Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: 2BQ2IXDDqrqolTJgD78hAAMWVWOopnO1+F7CX81L11s=
Subject key identifier: 0B:31:76:2A:C4:E4:24:9F:AA:29:54:05:0F:2F:D9:18:72:08:67:5A
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 019A0222F0CC3CC3929F2D3AB2641C64E26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 12B8
Signing time: Mon 20 Oct 2025 15:00:35 +0000
Manifest this update: Mon 20 Oct 2025 15:00:35 +0000
Manifest next update: Tue 21 Oct 2025 15:00:35 +0000
Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: GF2++KXxxCYRaM9kp3Zw+wd0iRR2R3oWmDHwsTT37cs=)
5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:f0:cc:3c:c3:92:9f:2d:3a:b2:64:1c:64:e2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Oct 20 15:00:35 2025 GMT
Not After : Oct 21 15:00:35 2025 GMT
Subject: CN=0b31762ac4e4249faa2954050f2fd9187208675a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e9:c5:21:e8:12:12:62:5a:9d:2a:cc:b1:ae:
0e:bc:ac:a3:fd:43:5b:65:14:19:3f:29:8a:52:ee:
88:8e:0b:55:97:93:6e:d8:6c:14:71:5e:20:de:c6:
de:33:c3:14:47:a7:60:8c:65:c7:e8:cd:ee:b5:f0:
29:87:14:be:74:2d:8b:ee:c7:52:8f:14:ca:34:7b:
96:d7:fb:3e:a5:77:f6:89:c3:75:16:d7:f4:c4:7c:
c4:81:45:e0:0f:0c:78:69:e0:8e:90:95:d8:76:17:
44:44:fd:95:3c:f2:90:d5:8a:99:26:7b:ab:88:7c:
a4:dd:91:33:3f:06:dc:bc:fe:9e:09:43:05:bb:a0:
59:8f:6f:22:74:a2:e4:82:57:2e:ca:9f:50:6e:f3:
39:9f:27:c6:65:09:01:88:98:6a:d0:b7:ca:bf:50:
70:e2:ae:11:05:8d:9f:ab:33:7c:97:fa:e3:b3:5b:
52:1c:fb:68:c6:17:69:50:43:5c:1a:e0:9d:08:c7:
f8:0a:33:86:30:fe:60:85:29:77:c0:4d:b4:ce:d6:
2b:0e:8e:86:cc:07:77:e7:5e:71:ab:bd:ab:0e:75:
b7:d6:d3:1a:e2:9b:d1:1e:c4:55:09:a2:f0:24:76:
78:da:8f:da:fc:dc:22:3a:89:06:98:3f:f6:06:ec:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:76:2A:C4:E4:24:9F:AA:29:54:05:0F:2F:D9:18:72:08:67:5A
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6d:33:cf:49:4d:b4:27:c9:d8:d0:29:5d:e2:c9:ac:53:c8:
7f:65:32:fd:e9:3b:f7:21:c6:c5:86:1a:96:50:40:67:6d:29:
bf:d4:23:ed:14:d3:4d:c5:7c:f9:29:5c:35:2c:26:87:ee:af:
5b:40:95:0c:a0:92:da:48:d8:5b:32:e4:ab:c5:11:f2:ff:96:
3e:e2:02:6d:bc:cb:23:9e:bb:4b:3d:4d:5a:4c:d8:e9:a9:43:
ce:02:1c:14:e1:b8:6e:81:64:14:cf:26:70:be:0c:d9:e3:c1:
97:84:89:82:6e:07:03:92:a2:10:2c:4e:5c:a1:d8:7c:c6:2c:
2c:73:2a:29:bb:d4:9e:b4:8b:55:c5:13:fc:95:86:80:9b:90:
98:bf:c5:69:51:9f:58:df:99:e4:a4:c7:94:c8:27:28:ef:c2:
2f:fc:ea:07:61:16:c7:18:a5:bb:3b:f3:f5:b5:4c:87:09:dc:
88:60:3a:c3:fa:15:54:51:50:b3:2a:b8:fe:61:ac:da:c7:9d:
14:8c:23:70:5d:0b:f3:b1:73:64:09:c2:b2:d4:fd:e8:80:db:
0e:cc:d5:95:8b:88:50:12:f8:96:8f:22:7e:30:ac:ad:98:ea:
b6:87:9d:f8:8b:1b:48:8b:31:36:a9:aa:5e:df:ed:de:8f:c5:
33:be:1c:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCIvDMPMOSny06smQcZOJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWJkNGY3YWMzZDI0OTIwZGUxYzFmZjExODVkOTUwN2U5
YWQwNzgwHhcNMjUxMDIwMTUwMDM1WhcNMjUxMDIxMTUwMDM1WjAzMTEwLwYDVQQD
EygwYjMxNzYyYWM0ZTQyNDlmYWEyOTU0MDUwZjJmZDkxODcyMDg2NzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OnFIegSEmJanSrMsa4OvKyj/UNb
ZRQZPymKUu6IjgtVl5Nu2GwUcV4g3sbeM8MUR6dgjGXH6M3utfAphxS+dC2L7sdS
jxTKNHuW1/s+pXf2icN1Ftf0xHzEgUXgDwx4aeCOkJXYdhdERP2VPPKQ1YqZJnur
iHyk3ZEzPwbcvP6eCUMFu6BZj28idKLkglcuyp9QbvM5nyfGZQkBiJhq0LfKv1Bw
4q4RBY2fqzN8l/rjs1tSHPtoxhdpUENcGuCdCMf4CjOGMP5ghSl3wE20ztYrDo6G
zAd3515xq72rDnW31tMa4pvRHsRVCaLwJHZ42o/a/NwiOokGmD/2Buwu7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsxdirE5CSfqilUBQ8v2RhyCGdaMB8GA1UdIwQY
MBaAFGDr1PesPSSSDeHB/xGF2VB+mtB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgt
ODdkM2IwMjNkOTE5LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgtODdkM2IwMjNkOTE5
LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG0zz0lN
tCfJ2NApXeLJrFPIf2Uy/ek79yHGxYYallBAZ20pv9Qj7RTTTcV8+SlcNSwmh+6v
W0CVDKCS2kjYWzLkq8UR8v+WPuICbbzLI567Sz1NWkzY6alDzgIcFOG4boFkFM8m
cL4M2ePBl4SJgm4HA5KiECxOXKHYfMYsLHMqKbvUnrSLVcUT/JWGgJuQmL/FaVGf
WN+Z5KTHlMgnKO/CL/zqB2EWxxiluzvz9bVMhwnciGA6w/oVVFFQsyq4/mGs2sed
FIwjcF0L87FzZAnCstT96IDbDszVlYuIUBL4lo8ifjCsrZjqtoed+IsbSIsxNqmq
Xt/t3o/FM74cGA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:08 2025 by rpki-client