Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: b6drWLeU6CvBXmNG2zW4DWGWH5fVS/1pzlR2dm8m8Jo=
Subject key identifier: 07:C7:1D:FD:FB:C7:D9:09:4A:55:1A:70:B6:14:28:5C:46:5B:2D:45
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 0199FE7DEE8A1718AC4B71233D09825C726E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 22:01:29 +0000
Manifest this update: Sun 19 Oct 2025 22:01:29 +0000
Manifest next update: Mon 20 Oct 2025 22:01:29 +0000
Files and hashes: 1: 4mIaRiVfusRCW_nZ919kue73VcU.roa (hash: KAlnZdYdnEt6W3Qh7SxuikxG/eJq1ZmaN4m/5vXa+us=)
2: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: /F018gQ8efvIfmViP3K1+nN9EeKBBsIFxFam3e26kI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:ee:8a:17:18:ac:4b:71:23:3d:09:82:5c:72:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: Oct 19 22:01:29 2025 GMT
Not After : Oct 20 22:01:29 2025 GMT
Subject: CN=07c71dfdfbc7d9094a551a70b614285c465b2d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:19:1e:8c:80:15:60:7e:20:04:eb:c1:32:
d2:da:67:60:2c:2b:8a:91:a5:49:ef:39:4f:ae:5c:
1d:0d:17:15:b1:eb:3a:ba:49:8e:9a:de:c2:20:3b:
f5:00:8f:a9:32:50:c9:97:1e:58:5d:53:a4:51:ed:
69:eb:eb:fa:11:3f:6d:85:d6:3e:63:e7:49:35:d8:
48:83:4a:36:01:ac:54:5a:8d:6e:45:7d:b6:36:a6:
85:b6:04:d1:04:25:ff:41:0e:9d:3f:89:3a:83:1a:
75:38:28:22:55:34:36:6d:ad:2a:5f:f0:c3:7e:5b:
ed:4d:69:f5:d6:96:ae:30:cc:0e:d2:9c:bc:bc:a6:
08:9b:14:11:4e:86:64:0f:6f:f5:a4:aa:2a:da:a7:
c6:e8:e2:14:fe:15:6b:66:c1:94:50:d7:85:b3:23:
2a:de:79:3b:28:51:0a:75:95:57:9b:10:a7:16:d3:
10:ab:ee:d1:dc:e9:4f:d7:10:e1:94:c0:e5:c5:82:
9e:d0:9a:aa:02:48:16:08:0a:5a:5c:60:95:31:7e:
24:17:10:99:f7:08:42:76:2e:1d:3e:e1:58:72:49:
6c:4d:9c:25:00:e8:b2:05:10:b0:31:dc:6f:62:d0:
a0:9f:31:11:0e:5c:60:ba:38:3f:65:00:3d:2b:1e:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C7:1D:FD:FB:C7:D9:09:4A:55:1A:70:B6:14:28:5C:46:5B:2D:45
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f9:a0:29:c8:6e:87:d4:9e:53:5f:63:c8:dd:11:34:31:7c:
0d:23:27:75:c5:b2:70:3d:62:d3:c6:6c:f8:33:0e:c3:88:54:
9e:d9:9f:4b:43:76:6e:0b:47:71:d5:7f:45:b3:5f:ca:a6:95:
4b:64:f1:72:2f:df:75:0d:6d:64:ca:31:7d:55:1a:1f:b1:d7:
b1:c4:3b:10:23:e2:2c:1c:6a:5b:e9:68:6b:be:a6:54:c0:ca:
4b:13:00:c4:6a:33:96:c4:1c:ba:bd:7e:3f:88:43:03:7c:15:
ed:9e:e3:96:77:c7:e0:a7:fa:61:ac:3f:17:38:35:14:ea:d8:
1b:b7:78:33:11:b5:af:21:55:9a:35:e7:91:7d:cb:c4:fa:d7:
1b:66:2f:b5:1d:59:f8:b8:83:6d:2c:10:c5:b4:de:95:73:44:
5b:0d:3f:d3:5b:c9:33:56:64:45:32:75:96:5d:48:bf:ea:cb:
e1:b4:68:bb:c1:26:68:11:26:2a:52:c0:99:33:19:cb:9b:20:
37:22:12:b0:6d:18:19:5b:b1:fa:4e:a6:37:8e:03:bb:36:8a:
e4:12:c8:3b:36:9b:ee:41:d4:b2:5d:a9:7a:17:41:6a:ac:20:
7c:00:35:9c:54:26:65:66:ad:31:a7:62:a2:36:b4:7a:98:4b:
3b:93:60:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fe6KFxisS3EjPQmCXHJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWRjMDBmOWE0ODFiNDE1MDg2YjE0M2E3ZGQ0Y2RhMWZm
YjI0NzAwHhcNMjUxMDE5MjIwMTI5WhcNMjUxMDIwMjIwMTI5WjAzMTEwLwYDVQQD
EygwN2M3MWRmZGZiYzdkOTA5NGE1NTFhNzBiNjE0Mjg1YzQ2NWIyZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskYZHoyAFWB+IATrwTLS2mdgLCuK
kaVJ7zlPrlwdDRcVses6ukmOmt7CIDv1AI+pMlDJlx5YXVOkUe1p6+v6ET9thdY+
Y+dJNdhIg0o2AaxUWo1uRX22NqaFtgTRBCX/QQ6dP4k6gxp1OCgiVTQ2ba0qX/DD
flvtTWn11pauMMwO0py8vKYImxQRToZkD2/1pKoq2qfG6OIU/hVrZsGUUNeFsyMq
3nk7KFEKdZVXmxCnFtMQq+7R3OlP1xDhlMDlxYKe0JqqAkgWCApaXGCVMX4kFxCZ
9whCdi4dPuFYcklsTZwlAOiyBRCwMdxvYtCgnzERDlxgujg/ZQA9Kx7QsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfHHf37x9kJSlUacLYUKFxGWy1FMB8GA1UdIwQY
MBaAFGAdwA+aSBtBUIaxQ6fdTNof+yRwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUt
ZmJhNDliMGNkZGVkLzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUtZmJhNDliMGNkZGVk
LzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfmgKchu
h9SeU19jyN0RNDF8DSMndcWycD1i08Zs+DMOw4hUntmfS0N2bgtHcdV/RbNfyqaV
S2Txci/fdQ1tZMoxfVUaH7HXscQ7ECPiLBxqW+loa76mVMDKSxMAxGozlsQcur1+
P4hDA3wV7Z7jlnfH4Kf6Yaw/Fzg1FOrYG7d4MxG1ryFVmjXnkX3LxPrXG2YvtR1Z
+LiDbSwQxbTelXNEWw0/01vJM1ZkRTJ1ll1Iv+rL4bRou8EmaBEmKlLAmTMZy5sg
NyISsG0YGVux+k6mN44DuzaK5BLIOzab7kHUsl2pehdBaqwgfAA1nFQmZWatMadi
oja0ephLO5NgRA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:11 2025 by rpki-client