Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier: ea5wN6g2Rxjj7DtABVOL85kR2iJfHWGz20kc8ssfUps=
Subject key identifier: 3D:5E:C1:3C:D4:00:5C:48:2A:B5:0D:AD:D1:7B:C1:1E:06:9F:3F:0B
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial: 0199FD3455E216D422E8928F39854FEB1BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number: 1377
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: ruwyYicQ/qb+VEiclgDyhcdbNbq+ujjXOe626hwIcmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:55:e2:16:d4:22:e8:92:8f:39:85:4f:eb:1b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=3d5ec13cd4005c482ab50dadd17bc11e069f3f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:68:f1:ba:d2:b2:3e:63:d1:4b:10:3b:73:
55:01:8f:4a:34:84:a4:70:2b:50:ed:fc:00:33:8c:
71:6d:17:f2:49:b5:07:03:0b:94:8c:3e:de:0d:33:
06:47:83:1d:22:f3:68:2a:1b:53:33:0e:29:e3:5d:
6f:62:c3:d4:e2:ba:21:ac:ec:af:29:d5:9a:6c:62:
6d:e1:13:c3:bd:50:c9:c5:b2:b0:cb:67:89:77:df:
be:f6:16:de:04:06:7a:53:9e:4b:dc:a1:f1:99:97:
cd:71:69:95:f6:c4:cc:df:de:7d:12:d1:1e:74:70:
74:6d:00:93:f9:b6:bb:8c:55:82:c3:bb:4c:8d:86:
09:8a:bd:8b:65:ed:9c:9a:e8:a0:48:88:69:d7:7a:
71:06:ca:ed:bf:3d:8a:cc:4d:30:d8:dd:68:41:ec:
b8:1b:e1:76:c2:7a:26:d8:0e:ef:ca:8f:12:89:71:
6a:fc:57:bb:e5:21:15:ca:6a:41:f4:0f:35:59:fa:
98:d8:20:53:34:89:13:cf:90:f0:6b:7d:d5:f9:0e:
c7:f1:1f:b1:af:a2:eb:0e:5f:e3:95:d1:18:b9:c5:
70:c0:09:9c:5f:98:86:f7:fe:5a:ec:20:88:59:83:
34:c4:8d:45:be:99:52:53:61:d8:51:d5:b1:66:6b:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5E:C1:3C:D4:00:5C:48:2A:B5:0D:AD:D1:7B:C1:1E:06:9F:3F:0B
X509v3 Authority Key Identifier:
keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:08:71:aa:28:ad:4a:26:fe:b4:42:2a:0a:50:b6:94:77:cd:
cd:35:4c:55:c3:d7:48:89:aa:dc:3e:70:8e:bf:29:ff:da:e8:
1c:39:41:d8:5e:30:22:bd:6e:f6:62:74:da:b7:72:fa:57:38:
9c:9a:b0:75:d6:76:d0:2f:0f:3b:8f:fd:08:7c:15:37:2f:1a:
4c:3a:4d:f3:6a:c0:56:fd:e4:4f:c3:72:01:42:6f:51:7f:b4:
24:59:69:6d:36:5a:b3:87:74:c4:0c:71:33:4d:de:5d:02:a4:
38:ab:97:bb:a4:6d:a8:75:0e:25:7d:42:1d:81:7e:7f:80:22:
a1:df:ae:90:66:ed:59:92:5b:08:20:d2:85:7f:d4:d0:0e:9d:
69:ed:90:92:66:79:61:30:44:04:47:f0:63:c9:44:4e:e3:c6:
89:b5:71:31:ba:77:b2:cf:d5:4a:7e:35:fd:f0:41:8c:85:eb:
5b:2f:42:1e:2f:2f:30:ee:d1:22:bf:d6:f5:95:53:f2:48:37:
82:cb:bd:88:17:85:31:a8:63:f0:ce:14:32:01:47:e8:5b:2f:
d9:25:34:8c:94:3d:f4:bd:c1:e4:e4:b7:bc:bf:74:1b:c2:bc:
0e:6c:0b:54:5f:89:b1:01:e3:97:76:5b:07:04:aa:83:dd:fc:
de:2d:20:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFXiFtQi6JKPOYVP6xvcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjY4YjUyOTM5MzAxOGQ0YmM5ZmM1NDA3MzAzMGEwM2Q5
Mjk3MjEwHhcNMjUxMDE5MTYwMTI5WhcNMjUxMDIwMTYwMTI5WjAzMTEwLwYDVQQD
EygzZDVlYzEzY2Q0MDA1YzQ4MmFiNTBkYWRkMTdiYzExZTA2OWYzZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPdo8brSsj5j0UsQO3NVAY9KNISk
cCtQ7fwAM4xxbRfySbUHAwuUjD7eDTMGR4MdIvNoKhtTMw4p411vYsPU4rohrOyv
KdWabGJt4RPDvVDJxbKwy2eJd9++9hbeBAZ6U55L3KHxmZfNcWmV9sTM3959EtEe
dHB0bQCT+ba7jFWCw7tMjYYJir2LZe2cmuigSIhp13pxBsrtvz2KzE0w2N1oQey4
G+F2wnom2A7vyo8SiXFq/Fe75SEVympB9A81WfqY2CBTNIkTz5Dwa33V+Q7H8R+x
r6LrDl/jldEYucVwwAmcX5iG9/5a7CCIWYM0xI1FvplSU2HYUdWxZmtWowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1ewTzUAFxIKrUNrdF7wR4Gnz8LMB8GA1UdIwQY
MBaAFMsmi1KTkwGNS8n8VAcwMKA9kpchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYt
ZjI3MDA4NjRjMTg3LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYtZjI3MDA4NjRjMTg3
LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAhxqiit
Sib+tEIqClC2lHfNzTVMVcPXSImq3D5wjr8p/9roHDlB2F4wIr1u9mJ02rdy+lc4
nJqwddZ20C8PO4/9CHwVNy8aTDpN82rAVv3kT8NyAUJvUX+0JFlpbTZas4d0xAxx
M03eXQKkOKuXu6RtqHUOJX1CHYF+f4Aiod+ukGbtWZJbCCDShX/U0A6dae2QkmZ5
YTBEBEfwY8lETuPGibVxMbp3ss/VSn41/fBBjIXrWy9CHi8vMO7RIr/W9ZVT8kg3
gsu9iBeFMahj8M4UMgFH6Fsv2SU0jJQ99L3B5OS3vL90G8K8DmwLVF+JsQHjl3Zb
BwSqg9383i0gXg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:04 2025 by rpki-client