Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: 8fE32V/UT7AmxYbtKPbgTV1tct0Ezhd32BROSn3az2c=
Subject key identifier: 0D:74:78:5F:30:37:B0:2C:C1:90:E8:A7:F0:58:96:E0:07:2E:84:7C
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 0199FC58A5A28C2DC3DD8943ED660F7A5828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: BeDkBebra6ZLluB9hz6aZL9ukPNoBDNX/vzon3NVljU=)
2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a5:a2:8c:2d:c3:dd:89:43:ed:66:0f:7a:58:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=0d74785f3037b02cc190e8a7f05896e0072e847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:37:1d:89:d6:22:59:6b:04:38:13:2d:3a:
2b:24:e3:f3:14:e7:b5:9f:44:81:b3:fd:00:4e:44:
4e:f9:7c:25:09:38:c6:61:9c:7f:d0:4d:87:26:4d:
77:11:5d:62:f8:42:43:80:08:2d:4d:86:16:71:27:
51:4f:c9:e0:fc:3d:b2:8c:b4:cf:3f:62:27:4f:8d:
28:29:55:d1:4b:be:27:de:2f:19:4a:b9:73:eb:ab:
66:3e:90:34:3d:06:86:b3:14:92:3a:6f:21:16:36:
13:d2:57:ab:55:04:40:1a:5a:0e:13:59:43:8f:7b:
e7:3c:3d:03:d3:7b:2f:a2:02:a8:cb:63:5d:09:bd:
c0:76:27:30:3b:38:fb:bb:80:63:5f:2b:91:fb:ed:
b3:e7:e4:b0:ff:d2:ba:c3:86:0d:d8:d7:c7:63:b7:
3a:61:66:e5:b9:48:b2:b5:c1:52:cd:f6:7b:da:8d:
25:4e:ba:bf:bf:0d:bd:ed:20:4d:da:2a:17:d8:6a:
72:9a:2c:2b:cc:c3:5d:c8:30:66:7c:c7:af:08:b2:
a6:35:51:db:a3:d3:c4:ae:27:88:27:98:1b:dc:bc:
04:33:76:5d:cf:20:82:23:5b:ef:d0:e6:7c:92:9c:
09:33:53:37:54:ed:51:eb:aa:17:83:f9:ee:e0:f4:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:74:78:5F:30:37:B0:2C:C1:90:E8:A7:F0:58:96:E0:07:2E:84:7C
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:aa:0e:4e:be:d6:bf:fc:f5:14:73:7b:ba:57:d1:61:94:a9:
e8:ff:69:c8:b3:09:06:7d:06:7e:90:61:ac:62:d8:51:7d:de:
d6:9b:70:ff:d2:d8:f0:66:50:cf:5a:13:01:da:24:d8:54:c9:
19:12:6f:12:1d:f2:8d:d6:80:6d:87:9e:ad:10:d4:65:ec:c4:
53:33:b4:14:3a:24:a9:51:27:f9:57:bc:dc:ed:16:ca:ba:13:
32:76:48:99:77:63:55:52:8b:5b:c2:1c:07:5c:18:c9:b1:26:
97:84:95:c3:c7:36:8b:d2:6f:86:56:6c:e7:d3:ba:ec:1a:e6:
95:c0:e8:d7:83:8e:9b:f5:c0:e2:32:d2:85:fc:1f:f5:b9:ba:
26:df:48:72:ed:4a:63:86:f1:4c:44:d6:7f:0c:3a:7c:25:99:
82:11:6f:e4:10:f0:53:a8:80:35:2d:0b:31:ff:fe:7a:99:47:
01:68:86:3f:c5:7b:a9:af:dc:54:86:9e:93:4e:9b:3a:97:39:
d8:11:49:f9:c7:77:5d:2c:62:d9:8a:34:3d:83:29:07:96:32:
76:33:e4:a5:61:6d:ca:7c:d6:5b:56:16:33:35:89:bf:2b:3d:
40:d7:fe:db:dd:09:a4:db:ee:d7:39:41:8f:bc:e3:89:2a:86:
5b:96:8d:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKWijC3D3YlD7WYPelgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz
NWJlNGEwHhcNMjUxMDE5MTIwMTMxWhcNMjUxMDIwMTIwMTMxWjAzMTEwLwYDVQQD
EygwZDc0Nzg1ZjMwMzdiMDJjYzE5MGU4YTdmMDU4OTZlMDA3MmU4NDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BM3HYnWIllrBDgTLTorJOPzFOe1
n0SBs/0ATkRO+XwlCTjGYZx/0E2HJk13EV1i+EJDgAgtTYYWcSdRT8ng/D2yjLTP
P2InT40oKVXRS74n3i8ZSrlz66tmPpA0PQaGsxSSOm8hFjYT0lerVQRAGloOE1lD
j3vnPD0D03svogKoy2NdCb3AdicwOzj7u4BjXyuR++2z5+Sw/9K6w4YN2NfHY7c6
YWbluUiytcFSzfZ72o0lTrq/vw297SBN2ioX2GpymiwrzMNdyDBmfMevCLKmNVHb
o9PErieIJ5gb3LwEM3ZdzyCCI1vv0OZ8kpwJM1M3VO1R66oXg/nu4PQ+dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA10eF8wN7AswZDop/BYluAHLoR8MB8GA1UdIwQY
MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt
MzlhZmQ5MzE2NTk4LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4
LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKoOTr7W
v/z1FHN7ulfRYZSp6P9pyLMJBn0GfpBhrGLYUX3e1ptw/9LY8GZQz1oTAdok2FTJ
GRJvEh3yjdaAbYeerRDUZezEUzO0FDokqVEn+Ve83O0WyroTMnZImXdjVVKLW8Ic
B1wYybEml4SVw8c2i9JvhlZs59O67BrmlcDo14OOm/XA4jLShfwf9bm6Jt9Icu1K
Y4bxTETWfww6fCWZghFv5BDwU6iANS0LMf/+eplHAWiGP8V7qa/cVIaek06bOpc5
2BFJ+cd3XSxi2Yo0PYMpB5YydjPkpWFtynzWW1YWMzWJvys9QNf+290JpNvu1zlB
j7zjiSqGW5aNqQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:45:03 2025 by rpki-client