Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier: Jh/9+cTKJ+F01i13NAz64vVOklhGY2Wp7Tl2SSxJ4uc=
Subject key identifier: 7B:19:0C:12:BC:4A:8A:50:8D:3A:DC:B1:A9:73:8D:DA:47:D9:22:F1
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial: 0199FB0F31C10EA7778688237FE94FA06562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number: 010C
Signing time: Sun 19 Oct 2025 06:01:40 +0000
Manifest this update: Sun 19 Oct 2025 06:01:40 +0000
Manifest next update: Mon 20 Oct 2025 06:01:40 +0000
Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: wHN8auAjhVWyOJ51IOZsiG11/rkREgEh8eRZrhgLqyY=)
2: yJ1HWDzaQf8_v_QIkEVeJhHUsNs.roa (hash: uRF7ZuSGISVIOWjvLjFgvjfyhiciNwgKOFC9/lRcs/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:31:c1:0e:a7:77:86:88:23:7f:e9:4f:a0:65:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Validity
Not Before: Oct 19 06:01:40 2025 GMT
Not After : Oct 20 06:01:40 2025 GMT
Subject: CN=7b190c12bc4a8a508d3adcb1a9738dda47d922f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:c4:65:d6:c1:98:8b:79:d9:7c:93:69:5c:
a8:76:17:60:92:4c:e4:81:18:44:a5:ec:b4:cc:44:
b0:20:f1:37:af:14:e6:7a:3a:61:57:aa:ca:c4:0d:
80:63:70:f8:e9:72:2f:a0:d5:f7:14:62:c4:1b:fe:
4b:62:4d:d6:68:35:32:8c:88:bd:bf:c8:9d:ab:5e:
a9:da:ff:b0:94:38:5b:13:91:9a:80:7b:c2:12:6b:
51:1e:60:1b:51:98:84:ad:1c:5c:f3:60:12:70:98:
e9:d6:10:af:a4:42:b5:52:89:85:58:6c:8d:d9:20:
ce:48:8e:fa:a2:32:02:e3:84:a8:3e:2b:12:87:7c:
ab:f6:a8:79:e5:f3:73:cd:bd:e1:22:4b:6f:74:b3:
b7:9d:05:3d:f3:ad:67:e6:e5:b7:cf:5b:0d:13:a0:
a8:3e:0d:9e:1c:05:e8:98:50:1e:87:69:f0:3e:ff:
0a:12:1f:cc:23:ea:70:3d:3a:f4:5d:31:a6:9a:91:
73:fe:25:82:16:79:88:4a:cf:24:f2:58:ce:fd:b8:
b2:36:41:16:d6:15:b5:59:b1:a0:b6:50:d2:18:d2:
ba:ab:b6:62:a7:83:03:5c:5b:61:a7:eb:e2:55:56:
32:55:02:54:09:69:ea:52:53:23:ba:53:19:1b:41:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:19:0C:12:BC:4A:8A:50:8D:3A:DC:B1:A9:73:8D:DA:47:D9:22:F1
X509v3 Authority Key Identifier:
keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:57:e6:63:17:6c:1b:43:40:44:6c:fc:13:77:41:07:94:c7:
d3:91:01:89:86:64:6b:1f:9d:ec:3e:a4:15:a5:49:c6:06:08:
c3:fe:45:f3:ad:c1:0f:97:b5:fc:60:2f:02:12:a5:ef:45:04:
0c:03:4f:a3:ae:02:a5:2d:7e:7a:f8:55:1a:2f:88:7a:25:74:
70:31:26:ff:fb:78:45:3a:70:f7:0e:c8:9f:ca:89:7a:8c:a0:
ea:20:0c:4c:0c:82:5a:c7:1d:65:e7:ff:fb:d2:56:0e:a6:83:
50:c2:26:9e:fb:20:4b:50:d5:12:d8:cd:ef:6b:c3:99:cf:f5:
ec:c5:22:98:92:5d:d1:52:e1:10:05:9e:e8:30:7d:26:28:2c:
9b:83:05:fb:43:63:b9:70:bd:44:1b:72:a8:0e:37:43:40:54:
bf:37:7a:c2:c6:2f:69:e2:07:3b:66:39:b0:b0:f7:df:13:02:
1a:ed:c3:f5:2e:c2:d3:c2:8d:93:57:1c:35:3a:33:2f:5f:2c:
c9:d5:cb:1a:ef:c5:ab:4e:be:62:b0:3d:a4:3b:fc:05:3c:b5:
22:07:b3:2a:5b:d3:3e:9a:fd:7a:63:c1:c3:bf:59:6a:55:9c:
0a:c6:61:b5:c6:1c:0d:dd:58:03:e4:99:6a:f8:98:9b:7c:25:
8c:06:41:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DzHBDqd3hogjf+lPoGViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzhjYjYwZjM1N2Q2MWNiOThiNGM3Y2E5MTVhMTI4MThl
ZjJjNzcwHhcNMjUxMDE5MDYwMTQwWhcNMjUxMDIwMDYwMTQwWjAzMTEwLwYDVQQD
Eyg3YjE5MGMxMmJjNGE4YTUwOGQzYWRjYjFhOTczOGRkYTQ3ZDkyMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5rEZdbBmIt52XyTaVyodhdgkkzk
gRhEpey0zESwIPE3rxTmejphV6rKxA2AY3D46XIvoNX3FGLEG/5LYk3WaDUyjIi9
v8idq16p2v+wlDhbE5GagHvCEmtRHmAbUZiErRxc82AScJjp1hCvpEK1UomFWGyN
2SDOSI76ojIC44SoPisSh3yr9qh55fNzzb3hIktvdLO3nQU9861n5uW3z1sNE6Co
Pg2eHAXomFAeh2nwPv8KEh/MI+pwPTr0XTGmmpFz/iWCFnmISs8k8ljO/biyNkEW
1hW1WbGgtlDSGNK6q7Zip4MDXFthp+viVVYyVQJUCWnqUlMjulMZG0ERTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsZDBK8SopQjTrcsalzjdpH2SLxMB8GA1UdIwQY
MBaAFGJ4y2DzV9YcuYtMfKkVoSgY7yx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTIt
MjQxZTg0YzlhNWQ5LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTItMjQxZTg0YzlhNWQ5
LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVfmYxds
G0NARGz8E3dBB5TH05EBiYZkax+d7D6kFaVJxgYIw/5F863BD5e1/GAvAhKl70UE
DANPo64CpS1+evhVGi+IeiV0cDEm//t4RTpw9w7In8qJeoyg6iAMTAyCWscdZef/
+9JWDqaDUMImnvsgS1DVEtjN72vDmc/17MUimJJd0VLhEAWe6DB9Jigsm4MF+0Nj
uXC9RBtyqA43Q0BUvzd6wsYvaeIHO2Y5sLD33xMCGu3D9S7C08KNk1ccNTozL18s
ydXLGu/Fq06+YrA9pDv8BTy1IgezKlvTPpr9emPBw79ZalWcCsZhtcYcDd1YA+SZ
aviYm3wljAZBeA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:43 2025 by rpki-client