Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
File: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json)
Hash identifier: 7Orx+FtKK38pKARacehuhzJV82uVMlSbfX1MGJLmO+M=
Subject key identifier: D2:EE:40:4A:CF:CF:48:23:C4:DB:60:82:63:B7:C5:C8:D4:28:91:98
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 0199FFC8590AAA654F04549C5A0F0164305D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
Manifest number: 1702
Signing time: Mon 20 Oct 2025 04:02:23 +0000
Manifest this update: Mon 20 Oct 2025 04:02:23 +0000
Manifest next update: Tue 21 Oct 2025 04:02:23 +0000
Files and hashes: 1: 3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa (hash: REslMcuG9HXm7BovLzYOAaMUk36BGxFiDYcZuAUfor8=)
2: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: GtZ86CLCJyo1/EXqyl6UcdSSCROshZ7xs9PnbtPdkuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:59:0a:aa:65:4f:04:54:9c:5a:0f:01:64:30:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Oct 20 04:02:23 2025 GMT
Not After : Oct 21 04:02:23 2025 GMT
Subject: CN=d2ee404acfcf4823c4db608263b7c5c8d4289198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:09:40:4c:75:2c:43:28:b7:7b:0b:b8:1c:
ad:62:61:6f:a7:df:1d:48:bd:01:e4:aa:f5:4e:a8:
11:87:13:6a:6b:2d:41:c1:29:fa:71:d1:47:26:d0:
a7:ae:ef:7f:c5:9c:9a:47:f8:8e:a2:2c:39:a5:0e:
76:98:1e:1e:88:78:ad:2a:b9:f0:1c:62:5b:5a:6b:
9c:31:3b:cb:04:8e:0e:4e:b2:1f:42:51:13:6a:66:
a7:3d:8b:2e:c0:72:87:2a:1b:bb:a7:e0:fd:98:3b:
61:5f:26:f3:79:16:b3:b1:ab:51:49:d5:0e:22:36:
60:49:a2:45:2b:c8:2b:5b:5d:dc:25:58:84:8c:19:
ac:0f:ea:49:31:2b:2f:36:b2:72:e8:3a:90:8b:2f:
19:52:74:3e:0c:3a:38:b4:b4:3c:0c:78:4a:2d:e8:
e2:8d:ea:3e:fd:19:54:85:00:cd:b1:7d:3a:31:83:
d9:38:a1:8f:b6:44:ab:03:c6:43:bf:a5:1c:de:f0:
55:6e:7f:a9:d7:02:4a:e4:98:c7:d5:02:53:94:b6:
f6:fd:e6:f7:25:55:6b:7c:ac:e5:2c:3f:31:3e:1c:
b5:8e:ac:0a:fc:a9:0f:0d:fc:4b:8b:8d:9a:49:fb:
b9:dc:54:ea:da:c2:f3:ef:dd:f1:28:fe:8d:02:2a:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:40:4A:CF:CF:48:23:C4:DB:60:82:63:B7:C5:C8:D4:28:91:98
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a6:63:68:b2:2d:58:99:7d:90:2b:d7:0f:11:5d:62:f3:22:
5f:fc:50:71:87:b1:20:5d:7b:eb:bf:60:83:1a:c3:6e:88:60:
36:b0:c0:8c:e6:fe:91:01:9c:0a:9d:7f:dc:37:8f:7f:ca:e7:
59:11:e8:13:a0:b3:d9:7d:23:6e:95:eb:c9:93:e3:1d:d4:0b:
6d:92:d4:1b:49:86:d4:d1:73:c2:64:f2:03:5e:b1:c8:d8:97:
d7:54:5c:e5:54:54:07:1c:3d:3b:8a:87:5f:c7:1d:ff:62:32:
78:f2:41:cd:1d:45:63:b3:d7:e6:4b:fc:9a:c2:59:2d:ba:06:
a0:fd:3c:1a:8a:af:bf:84:67:cf:fb:9a:02:8e:a9:cc:4b:45:
51:12:fe:35:ca:3b:db:d8:d3:5c:f5:c8:0b:1b:71:5e:67:ad:
10:6f:7d:86:91:6d:cf:b6:e3:f3:5f:cc:1a:ab:7e:29:f2:62:
0b:dd:33:a5:1b:fd:2e:ba:3a:c4:5f:72:1c:1a:58:ca:49:9e:
84:15:a9:06:b6:db:7f:dd:9f:8c:03:25:19:ec:f2:9c:85:d7:
41:cb:06:71:22:33:3b:8a:17:0c:09:c5:20:c1:c3:af:ba:1d:
ee:e9:27:60:03:91:6c:23:f8:7b:80:3a:d8:73:74:12:d8:bd:
37:9c:e3:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yFkKqmVPBFScWg8BZDBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjQzMThjMWFhYTdjYTA2MDMxNTVhODgzZDQzOTI2ZWY5
N2U4N2MwHhcNMjUxMDIwMDQwMjIzWhcNMjUxMDIxMDQwMjIzWjAzMTEwLwYDVQQD
EyhkMmVlNDA0YWNmY2Y0ODIzYzRkYjYwODI2M2I3YzVjOGQ0Mjg5MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDYJQEx1LEMot3sLuBytYmFvp98d
SL0B5Kr1TqgRhxNqay1BwSn6cdFHJtCnru9/xZyaR/iOoiw5pQ52mB4eiHitKrnw
HGJbWmucMTvLBI4OTrIfQlETamanPYsuwHKHKhu7p+D9mDthXybzeRazsatRSdUO
IjZgSaJFK8grW13cJViEjBmsD+pJMSsvNrJy6DqQiy8ZUnQ+DDo4tLQ8DHhKLeji
jeo+/RlUhQDNsX06MYPZOKGPtkSrA8ZDv6Uc3vBVbn+p1wJK5JjH1QJTlLb2/eb3
JVVrfKzlLD8xPhy1jqwK/KkPDfxLi42aSfu53FTq2sLz793xKP6NAiqSpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLuQErPz0gjxNtggmO3xcjUKJGYMB8GA1UdIwQY
MBaAFGJkMYwaqnygYDFVqIPUOSbvl+h8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mNmI2NDItODcyYi00YjdkLWJkNmEt
YjkxYTI3MDU1MjA0LzEvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9mNmI2NDItODcyYi00YjdkLWJkNmEtYjkxYTI3MDU1MjA0
LzEvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqZjaLIt
WJl9kCvXDxFdYvMiX/xQcYexIF17679ggxrDbohgNrDAjOb+kQGcCp1/3DePf8rn
WRHoE6Cz2X0jbpXryZPjHdQLbZLUG0mG1NFzwmTyA16xyNiX11Rc5VRUBxw9O4qH
X8cd/2IyePJBzR1FY7PX5kv8msJZLboGoP08Goqvv4Rnz/uaAo6pzEtFURL+Nco7
29jTXPXICxtxXmetEG99hpFtz7bj81/MGqt+KfJiC90zpRv9Lro6xF9yHBpYykme
hBWpBrbbf92fjAMlGezynIXXQcsGcSIzO4oXDAnFIMHDr7od7uknYAORbCP4e4A6
2HN0Eti9N5zjvQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:34 2025 by rpki-client