Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File: YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier: 1GMCOh3bcCA6Db59LgRQ/r2P69KHYYj5o7i6JfGLbZ4=
Subject key identifier: 6C:3B:FC:ED:83:48:54:7C:67:5A:A4:25:C0:BB:B0:D6:00:61:FB:98
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial: 0199FC588528FE6553090531CC7DDE44FC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number: 0DA7
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: z7g2xqsjoxXuvxkicJjhTSFarLlwrrrH6cPGKBVc9VI=)
2: tm8Rt7Sc2c1PcYKasPfyO3eBX9M.roa (hash: fWTds4doBQAqbglPwbw6IGwEFIO7de7/7OMc6gbtl08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:85:28:fe:65:53:09:05:31:cc:7d:de:44:fc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=6c3bfced8348547c675aa425c0bbb0d60061fb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:8c:8e:7e:7e:76:26:fa:a2:d5:3a:13:22:
20:ea:38:7f:0b:4a:46:23:92:7e:a3:e8:3b:c1:df:
90:a1:f2:da:d7:9d:76:0a:89:6e:61:62:99:57:f3:
97:11:77:31:f5:8e:b8:67:51:ab:a7:68:6d:27:e3:
29:a5:80:6b:18:81:2c:3f:0a:e9:1b:8c:63:9e:f0:
96:db:22:4f:b4:b4:a3:89:22:d2:77:a0:88:a2:91:
84:5d:20:9f:29:d0:34:1f:4a:01:d9:8d:a6:f8:e9:
7b:5b:74:cb:e3:3e:13:57:4b:4f:d0:cd:0d:76:de:
ce:c9:44:bb:5b:08:02:f3:27:9b:05:70:6c:7e:d2:
66:f9:7e:0f:9c:00:01:32:4b:d2:0f:0b:02:a9:0e:
ba:6a:c0:98:73:3d:03:ed:9c:61:7d:71:73:a3:c4:
d1:45:c3:c9:3f:ac:ce:bb:4f:a1:46:ad:e7:06:bb:
94:88:ed:2b:9a:2c:09:91:ea:60:5c:86:0e:94:f6:
26:7d:90:ce:06:f5:ea:ec:f8:d0:5f:fe:ce:b2:29:
3e:b8:fa:88:c7:cf:a4:33:26:91:75:b0:f2:fd:09:
46:dc:b0:2a:66:e9:26:e1:90:41:7c:33:81:35:bb:
07:49:a6:98:b7:b1:55:aa:51:87:c1:93:88:f7:08:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3B:FC:ED:83:48:54:7C:67:5A:A4:25:C0:BB:B0:D6:00:61:FB:98
X509v3 Authority Key Identifier:
keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:75:cc:ac:a3:b4:55:1d:52:f3:70:86:91:e9:b5:e0:79:2a:
43:d3:d0:7b:4d:b0:b8:d4:f3:76:a3:2d:91:a1:b0:41:b4:47:
71:56:12:ba:4b:f9:ec:fd:39:01:e1:32:3a:a9:24:d8:d9:9e:
35:c8:6e:1e:d1:f0:4d:20:9f:10:03:89:41:83:61:5f:32:22:
b9:c8:9f:9d:8a:98:c9:50:ec:79:79:03:a9:f9:3c:90:8f:8d:
92:f1:f1:d7:c3:53:4d:88:02:ff:9e:89:0c:8a:dc:ba:67:cc:
aa:8e:0a:e5:d0:c3:40:a9:a8:4b:5f:f0:b5:b4:24:7c:0b:9d:
bd:32:e6:dd:be:b6:5e:55:b2:17:5c:4c:29:5f:de:be:a1:b8:
ed:7e:d9:9f:de:d6:6a:42:7e:47:70:80:d3:78:f9:92:fb:cc:
13:73:a7:45:bf:dc:ee:5d:53:71:01:7b:e0:41:9c:88:27:3d:
31:90:fc:c8:61:57:8c:b7:81:b8:e2:68:5c:85:a4:ce:22:2d:
90:1d:a3:07:30:2a:ef:2f:e2:fe:5f:6f:25:7c:92:c9:a7:14:
a4:3d:9a:f2:bd:0a:73:d6:26:5f:e4:fb:f4:e3:cd:3f:6e:64:
a3:b9:41:30:77:7d:77:ac:de:a9:2a:a3:76:f2:bc:37:63:b9:
aa:3e:3c:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIUo/mVTCQUxzH3eRPwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMGY4Zjk5ZmNhNjlhYTczZjg4YTUzMWRiNDZkMjI4YTdl
MmMzZDMwHhcNMjUxMDE5MTIwMTIzWhcNMjUxMDIwMTIwMTIzWjAzMTEwLwYDVQQD
Eyg2YzNiZmNlZDgzNDg1NDdjNjc1YWE0MjVjMGJiYjBkNjAwNjFmYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1waMjn5+dib6otU6EyIg6jh/C0pG
I5J+o+g7wd+QofLa1512ColuYWKZV/OXEXcx9Y64Z1Grp2htJ+MppYBrGIEsPwrp
G4xjnvCW2yJPtLSjiSLSd6CIopGEXSCfKdA0H0oB2Y2m+Ol7W3TL4z4TV0tP0M0N
dt7OyUS7WwgC8yebBXBsftJm+X4PnAABMkvSDwsCqQ66asCYcz0D7ZxhfXFzo8TR
RcPJP6zOu0+hRq3nBruUiO0rmiwJkepgXIYOlPYmfZDOBvXq7PjQX/7Osik+uPqI
x8+kMyaRdbDy/QlG3LAqZukm4ZBBfDOBNbsHSaaYt7FVqlGHwZOI9wiicQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGw7/O2DSFR8Z1qkJcC7sNYAYfuYMB8GA1UdIwQY
MBaAFGEPj5n8ppqnP4ilMdtG0iin4sPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kOTQ2ODEtYWJlNi00ZTIzLTliOTgt
NzlhMGE1MjhlMGE0LzEvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kOTQ2ODEtYWJlNi00ZTIzLTliOTgtNzlhMGE1MjhlMGE0
LzEvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXXMrKO0
VR1S83CGkem14HkqQ9PQe02wuNTzdqMtkaGwQbRHcVYSukv57P05AeEyOqkk2Nme
NchuHtHwTSCfEAOJQYNhXzIiucifnYqYyVDseXkDqfk8kI+NkvHx18NTTYgC/56J
DIrcumfMqo4K5dDDQKmoS1/wtbQkfAudvTLm3b62XlWyF1xMKV/evqG47X7Zn97W
akJ+R3CA03j5kvvME3OnRb/c7l1TcQF74EGciCc9MZD8yGFXjLeBuOJoXIWkziIt
kB2jBzAq7y/i/l9vJXySyacUpD2a8r0Kc9YmX+T79OPNP25ko7lBMHd9d6zeqSqj
dvK8N2O5qj48WA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:45 2025 by rpki-client