Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: gqRgMD3HHvpWw93EGMxMPjWg9eP9Pd0N2fmen5afUkc=
Subject key identifier: BC:60:88:8C:86:00:F7:A9:EB:8B:4D:65:47:47:83:72:62:AC:91:CF
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 0199FD33F6195902D649DA43025AFBA4600C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 0AD0
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: vlrpJQBhLUhvyl3Avm/Av09CQuvyw7NcmhXPK/iL/ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f6:19:59:02:d6:49:da:43:02:5a:fb:a4:60:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=bc60888c8600f7a9eb8b4d654747837262ac91cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:58:e7:40:e0:9b:33:30:48:1b:e1:62:8c:
7a:b6:5f:f8:b5:ca:33:82:e7:09:3a:2e:68:41:8d:
5b:35:90:0e:4b:24:d3:bf:12:81:bf:b3:19:fd:31:
f9:35:84:4a:46:7a:f1:fb:6f:65:0f:c9:cb:fe:66:
15:bb:ac:ee:7e:b1:e2:35:12:39:cb:da:19:47:0e:
aa:93:ec:c7:0f:8d:70:bf:bd:b6:62:c3:64:6c:b0:
11:bd:06:37:4d:1a:c2:5d:62:1b:1c:ba:07:a0:74:
5c:0f:9c:83:64:13:40:74:3e:31:73:3c:0d:59:fc:
c2:c3:26:6c:30:77:a3:91:27:10:d1:63:e0:ec:c2:
2c:6b:89:a5:7b:7f:f6:af:8b:4c:15:27:5b:47:d1:
0f:ac:42:0d:65:7a:63:09:ac:82:4d:ed:f1:aa:c2:
b6:30:aa:4b:be:8f:06:10:3d:da:42:5b:8a:40:7c:
dc:19:8f:a8:db:2f:74:d9:b7:fb:90:10:bd:47:4b:
e5:c7:47:60:eb:54:7e:a2:94:f6:d5:c0:55:e4:b7:
26:4c:61:11:11:b6:1c:f9:22:34:7b:d1:89:a8:0f:
31:f7:56:24:bf:c5:13:bc:35:1f:fe:ce:b9:51:92:
f4:cf:d6:ca:89:30:1b:e7:3a:8f:e3:d3:d2:fd:46:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:60:88:8C:86:00:F7:A9:EB:8B:4D:65:47:47:83:72:62:AC:91:CF
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2d:dd:06:57:72:00:5c:02:06:a7:30:69:f2:34:a1:fa:86:
eb:87:f4:7e:fb:71:4d:6e:05:a2:39:62:75:28:24:86:e4:4c:
40:aa:4d:a7:6c:e4:0e:57:d4:4b:f1:a8:78:ea:81:5c:73:0c:
25:95:d8:de:1f:f1:84:ae:da:85:37:35:f0:d3:db:47:b4:af:
45:05:94:dc:5d:cc:f9:6a:0a:91:f2:ce:87:8e:80:63:8b:96:
77:18:f6:b1:d7:9d:da:d8:01:8a:ab:92:e1:15:12:d6:0a:b1:
2f:4d:f7:ee:b5:ed:db:1d:4f:80:ee:ae:6c:b9:13:d6:84:b1:
d2:5a:07:dc:3a:aa:5b:d4:a1:2f:e2:4d:b6:9b:ee:a3:f9:70:
5f:1a:3d:d6:11:06:97:f3:88:30:be:e7:f5:70:b2:af:93:7d:
58:63:06:ff:0e:5e:d6:49:1c:85:84:3b:d8:ef:d3:0d:35:f5:
87:97:96:ac:44:f0:df:4f:22:3a:03:00:89:4f:15:f3:cf:19:
70:39:f3:c5:d2:9d:c2:57:23:7c:9c:61:a7:13:a4:31:e1:d3:
ac:80:38:37:69:d3:07:66:cb:fc:a0:21:16:ec:1e:cc:73:29:
c4:4e:77:b9:bf:67:c9:35:dc:71:b8:82:dd:39:f2:0a:2f:a5:
75:ab:57:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/YZWQLWSdpDAlr7pGAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzgyODE1YjI1MTYxMzY1YTkxNjEwY2JkYWQ3MWY2NjI4
NmY3ODEwHhcNMjUxMDE5MTYwMTA0WhcNMjUxMDIwMTYwMTA0WjAzMTEwLwYDVQQD
EyhiYzYwODg4Yzg2MDBmN2E5ZWI4YjRkNjU0NzQ3ODM3MjYyYWM5MWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ9Y50DgmzMwSBvhYox6tl/4tcoz
gucJOi5oQY1bNZAOSyTTvxKBv7MZ/TH5NYRKRnrx+29lD8nL/mYVu6zufrHiNRI5
y9oZRw6qk+zHD41wv722YsNkbLARvQY3TRrCXWIbHLoHoHRcD5yDZBNAdD4xczwN
WfzCwyZsMHejkScQ0WPg7MIsa4mle3/2r4tMFSdbR9EPrEINZXpjCayCTe3xqsK2
MKpLvo8GED3aQluKQHzcGY+o2y902bf7kBC9R0vlx0dg61R+opT21cBV5LcmTGER
EbYc+SI0e9GJqA8x91Ykv8UTvDUf/s65UZL0z9bKiTAb5zqP49PS/Ubu3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxgiIyGAPep64tNZUdHg3JirJHPMB8GA1UdIwQY
MBaAFMs4KBWyUWE2WpFhDL2tcfZihveBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYt
NDE0MjM4YzViYmMyLzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYtNDE0MjM4YzViYmMy
LzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAey3dBldy
AFwCBqcwafI0ofqG64f0fvtxTW4FojlidSgkhuRMQKpNp2zkDlfUS/GoeOqBXHMM
JZXY3h/xhK7ahTc18NPbR7SvRQWU3F3M+WoKkfLOh46AY4uWdxj2sded2tgBiquS
4RUS1gqxL0337rXt2x1PgO6ubLkT1oSx0loH3DqqW9ShL+JNtpvuo/lwXxo91hEG
l/OIML7n9XCyr5N9WGMG/w5e1kkchYQ72O/TDTX1h5eWrETw308iOgMAiU8V888Z
cDnzxdKdwlcjfJxhpxOkMeHTrIA4N2nTB2bL/KAhFuwezHMpxE53ub9nyTXccbiC
3TnyCi+ldatXcQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:28 2025 by rpki-client