Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: JFM4uU+OmmkL+RtL9TzJr407EqMxkzLxQB57owwWqE0=
Subject key identifier: E9:36:48:C4:D7:AB:E2:F2:CA:CD:09:01:B8:71:6F:89:3B:91:57:C1
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 0199FBB37271C09EA45FB5B6BF742A9509DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 34
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: IY/Jbn2kJT/ChustToauypEADfdGsHXeBahYWjtaAn4=)
2: bcgwm0IXZl2cgnOU43vtGxwCk5s.roa (hash: pOqSUBN1yoYOlROah8VVMTjUQwi9pDp8K4UguM3751U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:72:71:c0:9e:a4:5f:b5:b6:bf:74:2a:95:09:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=e93648c4d7abe2f2cacd0901b8716f893b9157c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:96:45:61:b0:f1:76:66:54:55:9e:f8:91:
6e:23:80:ad:64:82:ec:f2:ec:83:c3:0b:a3:3b:9f:
ad:c7:84:0e:0e:af:0b:71:d3:18:18:82:01:8e:82:
03:fd:ac:ef:91:3c:d9:7c:ec:1e:46:47:e9:95:70:
48:1c:ae:00:32:b4:2f:5c:e5:21:6b:7e:30:3b:40:
a8:30:3b:a5:78:3c:ab:02:cf:ab:90:24:78:53:55:
d9:e4:a9:98:ac:bb:1c:62:94:8e:91:02:f6:b6:8c:
47:81:81:7b:b4:a3:8a:9d:f8:30:92:35:f2:a3:f4:
2c:81:24:71:41:6c:b2:c9:8e:eb:55:0a:f6:6f:7b:
38:99:ce:50:01:a5:4c:3f:d1:80:eb:e2:83:5c:a1:
61:c6:e4:11:41:56:c6:11:ee:92:11:44:9f:8d:22:
13:0d:3d:cc:73:3c:98:00:fa:9c:72:50:33:fd:9c:
2b:33:08:20:62:ec:53:ff:ce:2d:16:bb:f2:eb:f0:
9a:04:08:ac:85:dd:31:1c:d2:6d:13:47:e1:a3:40:
8d:00:4e:b5:bb:37:59:03:58:04:f4:62:56:43:29:
42:a5:3b:6a:68:f5:8d:50:b1:5f:cf:2e:62:08:df:
06:71:8a:a6:7d:73:b5:c0:9e:37:5d:52:aa:1f:96:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:36:48:C4:D7:AB:E2:F2:CA:CD:09:01:B8:71:6F:89:3B:91:57:C1
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5b:5c:ef:ee:b4:52:dc:f9:28:4e:c3:a7:1a:86:44:1d:7a:
4b:db:51:00:19:9a:5a:70:6f:63:91:46:1b:dc:e7:ac:ea:2b:
fd:89:b4:4e:71:24:6e:af:32:af:c6:64:18:f1:e1:6c:36:09:
ff:c5:bd:1b:dd:eb:e8:be:9c:12:2d:bd:f5:51:60:cb:f5:73:
5b:85:f0:1e:ab:07:b8:90:41:21:20:d2:9e:d1:1d:21:2c:6e:
d0:c9:8e:d2:52:b1:a8:58:5f:0c:43:ea:11:6e:7c:2b:e7:91:
cc:5c:2d:2e:15:b2:6d:1e:c3:8b:d1:35:ed:b8:15:0e:c9:43:
79:69:6f:2b:91:ff:10:5b:cd:66:d8:5c:b2:a1:e7:b6:02:7b:
2b:ef:ce:97:ea:3b:b9:20:a1:0e:4f:51:da:4b:08:17:a6:f4:
76:f0:4a:f7:cd:78:41:01:f3:7d:96:df:4c:b1:c3:7c:56:12:
f0:31:4e:04:bf:7a:c7:e6:30:56:9c:aa:0e:21:20:0c:e6:c6:
22:a0:db:8e:6e:a5:92:ae:d4:4d:20:e4:c0:07:1c:92:45:10:
43:cb:3e:0a:88:41:ae:2a:20:34:be:1e:01:af:00:b5:d4:50:
1e:e2:77:df:b5:17:4d:28:ea:52:09:c2:a6:f3:a0:1f:d3:c2:
54:1e:b1:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s3JxwJ6kX7W2v3QqlQnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxN2Y2ZjZlMTUwYTYwNDNjYjIwOTNiMDhkZGQzYTJhNGFi
OTdhMzcwHhcNMjUxMDE5MDkwMTA1WhcNMjUxMDIwMDkwMTA1WjAzMTEwLwYDVQQD
EyhlOTM2NDhjNGQ3YWJlMmYyY2FjZDA5MDFiODcxNmY4OTNiOTE1N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4CWRWGw8XZmVFWe+JFuI4CtZILs
8uyDwwujO5+tx4QODq8LcdMYGIIBjoID/azvkTzZfOweRkfplXBIHK4AMrQvXOUh
a34wO0CoMDuleDyrAs+rkCR4U1XZ5KmYrLscYpSOkQL2toxHgYF7tKOKnfgwkjXy
o/QsgSRxQWyyyY7rVQr2b3s4mc5QAaVMP9GA6+KDXKFhxuQRQVbGEe6SEUSfjSIT
DT3MczyYAPqcclAz/ZwrMwggYuxT/84tFrvy6/CaBAishd0xHNJtE0fho0CNAE61
uzdZA1gE9GJWQylCpTtqaPWNULFfzy5iCN8GcYqmfXO1wJ43XVKqH5b/lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk2SMTXq+Lyys0JAbhxb4k7kVfBMB8GA1UdIwQY
MBaAFGF/b24VCmBDyyCTsI3dOipKuXo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82Yzk5MDItY2Q0NS00NDA0LTg1MTMt
NzFjM2Q2YWEyODk5LzEvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82Yzk5MDItY2Q0NS00NDA0LTg1MTMtNzFjM2Q2YWEyODk5
LzEvWVg5dmJoVUtZRVBMSUpPd2pkMDZLa3E1ZWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFtc7+60
Utz5KE7DpxqGRB16S9tRABmaWnBvY5FGG9znrOor/Ym0TnEkbq8yr8ZkGPHhbDYJ
/8W9G93r6L6cEi299VFgy/VzW4XwHqsHuJBBISDSntEdISxu0MmO0lKxqFhfDEPq
EW58K+eRzFwtLhWybR7Di9E17bgVDslDeWlvK5H/EFvNZthcsqHntgJ7K+/Ol+o7
uSChDk9R2ksIF6b0dvBK9814QQHzfZbfTLHDfFYS8DFOBL96x+YwVpyqDiEgDObG
IqDbjm6lkq7UTSDkwAcckkUQQ8s+CohBriogNL4eAa8AtdRQHuJ337UXTSjqUgnC
pvOgH9PCVB6xWQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:28 2025 by rpki-client