Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
File: YGVg4D7ogzLu-_ppROvRA4rg6rg.mft (raw, json)
Hash identifier: wJCGMhZbbNhGsJBIZJLsc8uTRzdBVLuwPw8OnwlkBeg=
Subject key identifier: 99:02:77:CA:2E:87:F5:B5:92:31:CB:4E:76:3F:42:9A:31:0F:B2:C6
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial: 0199FDD924485DDB030DF7BB3F8E043107DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
Manifest number: 0EBC
Signing time: Sun 19 Oct 2025 19:01:30 +0000
Manifest this update: Sun 19 Oct 2025 19:01:30 +0000
Manifest next update: Mon 20 Oct 2025 19:01:30 +0000
Files and hashes: 1: 6He2HCHOgYmFWCnJx-CHnw1DNw4.roa (hash: R/op20lcuNNKjtAV2ZxOf6+gcTn27jdjTjhCIstJEzU=)
2: YGVg4D7ogzLu-_ppROvRA4rg6rg.crl (hash: YuZFDl9CfWX7p+iPXZrs3aQcEw86FFfmHINT0CsiOQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:24:48:5d:db:03:0d:f7:bb:3f:8e:04:31:07:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Validity
Not Before: Oct 19 19:01:30 2025 GMT
Not After : Oct 20 19:01:30 2025 GMT
Subject: CN=990277ca2e87f5b59231cb4e763f429a310fb2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:58:4c:c3:96:65:c7:2d:55:a9:61:23:b8:
0e:81:86:d5:6e:12:27:86:0a:27:95:c9:35:62:0a:
4e:55:c2:00:c3:6d:5f:7f:e0:f1:f5:1f:5f:a0:45:
cc:99:4e:08:e9:06:5c:db:3d:68:3f:4b:49:1c:75:
0c:38:11:f5:7d:e8:72:7a:1d:06:e0:95:d7:04:48:
e2:9b:35:2d:d0:af:a5:72:c3:2d:92:04:33:96:b5:
de:62:2a:72:a6:32:66:28:df:39:5b:44:d8:18:1b:
fa:c7:86:98:52:cf:21:da:95:d1:0c:e3:ce:0e:df:
6d:61:84:cd:28:64:35:a3:a7:76:62:56:54:2e:1e:
61:ed:d5:0d:b0:73:c6:64:c6:da:0a:32:a9:d1:a1:
98:a3:39:25:0e:3d:0b:63:2d:41:f7:09:d1:30:2c:
9b:f0:b2:7c:66:4b:09:46:43:b6:8a:19:a6:21:50:
cf:1e:db:da:7c:12:16:2d:7e:d5:b4:c7:0a:76:ae:
8e:f4:02:34:e4:7f:7e:a9:c3:83:c8:5e:ac:40:85:
4b:57:13:ea:8c:d1:65:05:3f:74:ec:ee:29:4e:fa:
bd:83:b3:52:84:11:0c:94:7e:6e:55:dc:26:8b:e3:
c1:64:fc:0e:34:8d:af:ac:f0:47:c0:0b:6d:a7:7a:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:02:77:CA:2E:87:F5:B5:92:31:CB:4E:76:3F:42:9A:31:0F:B2:C6
X509v3 Authority Key Identifier:
keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bc:62:3b:48:9e:9b:9d:e5:c3:2f:b4:b2:12:cf:6b:ca:10:
48:f8:cc:6a:29:e4:51:34:5d:39:3c:c3:04:4e:24:62:38:cf:
d9:8f:ca:25:82:ee:af:38:7c:a5:51:a4:ec:bb:56:0c:d5:9e:
97:6d:9e:e5:c0:4c:d7:7d:f9:94:de:1f:20:f9:9e:55:c5:1d:
8d:50:c0:ce:26:6f:f7:f3:13:70:86:87:78:bf:7b:46:f8:17:
10:4b:a2:5c:0f:e7:f8:88:28:d7:04:ff:ba:c2:13:7c:df:a1:
0b:5b:cf:76:3f:ff:38:23:0c:28:a7:d0:fd:a2:1a:97:c6:39:
22:2f:d5:41:73:96:a2:78:be:e7:61:ef:b3:e3:a0:bb:93:c9:
fd:25:97:45:f6:cf:10:29:55:4e:94:0a:50:5a:74:ed:4e:a3:
e0:04:40:2b:4e:16:25:9a:a9:ee:56:44:9f:92:dd:49:7f:5f:
81:ab:0d:5f:37:73:21:2c:83:73:7b:84:9c:17:59:e5:2a:72:
50:4a:27:e7:ad:4e:c8:6f:c7:83:88:2c:4b:34:00:9f:36:d5:
17:b6:70:6c:2a:81:b7:7c:1a:7f:cb:cf:fd:8e:e0:aa:fa:3b:
78:86:1a:75:30:99:e5:68:17:cb:b2:2a:9f:1e:e8:c4:26:32:
af:a5:31:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92SRIXdsDDfe7P44EMQfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjU2MGUwM2VlODgzMzJlZWZiZmE2OTQ0ZWJkMTAzOGFl
MGVhYjgwHhcNMjUxMDE5MTkwMTMwWhcNMjUxMDIwMTkwMTMwWjAzMTEwLwYDVQQD
Eyg5OTAyNzdjYTJlODdmNWI1OTIzMWNiNGU3NjNmNDI5YTMxMGZiMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0JYTMOWZcctValhI7gOgYbVbhIn
hgonlck1YgpOVcIAw21ff+Dx9R9foEXMmU4I6QZc2z1oP0tJHHUMOBH1fehyeh0G
4JXXBEjimzUt0K+lcsMtkgQzlrXeYipypjJmKN85W0TYGBv6x4aYUs8h2pXRDOPO
Dt9tYYTNKGQ1o6d2YlZULh5h7dUNsHPGZMbaCjKp0aGYozklDj0LYy1B9wnRMCyb
8LJ8ZksJRkO2ihmmIVDPHtvafBIWLX7VtMcKdq6O9AI05H9+qcODyF6sQIVLVxPq
jNFlBT907O4pTvq9g7NShBEMlH5uVdwmi+PBZPwONI2vrPBHwAttp3og3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkCd8ouh/W1kjHLTnY/QpoxD7LGMB8GA1UdIwQY
MBaAFGBlYOA+6IMy7vv6aUTr0QOK4Oq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdWZzREN29nekx1LV9wcFJPdlJBNHJnNnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNGI3OGYtOGNiYi00ODQ2LTg2NmUt
Y2Y5ZTcxNjRjMDdmLzEvWUdWZzREN29nekx1LV9wcFJPdlJBNHJnNnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNGI3OGYtOGNiYi00ODQ2LTg2NmUtY2Y5ZTcxNjRjMDdm
LzEvWUdWZzREN29nekx1LV9wcFJPdlJBNHJnNnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrxiO0ie
m53lwy+0shLPa8oQSPjMainkUTRdOTzDBE4kYjjP2Y/KJYLurzh8pVGk7LtWDNWe
l22e5cBM1335lN4fIPmeVcUdjVDAziZv9/MTcIaHeL97RvgXEEuiXA/n+Igo1wT/
usITfN+hC1vPdj//OCMMKKfQ/aIal8Y5Ii/VQXOWoni+52Hvs+Ogu5PJ/SWXRfbP
EClVTpQKUFp07U6j4ARAK04WJZqp7lZEn5LdSX9fgasNXzdzISyDc3uEnBdZ5Spy
UEon561OyG/Hg4gsSzQAnzbVF7ZwbCqBt3waf8vP/Y7gqvo7eIYadTCZ5WgXy7Iq
nx7oxCYyr6UxXg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:38 2025 by rpki-client