Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: LJtGERxuxQhQ2EwqIVR6X/6cELzr7TeeEBGV1a2oW08=
Subject key identifier: 60:70:5C:BA:43:17:F0:2A:F2:57:B5:8A:2A:E6:F1:2C:13:C6:4E:E7
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 0199FB7CD95B0269CEAE92519119FB1937B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 142A
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: GQfCTXlzQ4teX8FVx0nVHjfjPCo.roa (hash: sJIhi2+DtaS3Exb5aEGPNynpCj4YntHCMrta/UXKcus=)
2: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
3: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: JVMIUOmtYxBOCi2VpL0Dg2LBB2l3VJhstgpeIEtGhOg=)
4: mVzSuLvWAL7m7NJsQ86d2SSGxY0.roa (hash: Uckvu6ObviGOPyhjC59c19/BREDAL5JfQ4YNdEuoFeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d9:5b:02:69:ce:ae:92:51:91:19:fb:19:37:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=60705cba4317f02af257b58a2ae6f12c13c64ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:d2:25:c5:71:87:e3:95:5f:8e:a8:4a:6c:
92:c0:52:c3:37:9b:f1:87:9d:bf:03:36:7a:02:ae:
9d:3c:cb:88:0f:05:01:77:d9:1b:fd:2e:d5:f3:92:
19:ab:60:16:e8:7a:7c:cd:48:8f:e7:25:f7:3d:9f:
14:e7:15:31:26:d2:d3:aa:9c:b7:c3:5b:06:b7:e4:
0e:d0:8c:e8:82:05:3b:73:a3:4f:05:8d:dc:8e:11:
13:43:82:54:91:89:09:d7:e1:4f:a3:01:63:aa:aa:
53:b0:00:76:a2:33:15:70:5b:d5:da:d8:e0:52:bb:
8f:c6:c3:c5:58:e5:8d:d4:99:d9:f6:f8:5c:04:82:
b7:4d:61:76:15:61:52:18:60:f5:55:9f:58:a9:38:
64:d6:f8:d2:f5:dc:54:10:d1:16:5c:cb:5f:b1:97:
f3:63:91:87:00:22:43:2d:17:bd:06:d1:33:bb:eb:
f0:a9:87:b2:ae:14:bf:80:5d:74:df:96:6e:25:c2:
9b:ae:90:1b:0c:7c:e2:3c:2f:bf:95:69:70:3c:91:
d3:b9:fb:08:04:39:a3:4e:3f:b4:61:e5:ec:68:90:
8f:cf:44:50:2c:2e:dd:7e:8f:fd:62:3c:c7:08:5b:
10:c5:0f:39:72:46:d0:d4:da:86:10:7c:08:0a:bb:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:5C:BA:43:17:F0:2A:F2:57:B5:8A:2A:E6:F1:2C:13:C6:4E:E7
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:18:d6:79:a9:d3:7e:dd:4d:d6:58:a6:f8:3d:4a:82:67:8b:
45:9c:4b:3a:cf:d3:0e:ba:19:5c:ca:1f:dd:af:10:c2:35:98:
f3:45:61:08:38:db:3e:ca:88:fd:a4:e8:16:d4:5c:2a:e5:6a:
66:c1:98:c9:66:85:71:5c:f3:08:56:a1:6f:34:d3:ce:fe:a1:
f7:3e:17:f9:26:3a:a7:17:13:71:ac:1f:43:69:fb:7e:e8:8e:
0e:ec:57:67:dd:00:da:22:aa:bd:bf:d1:15:bb:de:55:d8:19:
5f:25:69:12:93:8d:99:41:95:a0:4d:7f:17:07:29:ed:e6:c7:
8b:64:e1:cc:c3:e8:53:e9:19:b5:f5:05:3a:56:e3:1e:9b:d3:
30:c4:fd:1b:16:3c:bf:17:35:c6:ab:00:ee:32:60:f1:65:e2:
4d:28:6a:91:a6:06:a1:61:30:fd:59:d7:54:aa:a6:50:43:fd:
66:fa:3a:b9:76:6d:42:70:5b:56:76:52:5f:ef:e8:bb:31:00:
68:46:9c:9e:8d:9a:c1:96:1a:5c:ff:54:bc:08:66:d7:a2:ee:
a6:31:b9:bc:2e:e8:2b:69:29:c4:d5:05:7f:bb:ea:2b:59:4d:
eb:7a:e6:9b:21:76:40:97:4e:72:ae:e0:4f:d3:ad:30:20:45:
c7:65:f5:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNlbAmnOrpJRkRn7GTe0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYmEwYmU3Y2NlMzgwZTZiYjc0ZTNjNWZjZWEwODFlOTc5
OWFlNTQwHhcNMjUxMDE5MDgwMTI3WhcNMjUxMDIwMDgwMTI3WjAzMTEwLwYDVQQD
Eyg2MDcwNWNiYTQzMTdmMDJhZjI1N2I1OGEyYWU2ZjEyYzEzYzY0ZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkHSJcVxh+OVX46oSmySwFLDN5vx
h52/AzZ6Aq6dPMuIDwUBd9kb/S7V85IZq2AW6Hp8zUiP5yX3PZ8U5xUxJtLTqpy3
w1sGt+QO0IzoggU7c6NPBY3cjhETQ4JUkYkJ1+FPowFjqqpTsAB2ojMVcFvV2tjg
UruPxsPFWOWN1JnZ9vhcBIK3TWF2FWFSGGD1VZ9YqThk1vjS9dxUENEWXMtfsZfz
Y5GHACJDLRe9BtEzu+vwqYeyrhS/gF1035ZuJcKbrpAbDHziPC+/lWlwPJHTufsI
BDmjTj+0YeXsaJCPz0RQLC7dfo/9YjzHCFsQxQ85ckbQ1NqGEHwICrvR4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBwXLpDF/Aq8le1iirm8SwTxk7nMB8GA1UdIwQY
MBaAFGG6C+fM44Dmu3TjxfzqCB6Xma5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDIt
MjEwZDQ4MmE0YjkzLzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDItMjEwZDQ4MmE0Yjkz
LzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBjWeanT
ft1N1lim+D1KgmeLRZxLOs/TDroZXMof3a8QwjWY80VhCDjbPsqI/aToFtRcKuVq
ZsGYyWaFcVzzCFahbzTTzv6h9z4X+SY6pxcTcawfQ2n7fuiODuxXZ90A2iKqvb/R
FbveVdgZXyVpEpONmUGVoE1/Fwcp7ebHi2ThzMPoU+kZtfUFOlbjHpvTMMT9GxY8
vxc1xqsA7jJg8WXiTShqkaYGoWEw/VnXVKqmUEP9Zvo6uXZtQnBbVnZSX+/ouzEA
aEacno2awZYaXP9UvAhm16LupjG5vC7oK2kpxNUFf7vqK1lN63rmmyF2QJdOcq7g
T9OtMCBFx2X1ew==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:33 2025 by rpki-client