Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File: YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier: Eb7mW5E92xzbetLC3C3q5tOWl/pOYkzPjZGMdXVyzCs=
Subject key identifier: 01:46:4C:E9:45:3E:5B:A4:30:7D:F0:7B:98:09:13:E0:31:91:7E:B7
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 0199FC8FA8D8D1BDA1014A6307F3103500BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number: 0DB8
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: 9c99e7OOCoSsqv05bamuZvrBRAg.roa (hash: gcQqAYS/2mIfyTda9lezITlbdeVA2P8mDvlHBkdo3p0=)
2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: XRRIfIJEE5h0LvixGUvhgFkNAwxP9Sby6sXVHakz4bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a8:d8:d1:bd:a1:01:4a:63:07:f3:10:35:00:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=01464ce9453e5ba4307df07b980913e031917eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:26:09:04:7e:04:45:98:74:90:18:c8:43:
2e:7e:a0:81:cb:e8:97:2c:fe:5e:f4:ad:c1:6c:9e:
7a:cb:67:11:d0:b8:2c:8c:41:6f:de:7c:40:59:92:
d5:2a:d9:7a:e0:78:c1:ab:c7:1c:5a:69:c9:35:f0:
2d:ea:bb:25:c3:33:07:58:a6:96:3d:a1:97:6b:63:
aa:c9:61:f4:32:46:68:b1:66:0d:0c:a3:8d:73:8e:
17:ee:b1:1e:0b:6e:14:ed:a7:c3:77:aa:b6:dc:5e:
dc:d9:b6:98:01:70:6b:9d:a6:fa:6b:8e:37:20:5f:
46:57:be:08:d8:12:1b:02:6b:55:d9:17:7e:6c:dd:
bc:62:ba:82:cd:72:30:7f:3e:82:d0:57:fd:54:7a:
bb:8c:ee:4d:3c:4a:3c:a5:a1:0b:f8:8f:7b:21:56:
58:0e:92:5f:70:77:d8:a5:4a:73:c2:ce:47:d9:22:
cc:e0:19:57:8c:94:f3:6f:55:20:c9:47:20:a9:b5:
a7:37:92:7f:e0:46:3a:88:eb:e8:2e:87:51:bb:f0:
1d:66:d9:dc:00:1d:83:51:18:2a:83:b9:a0:da:4f:
38:90:4b:97:2b:4b:a7:4a:f5:13:73:8e:66:7a:d1:
8f:87:14:d8:f7:aa:55:7f:17:6f:94:04:04:d4:b2:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:4C:E9:45:3E:5B:A4:30:7D:F0:7B:98:09:13:E0:31:91:7E:B7
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:03:7f:c6:2f:36:d8:6b:c0:a7:4c:92:06:c9:79:f0:f3:67:
67:ad:b9:7b:4e:6e:b8:56:77:5b:b2:a9:ad:d7:f0:d9:3a:fe:
11:a8:59:b5:b6:60:0a:13:28:fd:01:7d:7b:17:af:0f:61:83:
a0:44:ff:0f:ad:62:37:50:12:f3:b7:b6:16:31:f7:74:ff:13:
51:03:80:0b:7e:ed:4d:70:72:d7:db:72:6e:4d:32:54:8e:53:
76:4f:3f:b1:c5:c7:9c:90:e0:56:d2:7b:c1:0a:f3:64:65:07:
af:88:40:99:d9:13:21:e8:20:e8:3c:28:b6:26:8e:b3:f1:ac:
8b:5c:ae:0a:08:18:f2:5e:1c:0d:c8:54:14:67:bd:16:ca:af:
7b:d1:0c:20:aa:63:a1:66:38:d5:a8:5d:74:7d:ee:95:8f:01:
65:dd:e2:d1:dc:61:3e:07:ff:f2:91:cf:af:39:fa:7a:3c:3c:
e5:80:05:be:b6:34:65:b4:3d:99:08:85:27:67:d3:db:62:13:
93:2a:a6:2b:a2:d4:2a:56:2b:1b:a4:3c:da:5b:f2:d7:88:ca:
a3:44:d4:50:0a:2c:85:58:da:66:9f:6f:08:3c:b3:8e:d1:be:
cc:bf:28:95:95:51:97:9d:a5:77:2e:2f:bf:e5:cb:30:71:18:
ee:17:f8:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6jY0b2hAUpjB/MQNQC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNWJjMDEzMDM5MDU4MDA2MjBhYzI2YzE0NjhiMTQxZjgw
NzQ1MTQwHhcNMjUxMDE5MTMwMTM3WhcNMjUxMDIwMTMwMTM3WjAzMTEwLwYDVQQD
EygwMTQ2NGNlOTQ1M2U1YmE0MzA3ZGYwN2I5ODA5MTNlMDMxOTE3ZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKMmCQR+BEWYdJAYyEMufqCBy+iX
LP5e9K3BbJ56y2cR0LgsjEFv3nxAWZLVKtl64HjBq8ccWmnJNfAt6rslwzMHWKaW
PaGXa2OqyWH0MkZosWYNDKONc44X7rEeC24U7afDd6q23F7c2baYAXBrnab6a443
IF9GV74I2BIbAmtV2Rd+bN28YrqCzXIwfz6C0Ff9VHq7jO5NPEo8paEL+I97IVZY
DpJfcHfYpUpzws5H2SLM4BlXjJTzb1UgyUcgqbWnN5J/4EY6iOvoLodRu/AdZtnc
AB2DURgqg7mg2k84kEuXK0unSvUTc45metGPhxTY96pVfxdvlAQE1LK2GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFGTOlFPlukMH3we5gJE+AxkX63MB8GA1UdIwQY
MBaAFGBbwBMDkFgAYgrCbBRosUH4B0UUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZ2QUV3T1FXQUJpQ3NKc0ZHaXhRZmdIUlJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zYTdhN2ItZGQ5ZC00ZDdjLTg2YzQt
MTNjNDI4YWQ1ZmRiLzEvWUZ2QUV3T1FXQUJpQ3NKc0ZHaXhRZmdIUlJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zYTdhN2ItZGQ5ZC00ZDdjLTg2YzQtMTNjNDI4YWQ1ZmRi
LzEvWUZ2QUV3T1FXQUJpQ3NKc0ZHaXhRZmdIUlJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAN/xi82
2GvAp0ySBsl58PNnZ625e05uuFZ3W7Kprdfw2Tr+EahZtbZgChMo/QF9exevD2GD
oET/D61iN1AS87e2FjH3dP8TUQOAC37tTXBy19tybk0yVI5Tdk8/scXHnJDgVtJ7
wQrzZGUHr4hAmdkTIegg6DwotiaOs/Gsi1yuCggY8l4cDchUFGe9Fsqve9EMIKpj
oWY41ahddH3ulY8BZd3i0dxhPgf/8pHPrzn6ejw85YAFvrY0ZbQ9mQiFJ2fT22IT
kyqmK6LUKlYrG6Q82lvy14jKo0TUUAoshVjaZp9vCDyzjtG+zL8olZVRl52ldy4v
v+XLMHEY7hf4wQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:05 2025 by rpki-client