Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier: P57CZwUrvdK/bcxVXZYCWo6XLAmiVEhqJmZDaWu2jqE=
Subject key identifier: 96:73:BC:06:9C:BF:3F:7C:9C:B1:EA:E7:60:A7:99:2F:3E:CB:A3:83
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 0199FC8F99EC24BC61D7758B37EA2C55797F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number: 168D
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: ZGotlIxXbe0bXwBNeN/z3wfA+d43Ulztpxp09OZuXLU=)
2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:99:ec:24:bc:61:d7:75:8b:37:ea:2c:55:79:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=9673bc069cbf3f7c9cb1eae760a7992f3ecba383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:d4:e3:f2:02:75:eb:6b:69:74:4c:f4:86:
19:7d:84:22:3d:d0:fa:34:00:77:b4:65:01:ad:c8:
11:3a:d2:fc:5e:d4:8b:d6:89:12:9e:b6:64:81:94:
d8:64:56:85:50:41:02:a8:b2:39:4e:1d:45:60:ee:
47:1d:20:5d:11:e0:2d:61:e1:19:64:1a:a7:9e:7e:
e5:c0:73:68:05:6e:93:20:09:14:2b:b2:b0:92:4c:
9d:d7:3a:f5:ee:d0:9a:52:be:bc:d2:4d:35:e5:dc:
d4:61:2a:7e:de:5a:18:28:1a:67:1b:89:85:0f:00:
8c:87:3f:cb:22:d1:ac:cc:f4:bb:ad:2c:86:9c:cc:
2c:56:64:76:bc:09:b5:14:8d:35:aa:53:1a:3b:f1:
c5:0a:78:72:61:66:6a:6b:10:63:c1:96:2b:60:36:
76:0b:c5:ac:24:9e:59:39:d5:ad:a9:00:64:9b:fa:
82:92:cb:17:53:1a:6c:f3:8a:80:ce:d7:7d:1f:49:
01:08:76:da:b9:ee:27:26:7d:97:88:89:ad:ad:6d:
42:2e:fd:1b:0d:74:68:56:ab:85:b8:32:d7:eb:90:
af:f0:a0:a5:c6:14:be:82:6a:2b:e8:22:cf:03:c3:
8d:3b:c6:ba:8e:bf:18:20:17:46:4c:3b:4c:70:ba:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:BC:06:9C:BF:3F:7C:9C:B1:EA:E7:60:A7:99:2F:3E:CB:A3:83
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cf:1d:e9:41:ad:c6:e3:36:f9:33:3b:e9:2f:5c:2d:9a:15:
70:b1:89:42:12:64:54:4f:7e:ce:10:74:f4:4b:ef:88:69:5c:
aa:87:b7:71:e2:3f:9a:f3:ea:11:41:9d:c5:58:ff:26:58:de:
78:d8:6c:c6:3f:a0:6b:13:2a:c7:c6:e0:45:95:5c:60:79:93:
37:00:fb:ba:54:52:dd:29:7f:84:b0:38:4f:3e:68:da:c8:6b:
37:ea:ac:22:f7:22:5d:02:d4:0b:c8:de:e5:01:30:49:4d:a5:
f0:14:ba:0e:59:41:b0:7f:bf:69:8a:87:b8:a3:f8:7f:46:0c:
3f:33:d7:31:ce:e0:b7:2c:0a:fb:cf:34:00:59:a2:6b:d4:d7:
a2:04:6e:0c:a3:72:e3:97:e9:9d:38:1f:aa:94:de:d6:f6:c9:
7b:75:c3:54:11:f3:af:8f:5e:21:d6:bf:e3:38:ac:25:21:5e:
50:d8:b0:c6:65:f1:ca:68:1c:60:3e:a4:52:63:a5:47:4b:db:
2d:9e:9f:63:ba:19:b7:fd:9a:28:14:ec:d8:4a:88:ab:21:7e:
32:a9:a7:0f:3b:30:7a:6c:58:23:f9:d2:ed:40:ef:b5:8b:62:
d0:cb:aa:43:28:2e:42:53:bd:89:a6:45:20:6e:91:4d:25:5f:
57:61:ab:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5nsJLxh13WLN+osVXl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYjc5NDkwMmE1Y2QzZDI3ODNmY2MyYWE0YjA3OTFmNzlh
NTc3YTIwHhcNMjUxMDE5MTMwMTMzWhcNMjUxMDIwMTMwMTMzWjAzMTEwLwYDVQQD
Eyg5NjczYmMwNjljYmYzZjdjOWNiMWVhZTc2MGE3OTkyZjNlY2JhMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoezU4/ICdetraXRM9IYZfYQiPdD6
NAB3tGUBrcgROtL8XtSL1okSnrZkgZTYZFaFUEECqLI5Th1FYO5HHSBdEeAtYeEZ
ZBqnnn7lwHNoBW6TIAkUK7Kwkkyd1zr17tCaUr680k015dzUYSp+3loYKBpnG4mF
DwCMhz/LItGszPS7rSyGnMwsVmR2vAm1FI01qlMaO/HFCnhyYWZqaxBjwZYrYDZ2
C8WsJJ5ZOdWtqQBkm/qCkssXUxps84qAztd9H0kBCHbaue4nJn2XiImtrW1CLv0b
DXRoVquFuDLX65Cv8KClxhS+gmor6CLPA8ONO8a6jr8YIBdGTDtMcLpIEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZzvAacvz98nLHq52CnmS8+y6ODMB8GA1UdIwQY
MBaAFGC3lJAqXNPSeD/MKqSweR95pXeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNzFiMmMtMjE0MC00ZTZlLWFiYzQt
NDAxNDc3NDg5MzAyLzEvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kNzFiMmMtMjE0MC00ZTZlLWFiYzQtNDAxNDc3NDg5MzAy
LzEvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc8d6UGt
xuM2+TM76S9cLZoVcLGJQhJkVE9+zhB09EvviGlcqoe3ceI/mvPqEUGdxVj/Jlje
eNhsxj+gaxMqx8bgRZVcYHmTNwD7ulRS3Sl/hLA4Tz5o2shrN+qsIvciXQLUC8je
5QEwSU2l8BS6DllBsH+/aYqHuKP4f0YMPzPXMc7gtywK+880AFmia9TXogRuDKNy
45fpnTgfqpTe1vbJe3XDVBHzr49eIda/4zisJSFeUNiwxmXxymgcYD6kUmOlR0vb
LZ6fY7oZt/2aKBTs2EqIqyF+MqmnDzswemxYI/nS7UDvtYti0MuqQyguQlO9iaZF
IG6RTSVfV2Grjw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:35 2025 by rpki-client