Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File: YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier: GivON8n5SFwZy5pjCrLUr5In7BJ0T0wvNJ9liQGajXM=
Subject key identifier: 21:0C:28:66:68:9D:DF:8F:C2:8B:DA:93:7B:07:18:CF:51:29:F5:5D
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial: 0199FC2147A49191926A1661DA309CAB2D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: Waf4QvSb9TyM66KEjGAxA922FSB6r8icCmU5lQAApSQ=)
2: hkDzJJYa_8AXZWHuwxhkvXYeqBU.roa (hash: jBdI40IIexbS7hFgDYQGpUFEN6SpLEVlHNlns3J1TE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:47:a4:91:91:92:6a:16:61:da:30:9c:ab:2d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=210c2866689ddf8fc28bda937b0718cf5129f55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:b8:6f:1a:13:f3:03:76:a6:ae:d4:d3:14:
ce:54:94:5a:b3:e3:1f:af:33:88:b6:b2:3a:d7:d8:
80:96:98:ec:2a:fc:28:27:8c:be:86:4a:ee:61:8b:
e7:c0:72:bc:cf:5b:3a:2a:0d:d2:de:3f:8b:a0:68:
13:0f:ee:a4:79:0d:86:40:86:c4:0b:97:19:e3:60:
e3:cc:9e:98:b0:5a:ef:d6:c3:4b:d4:d7:b5:8a:1e:
61:54:1d:f7:a7:1d:6c:08:31:ba:9e:6e:46:31:55:
96:8e:84:42:02:f4:e7:4d:7a:ca:c8:48:5e:3a:d9:
3c:56:d6:08:2f:76:89:1c:c1:0e:56:5c:87:90:ac:
61:ff:90:ff:3f:da:c7:dd:f3:af:11:ea:88:62:d5:
16:4e:0c:10:cf:b7:5e:45:9d:65:aa:f4:a0:ef:ab:
ae:44:0d:f7:59:f1:dd:98:d5:5c:57:47:2e:5e:72:
3f:36:e0:c5:7c:e3:04:29:cd:b9:48:01:dd:fa:28:
0e:d4:32:8e:99:f7:88:9d:39:5a:47:47:90:dd:d8:
71:63:46:a0:87:30:22:27:98:fa:c0:87:4f:24:a0:
d3:31:ab:ec:35:38:28:e8:6e:d8:d2:10:a5:26:b1:
cf:b5:1f:c7:68:df:aa:e0:b7:c1:84:7a:54:62:67:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:28:66:68:9D:DF:8F:C2:8B:DA:93:7B:07:18:CF:51:29:F5:5D
X509v3 Authority Key Identifier:
keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:38:bf:f7:71:2f:a4:22:9f:2f:8e:12:1d:54:fa:fd:6f:16:
81:f4:e2:9f:48:c1:36:1e:59:ab:22:88:35:b2:6d:d2:bb:71:
d1:bf:70:da:22:1c:2b:3f:1e:1a:4f:91:69:b4:61:16:f6:33:
ed:d1:8c:2a:9c:7d:01:e3:a2:f4:f7:3c:a8:69:47:ea:a3:b6:
c3:e6:a2:44:47:9f:f2:76:63:35:9a:fd:99:ee:9a:70:e5:d9:
71:a5:01:1a:54:51:d7:07:c0:c3:fd:4f:fc:79:f1:7b:5c:e7:
a5:d8:23:a0:c2:aa:3a:19:01:30:9b:df:53:41:a5:e2:e4:0b:
74:db:14:5f:1b:37:44:c9:5e:e8:13:9a:bb:4b:82:47:74:1f:
86:d9:95:81:da:69:f8:b5:4f:ee:b1:d6:43:bd:a9:96:b6:0c:
85:77:ab:90:38:92:55:22:0e:7b:b6:08:b5:6e:b9:4f:4d:59:
26:d9:1e:bf:27:b1:10:30:eb:85:36:63:98:38:32:65:32:cf:
df:b5:ca:e4:e1:5a:ee:21:7d:94:c0:67:1b:95:d3:3c:77:5d:
c4:51:87:0b:e4:48:b7:41:b5:30:1d:af:cb:45:80:e0:f6:7f:
c7:a0:5f:fa:3b:29:1e:29:d3:d6:18:75:1d:53:4d:57:b5:db:
08:18:e7:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUekkZGSahZh2jCcqy1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGI3MGZmOWMyMmZmZTBiNzdmNDNmNDFjMDgwNzRkZTZm
MzZlMWIwHhcNMjUxMDE5MTEwMTAzWhcNMjUxMDIwMTEwMTAzWjAzMTEwLwYDVQQD
EygyMTBjMjg2NjY4OWRkZjhmYzI4YmRhOTM3YjA3MThjZjUxMjlmNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8i4bxoT8wN2pq7U0xTOVJRas+Mf
rzOItrI619iAlpjsKvwoJ4y+hkruYYvnwHK8z1s6Kg3S3j+LoGgTD+6keQ2GQIbE
C5cZ42DjzJ6YsFrv1sNL1Ne1ih5hVB33px1sCDG6nm5GMVWWjoRCAvTnTXrKyEhe
Otk8VtYIL3aJHMEOVlyHkKxh/5D/P9rH3fOvEeqIYtUWTgwQz7deRZ1lqvSg76uu
RA33WfHdmNVcV0cuXnI/NuDFfOMEKc25SAHd+igO1DKOmfeInTlaR0eQ3dhxY0ag
hzAiJ5j6wIdPJKDTMavsNTgo6G7Y0hClJrHPtR/HaN+q4LfBhHpUYmeciQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEMKGZond+Pwovak3sHGM9RKfVdMB8GA1UdIwQY
MBaAFGFLcP+cIv/gt39D9BwIB03m824bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NzFmMTctMGJmOC00YmExLWI3Njgt
NTVmZWMxMjUyYWIwLzEvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NzFmMTctMGJmOC00YmExLWI3NjgtNTVmZWMxMjUyYWIw
LzEvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzi/93Ev
pCKfL44SHVT6/W8WgfTin0jBNh5ZqyKINbJt0rtx0b9w2iIcKz8eGk+RabRhFvYz
7dGMKpx9AeOi9Pc8qGlH6qO2w+aiREef8nZjNZr9me6acOXZcaUBGlRR1wfAw/1P
/Hnxe1znpdgjoMKqOhkBMJvfU0Gl4uQLdNsUXxs3RMle6BOau0uCR3QfhtmVgdpp
+LVP7rHWQ72plrYMhXerkDiSVSIOe7YItW65T01ZJtkevyexEDDrhTZjmDgyZTLP
37XK5OFa7iF9lMBnG5XTPHddxFGHC+RIt0G1MB2vy0WA4PZ/x6Bf+jspHinT1hh1
HVNNV7XbCBjnSg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:48 2025 by rpki-client