Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier: R/DNcEkSWILDRiaBVT691jsKYWSeeU62IuKGoXlwB2c=
Subject key identifier: 4C:37:3C:1E:48:6A:CA:C6:DB:C4:90:0D:80:7B:FE:83:75:FF:97:C4
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial: 0199FFC7B09CBB89AA80D1718028C6BCBF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number: 0B24
Signing time: Mon 20 Oct 2025 04:01:40 +0000
Manifest this update: Mon 20 Oct 2025 04:01:40 +0000
Manifest next update: Tue 21 Oct 2025 04:01:40 +0000
Files and hashes: 1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: M0HGWFZeeoo7IbqXK2jYkohGR2A/4cJYTzIku0nQsMQ=)
3: flT0rlNauOXStzroCqDwedgvmO8.roa (hash: 8zjBPUweiTtjRooUddXczYMKyn0J34pB87VyPU3GTV8=)
4: x6wZ_QvBNBllirp0YF_4hULUz6g.roa (hash: LS8yqHK0GgRmzQoHTgjOfkAaUaGvQPYikmxDxfWx8H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:b0:9c:bb:89:aa:80:d1:71:80:28:c6:bc:bf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Validity
Not Before: Oct 20 04:01:40 2025 GMT
Not After : Oct 21 04:01:40 2025 GMT
Subject: CN=4c373c1e486acac6dbc4900d807bfe8375ff97c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:e5:fc:7c:41:66:09:1f:58:93:8d:b1:d6:
db:8e:1d:cd:d8:52:e2:a5:1e:1f:ac:d9:66:93:92:
d8:0f:c8:ed:87:23:60:3b:16:46:79:c9:4d:a8:d1:
0f:a9:87:ef:d8:40:bd:b1:e2:d1:97:73:57:74:05:
ff:69:56:0a:0e:b0:04:db:61:39:a1:56:56:e7:70:
59:c1:dd:9b:ba:a0:b5:31:44:56:56:cd:01:20:9c:
21:45:2d:6a:35:97:4c:51:2c:23:86:50:68:8a:d1:
b8:0e:ff:53:8a:09:79:0a:26:66:24:9b:a7:ec:e6:
e8:0e:0a:68:0a:d7:2c:d7:1a:6d:27:c0:0e:12:ff:
11:06:e2:42:23:bf:2b:f6:53:ae:e9:14:e9:76:41:
37:dc:17:ab:68:76:88:e5:3e:a3:8d:9b:1e:d0:b1:
78:6c:59:23:4f:75:c2:3e:d2:c3:8f:42:86:68:dc:
38:5f:31:63:69:0f:c4:64:18:44:3e:a2:06:fd:bb:
b7:a3:67:8b:6a:24:f0:b2:0b:a5:ce:c8:be:be:5f:
d0:3d:02:10:65:95:b2:9f:c7:89:a3:8c:6f:cf:a0:
29:74:0f:d9:9d:e7:ad:18:f2:c8:7e:d0:98:2d:42:
47:f4:94:44:4b:73:90:10:08:9f:aa:3a:7c:5e:5b:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:3C:1E:48:6A:CA:C6:DB:C4:90:0D:80:7B:FE:83:75:FF:97:C4
X509v3 Authority Key Identifier:
keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a6:f4:a4:c2:73:58:34:2a:cd:50:60:52:15:bc:fc:7a:1f:
2f:1d:d0:0e:46:cb:41:8d:cf:f1:03:41:26:6b:c0:48:68:a9:
92:f3:f6:ba:5a:1f:0f:45:20:ef:f6:91:0a:1b:aa:18:c6:14:
74:47:1f:b0:ba:cd:82:06:7e:66:55:38:ea:be:4d:8d:39:11:
9f:c3:42:bc:c3:a2:6a:c9:72:c0:8c:d5:6f:9e:92:03:06:cd:
47:07:48:35:50:66:53:3e:19:7a:c6:c6:a8:cf:84:7e:3e:66:
61:25:79:ac:54:4e:61:a3:77:d5:44:95:6a:04:50:8b:a2:b3:
0b:b9:21:e5:02:eb:c8:9d:5a:a0:9b:b8:c2:cb:04:4e:4a:c2:
35:ed:f9:4d:3b:2c:e8:f2:8d:a6:bd:12:35:06:39:3d:d9:a4:
df:90:49:48:29:c9:6f:72:e1:a6:d3:61:5b:be:ef:e1:c4:79:
1d:32:10:7d:bd:31:70:76:3d:e3:91:1d:8e:48:f5:17:c6:ea:
1a:8e:00:ac:ed:5e:eb:c9:8d:69:4b:18:7f:d8:ed:48:76:0b:
b2:19:c9:64:be:3b:ed:8e:dd:b8:64:2d:8c:c5:ab:b3:10:60:
4d:c7:ea:9b:fc:1a:fb:98:e1:ef:5c:4a:a8:5f:4f:07:7e:a1:
b3:9d:21:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x7Ccu4mqgNFxgCjGvL9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4
YzNiZjEwHhcNMjUxMDIwMDQwMTQwWhcNMjUxMDIxMDQwMTQwWjAzMTEwLwYDVQQD
Eyg0YzM3M2MxZTQ4NmFjYWM2ZGJjNDkwMGQ4MDdiZmU4Mzc1ZmY5N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r3l/HxBZgkfWJONsdbbjh3N2FLi
pR4frNlmk5LYD8jthyNgOxZGeclNqNEPqYfv2EC9seLRl3NXdAX/aVYKDrAE22E5
oVZW53BZwd2buqC1MURWVs0BIJwhRS1qNZdMUSwjhlBoitG4Dv9Tigl5CiZmJJun
7OboDgpoCtcs1xptJ8AOEv8RBuJCI78r9lOu6RTpdkE33BeraHaI5T6jjZse0LF4
bFkjT3XCPtLDj0KGaNw4XzFjaQ/EZBhEPqIG/bu3o2eLaiTwsgulzsi+vl/QPQIQ
ZZWyn8eJo4xvz6ApdA/ZneetGPLIftCYLUJH9JRES3OQEAifqjp8Xlu4CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEw3PB5IasrG28SQDYB7/oN1/5fEMB8GA1UdIwQY
MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt
NDIxOGIyYjY5NjNhLzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh
LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKb0pMJz
WDQqzVBgUhW8/HofLx3QDkbLQY3P8QNBJmvASGipkvP2ulofD0Ug7/aRChuqGMYU
dEcfsLrNggZ+ZlU46r5NjTkRn8NCvMOiaslywIzVb56SAwbNRwdINVBmUz4ZesbG
qM+Efj5mYSV5rFROYaN31USVagRQi6KzC7kh5QLryJ1aoJu4wssETkrCNe35TTss
6PKNpr0SNQY5Pdmk35BJSCnJb3LhptNhW77v4cR5HTIQfb0xcHY945Edjkj1F8bq
Go4ArO1e68mNaUsYf9jtSHYLshnJZL477Y7duGQtjMWrsxBgTcfqm/wa+5jh71xK
qF9PB36hs50hUA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:26 2025 by rpki-client