Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: 4I3CRnyIZZjpqlxqBPWM+CBt9bBXWofLv56qf502rcs=
Subject key identifier: 2C:00:73:48:52:7A:51:99:68:00:2F:57:24:09:DC:CE:23:3C:E9:29
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 0199FCFDA9A01183A9E986CEB9DAED5E6D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 03FE
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: iO6OOltzYSW2yZ_5E85X-P4mF_0.roa (hash: 2XDE+mCyZurCdSAHCb4+FLC8SwOf/SeiDXoheU8dhOI=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: MvoxuIUENOBFy5QETKMKuqC+EZHH6j43msZ2MWD7ANg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a9:a0:11:83:a9:e9:86:ce:b9:da:ed:5e:6d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=2c007348527a519968002f572409dcce233ce929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:b8:95:f5:20:6b:74:a3:a4:ea:54:73:47:
b4:92:e3:57:72:17:13:d3:13:94:f8:69:e2:24:bd:
ff:9b:78:80:ef:de:d8:e5:33:5f:4b:a4:eb:93:30:
45:35:c3:d8:2d:04:65:cf:56:26:60:5e:59:6a:ec:
7d:da:07:bf:2a:a7:23:8b:36:2d:cd:69:01:84:bb:
45:3b:93:b2:68:ef:71:72:4a:17:36:17:5f:6b:b0:
5d:09:06:ee:1f:c9:28:67:6b:2a:11:09:d8:fc:25:
5f:86:d8:3f:9d:55:99:59:d8:20:b8:e7:f1:fc:b3:
f5:59:f6:31:8f:38:63:fd:dc:cc:8a:11:8b:f8:fa:
20:54:30:62:75:12:44:66:5f:71:c1:f4:d6:63:89:
c5:e7:da:39:14:47:94:ee:f0:78:76:f9:f5:4f:c7:
a8:6f:27:18:a2:b8:3e:0b:36:4b:10:c8:5c:79:4e:
f0:e2:7a:90:b8:65:ab:55:da:0e:ca:2d:d4:23:78:
4b:d6:67:11:1f:f7:b2:88:28:5b:49:7f:fe:d2:93:
17:6f:45:90:63:56:2d:6c:df:f0:af:aa:0e:a8:09:
ce:cb:bc:6e:7b:26:ef:8f:c0:45:99:9f:c1:f3:65:
cb:28:77:d5:47:2e:e9:77:ca:73:90:a7:fd:c8:11:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:00:73:48:52:7A:51:99:68:00:2F:57:24:09:DC:CE:23:3C:E9:29
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5f:da:30:ed:fb:50:16:30:a1:19:f5:5d:c4:2c:39:7a:60:
c1:df:12:5e:80:f1:09:e4:b0:6c:c9:9d:1f:1d:dd:0e:4b:10:
e9:54:71:d4:7c:05:e9:a7:2e:60:95:26:7a:59:c1:64:56:ff:
83:c2:72:cf:b5:04:08:bc:2d:67:33:b8:aa:2c:b0:7a:0f:d8:
e4:09:99:8c:28:92:ff:a6:6e:c1:5e:2c:09:e1:88:12:18:04:
06:e0:be:d3:99:88:ef:9c:ef:fb:37:09:b1:4a:8b:be:00:86:
2d:3f:c2:17:3a:eb:e4:06:dc:f9:50:b3:b5:0b:d2:4d:73:db:
41:2f:c6:4c:7f:42:d9:12:11:5f:58:2a:29:cf:95:a3:83:3c:
f0:8d:fe:44:4a:9f:1d:ae:c7:38:47:89:94:86:6e:bf:56:00:
5f:1e:92:36:40:f6:b8:b6:c8:02:e6:e4:af:01:be:07:3f:eb:
0e:5a:03:0d:f2:75:2f:1f:44:7c:16:d0:83:da:ab:64:f3:ae:
fb:67:a1:74:65:a6:46:55:4d:e2:c4:a0:24:33:dd:b8:d5:e7:
79:d3:7b:d3:a6:68:4d:b4:9b:9f:c7:da:24:f5:a6:46:d4:58:
ae:7b:7d:69:af:54:21:1e:06:28:cc:53:03:82:75:3a:38:7f:
8b:bc:3a:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/amgEYOp6YbOudrtXm1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjExZjQ5M2IzMWE1YTJjMWYyM2NlMGUzMDA0NjQ3YTMy
NDI1NzYwHhcNMjUxMDE5MTUwMTQ2WhcNMjUxMDIwMTUwMTQ2WjAzMTEwLwYDVQQD
EygyYzAwNzM0ODUyN2E1MTk5NjgwMDJmNTcyNDA5ZGNjZTIzM2NlOTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UC4lfUga3SjpOpUc0e0kuNXchcT
0xOU+GniJL3/m3iA797Y5TNfS6TrkzBFNcPYLQRlz1YmYF5Zaux92ge/KqcjizYt
zWkBhLtFO5OyaO9xckoXNhdfa7BdCQbuH8koZ2sqEQnY/CVfhtg/nVWZWdgguOfx
/LP1WfYxjzhj/dzMihGL+PogVDBidRJEZl9xwfTWY4nF59o5FEeU7vB4dvn1T8eo
bycYorg+CzZLEMhceU7w4nqQuGWrVdoOyi3UI3hL1mcRH/eyiChbSX/+0pMXb0WQ
Y1YtbN/wr6oOqAnOy7xueybvj8BFmZ/B82XLKHfVRy7pd8pzkKf9yBFW7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwAc0hSelGZaAAvVyQJ3M4jPOkpMB8GA1UdIwQY
MBaAFMqxH0k7MaWiwfI84OMARkejJCV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEt
MTUxZjZlZDE3NjkxLzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83NGQyZWEtNmU2MC00MGFmLWE1NmEtMTUxZjZlZDE3Njkx
LzEveXJFZlNUc3hwYUxCOGp6ZzR3QkdSNk1rSlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALF/aMO37
UBYwoRn1XcQsOXpgwd8SXoDxCeSwbMmdHx3dDksQ6VRx1HwF6acuYJUmelnBZFb/
g8Jyz7UECLwtZzO4qiyweg/Y5AmZjCiS/6ZuwV4sCeGIEhgEBuC+05mI75zv+zcJ
sUqLvgCGLT/CFzrr5Abc+VCztQvSTXPbQS/GTH9C2RIRX1gqKc+Vo4M88I3+REqf
Ha7HOEeJlIZuv1YAXx6SNkD2uLbIAubkrwG+Bz/rDloDDfJ1Lx9EfBbQg9qrZPOu
+2ehdGWmRlVN4sSgJDPduNXnedN706ZoTbSbn8faJPWmRtRYrnt9aa9UIR4GKMxT
A4J1Ojh/i7w6Qg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:06 2025 by rpki-client