
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: xSM2tMIraqZdx0bIEy9WYn41WsrER29zJ8qzOyHTIMY=
Subject key identifier: C6:ED:0E:59:48:78:A0:7C:F3:B0:A1:E0:BD:48:C4:41:E8:E0:78:D9
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 0199FC2153E082166681D75618952EFB0685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 09C1
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=)
2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: 0AIRx8np2CWFaDLMH0PhG5oqqmi5e9FMBWkl4SWRYbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:53:e0:82:16:66:81:d7:56:18:95:2e:fb:06:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=c6ed0e594878a07cf3b0a1e0bd48c441e8e078d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:a9:e3:44:60:fb:10:35:80:2b:c1:87:f4:
5e:10:7e:77:06:59:d6:62:7f:cb:37:dd:31:f1:09:
0c:91:1b:94:a0:bc:30:49:11:6b:08:fc:a9:bc:8b:
14:9d:2e:98:76:53:b3:a7:e3:c0:66:44:46:62:99:
a1:26:2b:c6:6d:5a:85:7f:03:d5:83:c2:9a:a2:de:
2c:1f:53:54:88:1f:0b:7b:0c:7a:85:96:d8:2a:17:
86:2a:76:36:01:ee:c8:b1:26:f4:5d:c9:97:4c:30:
56:a5:e1:09:45:6c:a1:ac:9b:71:59:9f:9c:c3:1b:
da:78:1e:f6:d8:91:b2:af:26:26:92:2a:88:71:e2:
44:50:6f:7e:dd:61:b7:2c:36:90:00:e7:63:a2:21:
88:1d:87:5c:f9:ec:3c:4c:ce:a1:54:9e:f3:01:65:
c4:04:9a:40:9f:96:0c:bd:6d:c2:85:7f:9b:ac:fb:
27:ed:01:fe:b9:83:61:bb:72:ca:70:10:1d:47:fe:
53:7c:47:9c:85:8f:f8:2d:36:e4:0b:a0:65:00:3d:
e3:60:d2:08:68:84:57:7d:0d:a3:64:13:20:cd:2b:
41:e9:d3:43:e5:f3:e6:6d:cb:e4:22:48:69:99:89:
cb:72:cd:0d:24:24:13:6e:41:0e:df:ea:a1:cc:5c:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:ED:0E:59:48:78:A0:7C:F3:B0:A1:E0:BD:48:C4:41:E8:E0:78:D9
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:55:54:1c:dc:1d:d2:a5:18:ef:29:49:c2:21:5d:43:0a:4b:
20:60:2d:45:08:2f:67:cf:3e:ad:b2:84:ff:7a:f6:bb:ae:e6:
0b:40:f8:9a:17:70:92:66:7a:42:73:72:79:d9:28:65:75:a7:
cb:aa:65:12:97:70:c5:72:8f:fe:54:62:90:a3:e8:f7:8a:e8:
1e:b4:db:0c:e4:e4:54:cc:c7:f9:ad:dc:e5:d6:0a:cd:64:9c:
db:fe:dd:9c:8c:32:d7:5f:c3:f1:ab:45:a9:2a:c8:2a:db:53:
bb:ed:f6:35:69:fc:89:2e:58:59:a9:25:81:2e:e9:63:02:41:
01:68:e7:9e:ac:9d:42:e3:ae:86:96:3b:90:43:ef:67:bd:74:
2d:05:21:84:bb:23:d0:19:d9:f9:da:45:f2:43:33:2c:ff:63:
7f:2d:3e:59:f5:ae:06:13:5d:b7:c1:85:d8:6b:27:91:8b:58:
83:f3:c6:31:bb:c1:31:07:d6:3e:ca:06:16:58:31:0c:51:3a:
11:b2:af:70:ee:cc:e8:45:80:f1:a8:d0:5d:5f:46:3a:1f:4a:
00:af:7a:d8:cb:c1:b1:34:c0:0c:92:97:f4:f1:ed:45:e9:d6:
df:86:48:47:90:95:00:20:93:b9:63:6a:40:96:8c:e0:ed:81:
26:64:6b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVPgghZmgddWGJUu+waFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZTYwZDM4YmIzNzc5NGU3MmU4N2U2ODcwZDA3MWYyYTdk
ZDNlNTcwHhcNMjUxMDE5MTEwMTA2WhcNMjUxMDIwMTEwMTA2WjAzMTEwLwYDVQQD
EyhjNmVkMGU1OTQ4NzhhMDdjZjNiMGExZTBiZDQ4YzQ0MWU4ZTA3OGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTup40Rg+xA1gCvBh/ReEH53BlnW
Yn/LN90x8QkMkRuUoLwwSRFrCPypvIsUnS6YdlOzp+PAZkRGYpmhJivGbVqFfwPV
g8Kaot4sH1NUiB8Lewx6hZbYKheGKnY2Ae7IsSb0XcmXTDBWpeEJRWyhrJtxWZ+c
wxvaeB722JGyryYmkiqIceJEUG9+3WG3LDaQAOdjoiGIHYdc+ew8TM6hVJ7zAWXE
BJpAn5YMvW3ChX+brPsn7QH+uYNhu3LKcBAdR/5TfEechY/4LTbkC6BlAD3jYNII
aIRXfQ2jZBMgzStB6dND5fPmbcvkIkhpmYnLcs0NJCQTbkEO3+qhzFwaiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbtDllIeKB887Ch4L1IxEHo4HjZMB8GA1UdIwQY
MBaAFLPmDTi7N3lOcuh+aHDQcfKn3T5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUt
N2E5NGM3YzM2MjE3LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUtN2E5NGM3YzM2MjE3
LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFVUHNwd
0qUY7ylJwiFdQwpLIGAtRQgvZ88+rbKE/3r2u67mC0D4mhdwkmZ6QnNyedkoZXWn
y6plEpdwxXKP/lRikKPo94roHrTbDOTkVMzH+a3c5dYKzWSc2/7dnIwy11/D8atF
qSrIKttTu+32NWn8iS5YWaklgS7pYwJBAWjnnqydQuOuhpY7kEPvZ710LQUhhLsj
0BnZ+dpF8kMzLP9jfy0+WfWuBhNdt8GF2GsnkYtYg/PGMbvBMQfWPsoGFlgxDFE6
EbKvcO7M6EWA8ajQXV9GOh9KAK962MvBsTTADJKX9PHtRenW34ZIR5CVACCTuWNq
QJaM4O2BJmRrhg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:29 2025 by rpki-client