Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
File: YAJlJf1EpPx1siRPgNAiY09fdjU.mft (raw, json)
Hash identifier: occbLGOaFuwnTdVNOzXZkq0YMbstOMYHP3QE1eA9G8U=
Subject key identifier: 7D:BA:11:EF:60:79:05:D2:00:49:49:57:8D:B3:33:F7:F3:2B:D8:4A
Authority key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
Certificate issuer: /CN=60026525fd44a4fc75b2244f80d022634f5f7635
Certificate serial: 0199FEEBE7EE451DE9415E5B5D762B1B8DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
Manifest number: DB
Signing time: Mon 20 Oct 2025 00:01:37 +0000
Manifest this update: Mon 20 Oct 2025 00:01:37 +0000
Manifest next update: Tue 21 Oct 2025 00:01:37 +0000
Files and hashes: 1: YAJlJf1EpPx1siRPgNAiY09fdjU.crl (hash: GmtYbMkxsWjrruEdJ7tfT3wYrOro3NM0QAAA7RBJEb4=)
2: g9nWnsJ4s0Q4AdnedyFGxQkezGU.roa (hash: BaThYpCk19U9MWT3c8G8+GXTTA8NVbJPkga6Sb96+1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e7:ee:45:1d:e9:41:5e:5b:5d:76:2b:1b:8d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60026525fd44a4fc75b2244f80d022634f5f7635
Validity
Not Before: Oct 20 00:01:37 2025 GMT
Not After : Oct 21 00:01:37 2025 GMT
Subject: CN=7dba11ef607905d2004949578db333f7f32bd84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:e6:8b:9a:ee:55:c0:53:5b:6c:01:bc:33:
26:c0:0d:2d:27:12:71:cd:6f:6e:e4:a7:cd:c0:9d:
43:87:17:5b:cb:fd:1d:49:5c:c4:1e:6c:1c:90:8d:
92:3d:bb:f7:32:1a:1c:93:7a:6c:d9:1e:1d:75:9c:
ac:79:96:40:3c:50:5d:b4:2d:c7:0f:4c:85:b6:b1:
bb:d0:ad:87:b6:c0:77:0d:5a:54:39:0e:5d:d8:8f:
a3:99:7f:65:df:4a:3d:1a:3c:cd:02:0a:fd:c4:b6:
93:ba:97:51:a9:71:05:e4:22:30:1a:77:38:9f:95:
46:18:e4:67:86:93:46:25:8f:83:f1:c6:b7:81:e8:
ea:9d:de:99:84:4e:76:ab:b9:0a:bb:83:d1:80:c8:
00:6f:cc:86:a7:05:d6:0b:f2:25:7c:02:1d:87:02:
f9:69:58:b6:76:ae:18:db:d2:a6:30:83:aa:4b:60:
dc:8f:94:b0:37:e1:39:c8:4a:e4:46:24:bf:a6:69:
8c:f8:92:db:02:f0:6b:74:aa:d3:c7:54:89:74:9d:
c9:55:45:78:be:6e:9e:33:40:e6:e6:68:15:37:ae:
7b:64:72:31:b5:ed:e3:eb:c2:6b:ee:70:05:b3:ab:
86:7d:ff:88:f3:17:06:3d:3f:ec:af:9e:4f:97:e7:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:11:EF:60:79:05:D2:00:49:49:57:8D:B3:33:F7:F3:2B:D8:4A
X509v3 Authority Key Identifier:
keyid:60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cd:9a:60:df:d2:d5:98:f9:2e:8d:13:36:3f:1d:c9:e5:7b:
ee:64:69:43:ef:c7:22:ef:5c:82:fc:aa:ab:c8:b0:54:54:61:
f0:f0:85:5e:b0:b7:bb:4f:d2:21:2b:d6:c3:6f:f5:f4:b7:94:
2f:3b:ee:9c:50:35:ab:1b:1d:04:bd:ef:db:26:99:23:d2:94:
a5:0f:df:02:78:bb:21:4e:54:7d:25:7d:57:f7:c2:df:31:24:
d2:e8:81:4a:46:60:6a:be:02:11:d8:7a:6e:95:9e:e2:6c:77:
52:8b:c5:b1:07:4d:a6:b3:be:25:22:b5:56:45:f9:71:37:a1:
3b:4f:f3:a4:10:5b:73:a9:a0:f1:2d:09:22:05:78:4d:17:be:
e5:04:ec:a9:4a:8b:25:86:b9:0d:89:30:9e:5e:8d:c1:5e:77:
b4:75:8c:ca:32:59:c6:12:cf:ac:36:d9:d0:a4:1d:9d:df:92:
6d:47:4a:40:77:44:5f:47:85:6b:63:f5:9d:2d:b6:fa:d5:85:
68:24:84:44:4f:65:ad:bf:03:f7:36:a4:90:29:ab:0e:6f:51:
6a:78:41:59:46:47:ad:5f:bc:b6:55:73:3c:27:d2:15:18:9b:
1d:92:c5:0e:a2:a1:6e:83:98:e8:8e:94:52:1d:77:9b:e4:df:
3c:c0:07:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+6+fuRR3pQV5bXXYrG43aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDI2NTI1ZmQ0NGE0ZmM3NWIyMjQ0ZjgwZDAyMjYzNGY1
Zjc2MzUwHhcNMjUxMDIwMDAwMTM3WhcNMjUxMDIxMDAwMTM3WjAzMTEwLwYDVQQD
Eyg3ZGJhMTFlZjYwNzkwNWQyMDA0OTQ5NTc4ZGIzMzNmN2YzMmJkODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvObmi5ruVcBTW2wBvDMmwA0tJxJx
zW9u5KfNwJ1Dhxdby/0dSVzEHmwckI2SPbv3Mhock3ps2R4ddZyseZZAPFBdtC3H
D0yFtrG70K2HtsB3DVpUOQ5d2I+jmX9l30o9GjzNAgr9xLaTupdRqXEF5CIwGnc4
n5VGGORnhpNGJY+D8ca3gejqnd6ZhE52q7kKu4PRgMgAb8yGpwXWC/IlfAIdhwL5
aVi2dq4Y29KmMIOqS2Dcj5SwN+E5yErkRiS/pmmM+JLbAvBrdKrTx1SJdJ3JVUV4
vm6eM0Dm5mgVN657ZHIxte3j68Jr7nAFs6uGff+I8xcGPT/sr55Pl+dA1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH26Ee9geQXSAElJV42zM/fzK9hKMB8GA1UdIwQY
MBaAFGACZSX9RKT8dbIkT4DQImNPX3Y1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMt
ZmE5MjMzNTM1ZmYxLzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMtZmE5MjMzNTM1ZmYx
LzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl82aYN/S
1Zj5Lo0TNj8dyeV77mRpQ+/HIu9cgvyqq8iwVFRh8PCFXrC3u0/SISvWw2/19LeU
LzvunFA1qxsdBL3v2yaZI9KUpQ/fAni7IU5UfSV9V/fC3zEk0uiBSkZgar4CEdh6
bpWe4mx3UovFsQdNprO+JSK1VkX5cTehO0/zpBBbc6mg8S0JIgV4TRe+5QTsqUqL
JYa5DYkwnl6NwV53tHWMyjJZxhLPrDbZ0KQdnd+SbUdKQHdEX0eFa2P1nS22+tWF
aCSERE9lrb8D9zakkCmrDm9RanhBWUZHrV+8tlVzPCfSFRibHZLFDqKhboOY6I6U
Uh13m+TfPMAHBw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:07:37 2025 by rpki-client