
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
File: Y-ftmpXgsiN2kMdL_njP7eLETnw.mft (raw, json)
Hash identifier: hU8COzZcEL9kgMECeLKxyeVzu1EVNrKA+AqlAWGmtsE=
Subject key identifier: F4:CB:BE:8D:56:BB:E3:9A:CA:7F:32:2E:DD:62:47:36:91:61:6A:8A
Authority key identifier: 63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
Certificate issuer: /CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Certificate serial: 0199FBEB77A268427E8197FD4951DD17B8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
Manifest number: 0A38
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: Y-ftmpXgsiN2kMdL_njP7eLETnw.crl (hash: W9XkqVO1+yLuTehIV5UFB1iodVvfdFRNdX4OkcrCBoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:77:a2:68:42:7e:81:97:fd:49:51:dd:17:b8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=f4cbbe8d56bbe39aca7f322edd62473691616a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:76:9d:5c:0f:f4:0c:8f:c9:fa:e3:bc:72:39:
ca:de:21:8c:d7:a8:49:21:33:66:10:09:6e:70:97:
d0:02:5a:72:28:1b:d9:1c:3d:e5:29:db:1d:86:32:
c2:02:4a:73:0d:d2:50:53:38:fe:e5:1e:e6:40:35:
db:35:63:3d:73:e9:9f:02:d7:48:6d:33:e8:35:26:
03:aa:51:9c:8d:c2:b3:da:d1:44:cc:7b:85:f2:22:
13:0a:68:b3:c5:82:fc:af:94:d3:e0:77:26:81:02:
f5:54:11:80:80:ab:76:d0:f3:9b:ad:48:9c:f8:24:
95:d7:95:8e:c2:53:14:53:6e:9c:49:76:f8:a6:c8:
35:72:48:56:94:e4:0a:e4:e6:75:89:29:22:32:ba:
74:2c:5c:f2:23:3e:b7:ce:a3:00:80:c9:c3:05:8d:
42:ec:3a:f6:f3:73:8f:6e:65:4d:c2:d5:4f:c9:b5:
74:da:bc:3d:e6:33:6f:ba:b9:73:63:d8:1f:ff:9d:
76:ff:92:24:06:1f:96:0d:2d:c5:6c:95:b0:11:e3:
92:6e:5c:62:ed:d0:2b:c4:6a:27:48:63:96:4a:29:
9c:df:49:76:dc:68:a7:25:ae:b2:84:83:a6:dd:c1:
a8:6e:8a:73:aa:8b:35:02:1f:23:fb:57:ef:e8:a5:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:BE:8D:56:BB:E3:9A:CA:7F:32:2E:DD:62:47:36:91:61:6A:8A
X509v3 Authority Key Identifier:
keyid:63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2c:0a:35:3b:02:c9:5a:c7:fe:19:31:fa:a5:d9:93:64:8c:
a9:ae:d1:c2:7a:66:a0:86:0d:b0:87:66:bb:54:45:a5:ea:e7:
22:ce:9a:af:87:ba:ec:66:b2:4a:42:80:a4:68:8f:e7:43:df:
f3:0e:87:0a:f0:b3:44:e3:61:ab:12:66:5b:82:46:69:3c:9f:
65:49:f9:45:33:0b:2b:ee:1c:0d:9c:82:f7:eb:d1:b6:c6:44:
31:9b:90:1f:a6:0d:a3:62:cd:ee:18:55:06:7f:79:77:4f:38:
06:a7:d0:1e:1d:2b:4b:ab:70:5b:40:c5:9a:51:b6:f7:51:5d:
6e:42:be:53:31:c3:ac:6d:12:68:9c:cd:a3:0c:29:a3:3b:b4:
1f:c9:3b:8a:a5:b8:a3:14:59:af:3d:99:16:92:51:1b:28:c0:
fc:95:79:0c:0d:6c:6e:f6:ec:5d:36:a6:2a:e8:b5:2c:02:61:
b7:54:8d:d5:19:66:06:0c:0d:a7:43:00:34:df:ac:3b:c0:60:
eb:1c:bc:60:ac:0d:77:01:39:c8:7a:93:ff:ab:04:e9:6b:3a:
91:5c:27:ac:0e:0e:d3:48:93:1a:3e:df:a0:03:5e:72:a5:ee:
2c:2d:4f:01:ef:6e:f3:c7:d1:68:31:d6:56:68:29:71:42:00:
7f:56:46:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763eiaEJ+gZf9SVHdF7ipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTdlZDlhOTVlMGIyMjM3NjkwYzc0YmZlNzhjZmVkZTJj
NDRlN2MwHhcNMjUxMDE5MTAwMjE2WhcNMjUxMDIwMTAwMjE2WjAzMTEwLwYDVQQD
EyhmNGNiYmU4ZDU2YmJlMzlhY2E3ZjMyMmVkZDYyNDczNjkxNjE2YThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnadXA/0DI/J+uO8cjnK3iGM16hJ
ITNmEAlucJfQAlpyKBvZHD3lKdsdhjLCAkpzDdJQUzj+5R7mQDXbNWM9c+mfAtdI
bTPoNSYDqlGcjcKz2tFEzHuF8iITCmizxYL8r5TT4HcmgQL1VBGAgKt20PObrUic
+CSV15WOwlMUU26cSXb4psg1ckhWlOQK5OZ1iSkiMrp0LFzyIz63zqMAgMnDBY1C
7Dr283OPbmVNwtVPybV02rw95jNvurlzY9gf/512/5IkBh+WDS3FbJWwEeOSblxi
7dArxGonSGOWSimc30l23GinJa6yhIOm3cGobopzqos1Ah8j+1fv6KXAeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTLvo1Wu+Oayn8yLt1iRzaRYWqKMB8GA1UdIwQY
MBaAFGPn7ZqV4LIjdpDHS/54z+3ixE58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMGM5MTQtZTgzZi00OTNhLThiMDct
MTliMmQ0MWJlYTc5LzEvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMGM5MTQtZTgzZi00OTNhLThiMDctMTliMmQ0MWJlYTc5
LzEvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiwKNTsC
yVrH/hkx+qXZk2SMqa7RwnpmoIYNsIdmu1RFpernIs6ar4e67GaySkKApGiP50Pf
8w6HCvCzRONhqxJmW4JGaTyfZUn5RTMLK+4cDZyC9+vRtsZEMZuQH6YNo2LN7hhV
Bn95d084BqfQHh0rS6twW0DFmlG291FdbkK+UzHDrG0SaJzNowwpozu0H8k7iqW4
oxRZrz2ZFpJRGyjA/JV5DA1sbvbsXTamKui1LAJht1SN1RlmBgwNp0MANN+sO8Bg
6xy8YKwNdwE5yHqT/6sE6Ws6kVwnrA4O00iTGj7foANecqXuLC1PAe9u88fRaDHW
VmgpcUIAf1ZGGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:30 2025 by rpki-client