Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: DTPVLdvHxuutLyFq+oIKlKlULQXrTvoG2RnPA97/dBk=
Subject key identifier: 4B:09:05:0E:07:0E:EA:9B:9A:C0:19:BB:D8:CD:57:66:DA:8B:D6:F2
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 0199FBEAAFC5EB6BEF5A0DF05D73413B34CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 133A
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: lJshIrtCG+HPQerR4R1Pn4Mftw0VkOVRSyTdvDAiLR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:af:c5:eb:6b:ef:5a:0d:f0:5d:73:41:3b:34:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=4b09050e070eea9b9ac019bbd8cd5766da8bd6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d8:ad:b5:3d:78:08:ad:80:d9:cb:ad:7a:5b:
c2:93:42:c4:76:c8:ab:1f:45:7b:90:31:18:6e:4e:
43:59:00:77:da:af:eb:6f:dd:61:93:02:e9:ea:21:
36:0b:a9:66:65:3b:7a:3e:05:ef:81:26:b7:38:35:
2e:2b:46:2b:50:86:12:29:8f:49:8b:4b:fd:f3:28:
17:eb:9b:1f:1d:46:10:d3:37:f1:0e:ec:40:31:ed:
09:4d:b1:2b:de:3c:71:72:e8:03:ab:36:19:6b:d0:
94:97:8f:2d:a6:87:d8:fb:38:9d:a0:d4:69:0c:18:
31:4d:b1:37:02:c4:2b:4a:17:0c:e8:e3:d6:b8:a6:
3a:e3:e5:64:ed:e9:ce:28:2d:64:11:31:94:49:35:
55:33:7f:3a:1a:25:cc:45:31:47:7c:4a:80:60:07:
8a:d9:f5:00:ed:de:33:cd:bc:45:2a:54:a3:e8:ec:
44:99:6b:ba:86:7c:99:99:9f:93:06:da:b7:58:c4:
1e:4f:af:45:37:04:86:21:f3:ae:81:a5:c5:a4:30:
a1:01:8d:bf:a3:fc:91:09:08:1f:eb:70:bb:41:33:
f2:95:3e:da:d0:ab:bb:ce:bb:f6:b5:08:42:b8:b5:
83:70:81:68:5a:5a:b6:73:f7:d1:0d:ae:2a:75:c3:
c0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:09:05:0E:07:0E:EA:9B:9A:C0:19:BB:D8:CD:57:66:DA:8B:D6:F2
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a2:fb:bc:e8:30:ca:47:06:10:0c:bc:2b:08:d4:16:4a:f8:
fd:b2:9d:be:fb:ee:7f:d1:1e:04:6d:96:2e:d9:05:ac:5a:89:
fd:7c:80:e1:e1:71:4d:d1:c2:25:17:9a:5b:72:91:ec:e9:f8:
d6:20:22:06:cd:d1:84:4d:64:8b:92:9c:11:5d:11:a2:27:db:
00:88:18:d1:1c:9f:bf:cd:c1:27:96:b8:2d:50:14:4b:6c:64:
4e:5f:e1:30:da:cc:d2:2a:c8:ed:44:e5:0b:c5:3f:cb:43:74:
f6:7c:a1:b4:ec:1d:6d:0a:c5:35:1a:70:77:e8:8f:f9:22:5d:
2f:10:b0:d1:bd:36:9d:73:d5:98:f4:98:66:02:47:10:6c:8c:
76:94:e2:b5:17:07:ce:27:f5:58:0c:67:c9:ec:54:25:d4:53:
b7:00:4b:c5:5e:ae:a0:4b:2d:04:3b:97:cd:05:18:6b:73:c3:
e1:3d:f9:38:ea:28:72:79:80:71:c0:98:4a:fe:09:b3:27:d2:
f7:69:36:3b:a2:5b:61:8f:a8:cc:97:c5:ba:c4:b5:68:6e:7f:
94:ad:8a:b7:e1:b6:08:fa:5b:da:9f:33:8e:c6:de:40:ce:15:
de:40:8c:13:e8:06:5e:e2:42:24:c1:3c:6b:76:22:e9:68:6d:
9e:06:4c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76q/F62vvWg3wXXNBOzTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjU2Njg0M2UwM2Q2MzlhNDYwYjFiZDg2YmY2OWMxYzM5
ZjhiMTEwHhcNMjUxMDE5MTAwMTI1WhcNMjUxMDIwMTAwMTI1WjAzMTEwLwYDVQQD
Eyg0YjA5MDUwZTA3MGVlYTliOWFjMDE5YmJkOGNkNTc2NmRhOGJkNmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tittT14CK2A2cutelvCk0LEdsir
H0V7kDEYbk5DWQB32q/rb91hkwLp6iE2C6lmZTt6PgXvgSa3ODUuK0YrUIYSKY9J
i0v98ygX65sfHUYQ0zfxDuxAMe0JTbEr3jxxcugDqzYZa9CUl48tpofY+zidoNRp
DBgxTbE3AsQrShcM6OPWuKY64+Vk7enOKC1kETGUSTVVM386GiXMRTFHfEqAYAeK
2fUA7d4zzbxFKlSj6OxEmWu6hnyZmZ+TBtq3WMQeT69FNwSGIfOugaXFpDChAY2/
o/yRCQgf63C7QTPylT7a0Ku7zrv2tQhCuLWDcIFoWlq2c/fRDa4qdcPAtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsJBQ4HDuqbmsAZu9jNV2bai9byMB8GA1UdIwQY
MBaAFMslZoQ+A9Y5pGCxvYa/acHDn4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYt
MDZiODEyODk4OGY4LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYtMDZiODEyODk4OGY4
LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaL7vOgw
ykcGEAy8KwjUFkr4/bKdvvvuf9EeBG2WLtkFrFqJ/XyA4eFxTdHCJReaW3KR7On4
1iAiBs3RhE1ki5KcEV0RoifbAIgY0Ryfv83BJ5a4LVAUS2xkTl/hMNrM0irI7UTl
C8U/y0N09nyhtOwdbQrFNRpwd+iP+SJdLxCw0b02nXPVmPSYZgJHEGyMdpTitRcH
zif1WAxnyexUJdRTtwBLxV6uoEstBDuXzQUYa3PD4T35OOoocnmAccCYSv4JsyfS
92k2O6JbYY+ozJfFusS1aG5/lK2Kt+G2CPpb2p8zjsbeQM4V3kCME+gGXuJCJME8
a3Yi6WhtngZMRA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:58 2025 by rpki-client