
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier: 4nyYB68QgAZ3afSwXb9vYm2JnGdkq/fZ2VvKlp5LoZY=
Subject key identifier: CD:33:66:82:77:68:2A:15:77:52:C4:E8:0E:F2:52:1C:1E:42:68:B6
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial: 0199FDD8D663AF9D311B3FD257A14F14EBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number: 0B23
Signing time: Sun 19 Oct 2025 19:01:10 +0000
Manifest this update: Sun 19 Oct 2025 19:01:10 +0000
Manifest next update: Mon 20 Oct 2025 19:01:10 +0000
Files and hashes: 1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: W9epnqCYhBcMM051vJtQKwDgLGFVOQn+UvWfBFwvVeA=)
3: flT0rlNauOXStzroCqDwedgvmO8.roa (hash: 8zjBPUweiTtjRooUddXczYMKyn0J34pB87VyPU3GTV8=)
4: x6wZ_QvBNBllirp0YF_4hULUz6g.roa (hash: LS8yqHK0GgRmzQoHTgjOfkAaUaGvQPYikmxDxfWx8H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d6:63:af:9d:31:1b:3f:d2:57:a1:4f:14:eb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Validity
Not Before: Oct 19 19:01:10 2025 GMT
Not After : Oct 20 19:01:10 2025 GMT
Subject: CN=cd33668277682a157752c4e80ef2521c1e4268b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:7d:ad:79:6f:c8:ed:59:87:de:8d:86:fe:
41:a7:b5:41:1d:fb:2a:91:8b:d8:cd:73:17:18:2e:
bf:05:ea:a3:49:ea:83:78:86:3d:44:aa:48:db:1b:
ba:5c:91:90:66:0e:91:ab:a8:b4:37:6a:e1:14:bc:
2c:29:8a:34:7f:63:69:b4:f6:10:75:38:fe:ac:37:
33:9e:e0:46:ce:6d:b1:ed:1c:4f:20:6d:2c:b8:77:
6a:8b:14:33:45:b8:d6:3b:b4:39:0c:14:78:63:6e:
82:d0:c2:50:a1:d3:ef:d4:8a:23:04:12:dd:4a:57:
36:bf:c8:b0:f9:fb:9d:ad:2f:4b:eb:3a:2f:c8:a4:
73:1e:37:d7:c1:db:f8:69:b4:6f:8f:18:d3:22:31:
85:19:d4:7b:94:0f:c9:77:13:92:b3:65:78:2b:bb:
99:fa:66:ec:53:86:ed:28:31:3b:80:71:8e:5a:35:
a4:2c:df:ba:d6:5c:eb:e6:b8:80:b6:00:27:99:16:
7f:a1:02:c8:f6:ba:aa:6a:9d:d6:7f:69:35:ec:3b:
f6:4f:e6:f8:79:0b:b8:53:3d:6e:73:e7:d8:92:50:
59:15:8d:97:6e:1b:b3:38:66:5f:7b:0a:bf:4f:9f:
76:05:3c:06:6f:7d:9e:01:c9:b4:0e:0a:27:00:69:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:33:66:82:77:68:2A:15:77:52:C4:E8:0E:F2:52:1C:1E:42:68:B6
X509v3 Authority Key Identifier:
keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:65:53:57:73:09:94:a6:22:ca:f2:b7:bb:68:5a:24:5b:d7:
e7:d1:59:ae:23:42:95:70:d8:60:e1:07:ac:0a:91:5f:42:9e:
40:77:46:a2:7b:c4:2b:4a:1d:00:a4:a0:f1:0a:3a:67:7c:c7:
51:e3:5d:21:57:2c:0a:b1:47:e8:2c:89:a8:42:fb:71:50:44:
08:3f:d7:9c:f3:9e:e3:eb:a1:5a:61:66:42:e4:7b:ef:dd:97:
21:fb:58:e7:da:76:1e:39:06:42:36:8a:c9:78:7d:c5:a9:d3:
79:b7:0e:4e:41:e4:47:d0:4f:9b:e6:b5:61:4b:be:bb:46:73:
db:42:da:70:99:ef:7c:c4:2c:2b:58:81:02:40:83:ce:22:dd:
2d:44:b4:5c:04:39:2b:0e:4a:0a:b0:a7:93:5d:79:29:db:62:
12:c2:88:be:12:4a:0c:64:8c:a7:d3:75:20:0a:d4:a5:13:c6:
5f:93:11:22:78:df:bd:a7:eb:a4:5b:69:a9:d3:a6:62:af:d3:
95:65:78:8f:07:ed:da:2c:25:5e:8b:58:0f:6e:95:8e:b4:b5:
0a:63:d0:d0:c0:5d:57:41:c0:f9:d4:b9:e3:5b:fe:2d:10:80:
a8:67:db:24:2f:63:f5:90:15:04:2b:d9:9b:5c:bf:35:9f:20:
8f:f3:e9:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92NZjr50xGz/SV6FPFOviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4
YzNiZjEwHhcNMjUxMDE5MTkwMTEwWhcNMjUxMDIwMTkwMTEwWjAzMTEwLwYDVQQD
EyhjZDMzNjY4Mjc3NjgyYTE1Nzc1MmM0ZTgwZWYyNTIxYzFlNDI2OGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLl9rXlvyO1Zh96Nhv5Bp7VBHfsq
kYvYzXMXGC6/BeqjSeqDeIY9RKpI2xu6XJGQZg6Rq6i0N2rhFLwsKYo0f2NptPYQ
dTj+rDcznuBGzm2x7RxPIG0suHdqixQzRbjWO7Q5DBR4Y26C0MJQodPv1IojBBLd
Slc2v8iw+fudrS9L6zovyKRzHjfXwdv4abRvjxjTIjGFGdR7lA/JdxOSs2V4K7uZ
+mbsU4btKDE7gHGOWjWkLN+61lzr5riAtgAnmRZ/oQLI9rqqap3Wf2k17Dv2T+b4
eQu4Uz1uc+fYklBZFY2XbhuzOGZfewq/T592BTwGb32eAcm0DgonAGlZWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0zZoJ3aCoVd1LE6A7yUhweQmi2MB8GA1UdIwQY
MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt
NDIxOGIyYjY5NjNhLzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh
LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGVTV3MJ
lKYiyvK3u2haJFvX59FZriNClXDYYOEHrAqRX0KeQHdGonvEK0odAKSg8Qo6Z3zH
UeNdIVcsCrFH6CyJqEL7cVBECD/XnPOe4+uhWmFmQuR7792XIftY59p2HjkGQjaK
yXh9xanTebcOTkHkR9BPm+a1YUu+u0Zz20LacJnvfMQsK1iBAkCDziLdLUS0XAQ5
Kw5KCrCnk115KdtiEsKIvhJKDGSMp9N1IArUpRPGX5MRInjfvafrpFtpqdOmYq/T
lWV4jwft2iwlXotYD26VjrS1CmPQ0MBdV0HA+dS541v+LRCAqGfbJC9j9ZAVBCvZ
m1y/NZ8gj/Ppwg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:09 2025 by rpki-client