRSNiwH2tC2g0H+Bvc3Z8DPqxE=
Subject key identifier: 9E:A9:38:5F:D8:8E:0B:AC:CF:14:5D:9D:9D:96:57:E4:80:39:BD:35
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 0199FBEC06A724C860186AE2C1C426AD3B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0DC4
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: 9gUYLcqxOKRm50xIC4IFzdcNSx9C2MwEFqm+/gdnfDk=)
2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:06:a7:24:c8:60:18:6a:e2:c1:c4:26:ad:3b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=9ea9385fd88e0baccf145d9d9d9657e48039bd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:a5:16:81:ae:fc:c3:32:c6:3c:32:9b:73:
a4:6b:4d:dd:aa:8d:a2:ea:dc:07:4a:f6:f0:ec:32:
9f:a6:89:2a:50:f4:06:4c:b1:93:33:b1:23:b9:4d:
1c:7d:e2:b0:c3:99:f0:92:3c:0f:38:f5:0c:00:64:
e3:13:c1:6c:f4:82:5b:4e:66:1c:dd:77:f8:58:c1:
a3:ec:e7:22:88:bd:4a:24:02:5d:68:e4:0b:04:b1:
ed:4e:5b:3d:5e:5b:2d:ad:b6:3e:14:66:73:0d:fd:
f1:45:4c:3a:ae:b8:26:4e:68:de:97:da:89:8f:ce:
d3:cc:ea:0a:43:a2:cb:fd:b8:41:f7:dc:4c:c5:2a:
90:fe:62:4e:48:9e:92:89:84:29:55:98:6f:9b:26:
50:06:81:36:6e:69:e4:29:65:a9:54:fe:90:f3:16:
2f:00:04:c4:a1:11:f4:88:48:67:86:48:91:7e:eb:
61:db:3a:81:93:c0:86:a3:b0:31:35:4c:7f:6d:12:
b7:6a:30:59:c9:e5:2d:e3:a7:d7:12:74:c8:12:06:
6d:ef:f4:9b:0d:25:a9:37:fb:a2:1e:9d:b3:59:fd:
9b:8e:3a:67:3c:1d:67:51:94:bc:48:f8:16:d9:9e:
1a:f1:d9:99:21:ff:3c:6f:92:fc:a1:6b:23:ac:df:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A9:38:5F:D8:8E:0B:AC:CF:14:5D:9D:9D:96:57:E4:80:39:BD:35
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f6:9b:dd:5d:42:41:6b:d6:66:51:2c:5c:87:37:e5:d7:e2:
01:6a:8b:e3:8b:8f:b5:50:60:ef:91:4d:c3:d6:5c:8f:64:db:
34:e8:99:8c:90:09:5e:fb:66:fb:47:2f:fb:b4:fd:c8:3e:61:
59:e4:82:81:96:f6:1f:5e:14:68:bc:66:9e:ab:70:c5:06:7c:
24:29:a9:45:36:18:6b:94:27:77:7b:47:11:d5:23:53:81:44:
4a:5e:2b:6e:5a:f0:40:75:ca:c4:3e:a6:c2:51:70:97:11:c8:
c4:bf:e4:04:bd:dd:3c:2c:6b:eb:33:43:4e:21:66:6b:37:0a:
8b:56:ce:91:f1:74:0b:4d:8f:9d:36:18:45:0e:3c:31:f5:e9:
bf:77:2c:bf:16:0b:80:28:74:79:fc:47:70:33:f2:ae:08:17:
bd:fa:e5:c3:00:43:35:3f:ad:18:28:80:58:44:10:df:70:19:
2c:77:86:2b:5e:d5:26:aa:1c:3a:70:04:4f:49:f8:05:4a:14:
7d:97:82:5f:b4:3b:85:c7:c2:95:1a:88:7e:c0:80:dd:94:ce:
ba:79:fa:48:bb:fe:43:d8:d5:1e:9b:e4:bb:3d:8a:d5:09:83:
6e:46:ea:4d:ed:8e:3e:6b:1b:b7:53:5e:91:6f:ba:02:ac:14:
e3:46:d5:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77AanJMhgGGriwcQmrTtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzMzY2Q2ZjFiNTljMGI2ODJlMWRhMzg5MjM3ZWRhM2U5
ZGE5MTgwHhcNMjUxMDE5MTAwMjUzWhcNMjUxMDIwMTAwMjUzWjAzMTEwLwYDVQQD
Eyg5ZWE5Mzg1ZmQ4OGUwYmFjY2YxNDVkOWQ5ZDk2NTdlNDgwMzliZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz6lFoGu/MMyxjwym3Oka03dqo2i
6twHSvbw7DKfpokqUPQGTLGTM7EjuU0cfeKww5nwkjwPOPUMAGTjE8Fs9IJbTmYc
3Xf4WMGj7OciiL1KJAJdaOQLBLHtTls9XlstrbY+FGZzDf3xRUw6rrgmTmjel9qJ
j87TzOoKQ6LL/bhB99xMxSqQ/mJOSJ6SiYQpVZhvmyZQBoE2bmnkKWWpVP6Q8xYv
AATEoRH0iEhnhkiRfuth2zqBk8CGo7AxNUx/bRK3ajBZyeUt46fXEnTIEgZt7/Sb
DSWpN/uiHp2zWf2bjjpnPB1nUZS8SPgW2Z4a8dmZIf88b5L8oWsjrN+XZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6pOF/YjguszxRdnZ2WV+SAOb01MB8GA1UdIwQY
MBaAFGAzPNbxtZwLaC4do4kjfto+nakYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDct
Y2RiMjgxYTJiM2E4LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDctY2RiMjgxYTJiM2E4
LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPab3V1C
QWvWZlEsXIc35dfiAWqL44uPtVBg75FNw9Zcj2TbNOiZjJAJXvtm+0cv+7T9yD5h
WeSCgZb2H14UaLxmnqtwxQZ8JCmpRTYYa5Qnd3tHEdUjU4FESl4rblrwQHXKxD6m
wlFwlxHIxL/kBL3dPCxr6zNDTiFmazcKi1bOkfF0C02PnTYYRQ48MfXpv3csvxYL
gCh0efxHcDPyrggXvfrlwwBDNT+tGCiAWEQQ33AZLHeGK17VJqocOnAET0n4BUoU
fZeCX7Q7hcfClRqIfsCA3ZTOunn6SLv+Q9jVHpvkuz2K1QmDbkbqTe2OPmsbt1Ne
kW+6AqwU40bVRw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:33 2025 by rpki-client