Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
File: yZjCo92k9OyII3In9dqlkw3uZ-U.mft (raw, json)
Hash identifier: 14ROTDGXhd13WK6+i3O/MBaxV+kdnOkwuxSNXkySp3Y=
Subject key identifier: 17:27:5C:25:80:2F:10:C5:F8:68:BA:56:F9:68:5C:C3:1F:44:5D:44
Authority key identifier: C9:98:C2:A3:DD:A4:F4:EC:88:23:72:27:F5:DA:A5:93:0D:EE:67:E5
Certificate issuer: /CN=c998c2a3dda4f4ec88237227f5daa5930dee67e5
Certificate serial: 0199FBEB3C4A1518F6CBEDA9205172A472F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
Manifest number: 33
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: yZjCo92k9OyII3In9dqlkw3uZ-U.crl (hash: M290zfKPeiXhggK+ZWzWsZYyeoXbZbOaTqcToWgHiCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3c:4a:15:18:f6:cb:ed:a9:20:51:72:a4:72:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c998c2a3dda4f4ec88237227f5daa5930dee67e5
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=17275c25802f10c5f868ba56f9685cc31f445d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:77:e5:f8:64:06:a6:94:e5:45:d9:68:8f:
fc:1c:ca:b4:2c:b3:9b:33:79:42:14:d6:e4:ef:88:
f0:5c:9d:88:f9:e3:0b:63:f6:22:7d:19:f0:86:21:
8f:f7:50:44:b8:6c:51:1a:0c:02:7d:3a:05:3e:35:
32:a3:ed:27:f3:e1:b1:0b:14:3e:46:2e:70:ac:3b:
65:6a:18:f1:4b:3c:c9:b9:4d:d4:ac:6c:fd:b0:d1:
32:52:dc:57:aa:44:7a:33:e5:dc:16:bf:3e:ea:4c:
92:8e:8f:f2:f9:7e:8f:d0:cb:68:f5:df:f3:dc:09:
b4:a7:c6:25:b7:21:4d:dc:82:b8:f6:9d:7c:bc:2a:
2e:56:2e:d8:6c:dd:b7:8c:1c:f1:3a:0d:16:ac:e1:
7a:cb:68:2e:fb:94:26:2e:6a:4e:c0:0f:72:e0:58:
cf:34:46:80:1b:e8:9d:ca:ab:e6:d6:86:c2:51:b4:
c3:5f:2b:88:36:30:39:a4:44:6c:72:53:14:3c:8f:
ca:6f:ae:ff:2d:a3:13:f6:60:3b:cc:84:ee:90:a3:
e4:cd:0b:d8:39:57:6f:f6:41:23:11:57:c3:a0:e1:
63:d0:a1:1c:a5:2b:a4:23:9c:b8:dd:90:bf:3f:82:
ab:f3:5b:95:5b:46:cf:5e:73:de:dc:5d:7d:31:48:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:27:5C:25:80:2F:10:C5:F8:68:BA:56:F9:68:5C:C3:1F:44:5D:44
X509v3 Authority Key Identifier:
keyid:C9:98:C2:A3:DD:A4:F4:EC:88:23:72:27:F5:DA:A5:93:0D:EE:67:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:60:36:32:8a:bc:d3:be:42:a3:37:d3:6f:80:a1:02:06:05:
54:0f:c5:2e:8c:38:9f:6f:c3:b1:19:92:b6:ba:1b:59:fd:51:
fa:85:bd:9e:40:c5:0f:2e:24:ae:ee:61:86:ad:3d:d7:d3:e4:
f2:35:7c:37:db:e6:b1:e7:33:63:df:4b:89:4f:e3:05:7e:23:
96:4f:0a:d4:da:29:7c:47:93:8a:26:ca:ab:4f:3c:16:7f:3b:
63:53:a2:fb:0a:58:da:94:ad:d8:31:86:b6:bf:a8:68:b2:2d:
f9:a9:24:73:57:ff:5d:71:b7:af:a3:85:76:18:be:04:b2:34:
73:64:5a:1c:f9:1b:b9:af:c5:c9:29:6e:97:4f:00:c2:da:e3:
f5:40:60:51:8a:6b:56:95:9e:12:97:fa:21:7a:0f:06:7d:9c:
79:81:1c:73:b8:4b:78:5b:fe:fe:f9:56:34:1c:75:47:2d:89:
d3:eb:fc:ce:15:c4:d4:c6:f5:67:f9:a8:94:cc:ce:fc:bf:97:
8b:2a:14:36:56:1f:32:5a:f6:ac:ba:52:b0:81:7d:78:9f:ae:
f5:c2:a9:c4:cc:cd:66:8a:3a:ec:6c:c0:5c:8b:b9:66:7d:de:
91:1d:8b:1f:55:53:8f:d0:73:4b:d5:7d:8e:73:42:27:c8:24:
0d:ae:7c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zxKFRj2y+2pIFFypHLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OThjMmEzZGRhNGY0ZWM4ODIzNzIyN2Y1ZGFhNTkzMGRl
ZTY3ZTUwHhcNMjUxMDE5MTAwMjAxWhcNMjUxMDIwMTAwMjAxWjAzMTEwLwYDVQQD
EygxNzI3NWMyNTgwMmYxMGM1Zjg2OGJhNTZmOTY4NWNjMzFmNDQ1ZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaJ35fhkBqaU5UXZaI/8HMq0LLOb
M3lCFNbk74jwXJ2I+eMLY/YifRnwhiGP91BEuGxRGgwCfToFPjUyo+0n8+GxCxQ+
Ri5wrDtlahjxSzzJuU3UrGz9sNEyUtxXqkR6M+XcFr8+6kySjo/y+X6P0Mto9d/z
3Am0p8YltyFN3IK49p18vCouVi7YbN23jBzxOg0WrOF6y2gu+5QmLmpOwA9y4FjP
NEaAG+idyqvm1obCUbTDXyuINjA5pERsclMUPI/Kb67/LaMT9mA7zITukKPkzQvY
OVdv9kEjEVfDoOFj0KEcpSukI5y43ZC/P4Kr81uVW0bPXnPe3F19MUhNowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcnXCWALxDF+Gi6VvloXMMfRF1EMB8GA1UdIwQY
MBaAFMmYwqPdpPTsiCNyJ/XapZMN7mflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xMDhhZWYtMDliZC00MjZhLTkyNjMt
MWU0YmJjZmJhMjEwLzEveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xMDhhZWYtMDliZC00MjZhLTkyNjMtMWU0YmJjZmJhMjEw
LzEveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2A2Moq8
075CozfTb4ChAgYFVA/FLow4n2/DsRmStrobWf1R+oW9nkDFDy4kru5hhq0919Pk
8jV8N9vmseczY99LiU/jBX4jlk8K1NopfEeTiibKq088Fn87Y1Oi+wpY2pSt2DGG
tr+oaLIt+akkc1f/XXG3r6OFdhi+BLI0c2RaHPkbua/FySlul08Awtrj9UBgUYpr
VpWeEpf6IXoPBn2ceYEcc7hLeFv+/vlWNBx1Ry2J0+v8zhXE1Mb1Z/molMzO/L+X
iyoUNlYfMlr2rLpSsIF9eJ+u9cKpxMzNZoo67GzAXIu5Zn3ekR2LH1VTj9BzS9V9
jnNCJ8gkDa58rw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:24 2025 by rpki-client