Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
File: YIH8-etwqw4f3KwJx_m7XgFMnb0.mft (raw, json)
Hash identifier: zvrg/Mjbpw+6t7OA54iFBNAiolUZ20P1BdApOpsS0Rw=
Subject key identifier: 21:20:61:AA:16:45:D5:02:8B:0A:61:B1:B9:F9:24:49:A5:34:5A:56
Authority key identifier: 60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
Certificate issuer: /CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Certificate serial: 0199FCC680B4DD78B51BB011138981B3C084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
Manifest number: 0C3D
Signing time: Sun 19 Oct 2025 14:01:31 +0000
Manifest this update: Sun 19 Oct 2025 14:01:31 +0000
Manifest next update: Mon 20 Oct 2025 14:01:31 +0000
Files and hashes: 1: SCQrnzyM4Bx20DPOMtssZk-Wu68.roa (hash: wtLko9TY7/20VtwY2KqfAs6WX/4oN6rpkwycX+Q3z5I=)
2: YIH8-etwqw4f3KwJx_m7XgFMnb0.crl (hash: uAecKm+R3hL6s6zVsVGPA+cHKAARJfJZXlZoPXIvH2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:80:b4:dd:78:b5:1b:b0:11:13:89:81:b3:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Validity
Not Before: Oct 19 14:01:31 2025 GMT
Not After : Oct 20 14:01:31 2025 GMT
Subject: CN=212061aa1645d5028b0a61b1b9f92449a5345a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:12:63:65:ae:47:27:24:bb:e1:9c:9f:46:
a2:f5:5f:b0:c7:32:38:56:7f:61:2f:a1:d5:1c:4d:
b0:c3:ee:ce:be:cc:96:73:62:61:82:e0:39:70:bd:
c0:23:7c:99:25:ce:9b:52:7f:22:96:79:45:ae:d0:
6d:65:04:d5:48:e0:ce:41:a0:48:f2:e7:06:5b:41:
35:76:33:53:a6:49:50:f6:72:0e:df:46:5d:d7:df:
be:ad:f3:22:06:f4:30:e0:3c:84:b8:a3:37:25:80:
b6:fe:79:1e:f8:4c:5e:98:d3:27:8d:36:5a:ff:69:
74:62:36:2a:30:ed:b1:fa:f6:60:2a:d5:22:fc:61:
51:1b:8e:84:5f:ef:5b:fc:42:b1:2e:c4:2c:86:d8:
5d:a7:3f:80:be:76:bb:b8:e5:4a:bc:51:f7:94:a5:
e2:b3:75:8e:d3:0b:eb:45:64:0c:0a:d6:dc:1e:2c:
5f:1c:fd:f8:8a:e1:72:f6:61:cc:00:6b:de:3f:91:
b7:d8:e2:fa:cf:4d:10:88:55:9b:c5:02:c4:c7:96:
3c:4f:ea:21:ed:61:0e:1c:5a:45:42:7c:a1:51:b3:
82:cd:7e:f8:57:89:ce:fa:51:68:ce:2c:ff:90:a4:
3d:23:a4:c7:90:2d:34:1c:29:7f:30:62:36:d2:41:
ac:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:20:61:AA:16:45:D5:02:8B:0A:61:B1:B9:F9:24:49:A5:34:5A:56
X509v3 Authority Key Identifier:
keyid:60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:04:98:a8:b6:d3:0c:43:4c:a7:f7:9e:f0:6e:4a:d9:aa:a8:
ae:2d:42:6d:68:86:26:91:1a:9e:7e:1f:62:cb:b3:fe:af:b6:
cb:23:66:fa:59:98:04:67:9c:0e:33:65:44:c7:5a:34:34:69:
5c:fd:09:36:ab:3d:21:35:18:8d:4d:dd:1c:82:59:42:07:ca:
d9:c0:60:c7:38:37:1b:d3:16:5a:98:70:71:26:e9:e8:94:62:
d9:28:fa:09:0c:01:a3:22:46:ce:64:82:d1:70:cc:13:7a:41:
07:59:92:c2:11:04:e7:4f:ef:89:b2:1f:73:1f:e0:bd:9d:bd:
54:1a:54:14:aa:05:44:28:66:05:32:8c:b4:df:c8:a2:4c:97:
31:eb:27:5f:34:e4:a9:0a:1a:89:4d:ad:89:07:4c:79:97:82:
87:68:55:b8:73:94:b6:06:24:c4:c8:eb:b7:7e:c9:da:fd:c4:
5d:4c:78:7f:b0:82:98:7d:6b:12:d9:d4:57:02:d8:5e:81:c5:
77:43:f4:ae:29:5f:6c:93:64:d3:78:d4:75:a9:86:10:e4:a6:
df:f9:34:10:ed:b6:61:c2:16:5a:71:69:ff:b0:a3:eb:32:2a:
16:13:4a:5b:4b:30:ad:2e:e1:d3:5a:45:bd:14:a4:f6:e4:0a:
73:22:c4:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xoC03Xi1G7ARE4mBs8CEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwODFmY2Y5ZWI3MGFiMGUxZmRjYWMwOWM3ZjliYjVlMDE0
YzlkYmQwHhcNMjUxMDE5MTQwMTMxWhcNMjUxMDIwMTQwMTMxWjAzMTEwLwYDVQQD
EygyMTIwNjFhYTE2NDVkNTAyOGIwYTYxYjFiOWY5MjQ0OWE1MzQ1YTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P0SY2WuRycku+Gcn0ai9V+wxzI4
Vn9hL6HVHE2ww+7OvsyWc2JhguA5cL3AI3yZJc6bUn8ilnlFrtBtZQTVSODOQaBI
8ucGW0E1djNTpklQ9nIO30Zd19++rfMiBvQw4DyEuKM3JYC2/nke+ExemNMnjTZa
/2l0YjYqMO2x+vZgKtUi/GFRG46EX+9b/EKxLsQshthdpz+Avna7uOVKvFH3lKXi
s3WO0wvrRWQMCtbcHixfHP34iuFy9mHMAGveP5G32OL6z00QiFWbxQLEx5Y8T+oh
7WEOHFpFQnyhUbOCzX74V4nO+lFoziz/kKQ9I6THkC00HCl/MGI20kGsKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEgYaoWRdUCiwphsbn5JEmlNFpWMB8GA1UdIwQY
MBaAFGCB/PnrcKsOH9ysCcf5u14BTJ29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUlIOC1ldHdxdzRmM0t3SnhfbTdYZ0ZNbmIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9mZmQxZWQtNjliMS00OTMyLThmZDAt
NzdmOWVkMTE5NWQ1LzEvWUlIOC1ldHdxdzRmM0t3SnhfbTdYZ0ZNbmIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9mZmQxZWQtNjliMS00OTMyLThmZDAtNzdmOWVkMTE5NWQ1
LzEvWUlIOC1ldHdxdzRmM0t3SnhfbTdYZ0ZNbmIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgSYqLbT
DENMp/ee8G5K2aqori1CbWiGJpEann4fYsuz/q+2yyNm+lmYBGecDjNlRMdaNDRp
XP0JNqs9ITUYjU3dHIJZQgfK2cBgxzg3G9MWWphwcSbp6JRi2Sj6CQwBoyJGzmSC
0XDME3pBB1mSwhEE50/vibIfcx/gvZ29VBpUFKoFRChmBTKMtN/IokyXMesnXzTk
qQoaiU2tiQdMeZeCh2hVuHOUtgYkxMjrt37J2v3EXUx4f7CCmH1rEtnUVwLYXoHF
d0P0rilfbJNk03jUdamGEOSm3/k0EO22YcIWWnFp/7Cj6zIqFhNKW0swrS7h01pF
vRSk9uQKcyLE6g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:40 2025 by rpki-client