Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File: _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier: xz4GILv4BrjSmqCod+H5qvfgGd+uysZLKdK8YzxHHwk=
Subject key identifier: 30:93:D3:7B:33:DD:C4:A8:CD:4A:A8:49:62:81:DE:E5:AD:8C:89:5A
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer: /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial: 0199FBEC239DB2F8C204BB60A22F3FE501C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number: 0EA1
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: V/wz9v1UaCgIZDaLZlHxJ69zw4IuZ0a0IwfAYe2cgww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:23:9d:b2:f8:c2:04:bb:60:a2:2f:3f:e5:01:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=3093d37b33ddc4a8cd4aa8496281dee5ad8c895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:ce:b9:81:62:d0:3d:21:10:f6:e3:4f:f0:
2f:6e:51:12:a0:ed:b5:4a:dc:f3:3c:22:77:a5:ae:
cb:98:57:64:eb:4e:a8:2a:7a:1e:dc:88:9e:94:41:
3e:e3:9d:39:85:a7:11:dd:29:69:e2:6a:dd:2c:e0:
b4:22:94:46:e0:da:4e:3d:2b:d1:6c:3a:88:d2:3d:
61:b2:7f:44:76:fc:71:92:a6:b2:df:17:71:63:67:
6f:a2:82:f4:d3:36:bb:98:e3:0d:00:9a:b5:13:16:
6f:71:94:fa:4e:63:24:3e:e1:5c:c2:f0:a5:93:25:
ea:50:d6:81:16:62:1b:d1:3c:bd:fe:1f:29:99:97:
c6:a7:3d:85:92:9b:12:a2:9b:77:ca:63:9b:d7:e1:
26:b6:e1:b7:df:6a:c1:41:f7:d7:fb:9c:4f:65:19:
2a:51:2c:f0:a1:d5:08:af:e5:89:46:fe:32:77:84:
9c:30:ca:77:d8:31:f8:77:ff:d7:ca:2b:11:b9:9f:
b9:bf:aa:dd:27:79:24:0c:2b:47:40:e5:a5:63:6b:
2b:21:f2:69:a4:44:5c:25:d6:a2:30:89:4b:8a:69:
2d:16:7d:f7:9c:b1:12:a8:81:d5:ba:89:a3:10:c2:
7f:73:a5:32:b6:44:04:d4:14:0e:49:82:64:4a:0f:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:D3:7B:33:DD:C4:A8:CD:4A:A8:49:62:81:DE:E5:AD:8C:89:5A
X509v3 Authority Key Identifier:
keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:27:de:39:43:9d:e9:1d:bd:ee:7f:e7:d3:9c:44:b1:a4:aa:
b1:a7:1e:a8:29:5e:7f:e0:55:a2:f3:01:4d:59:fc:83:f8:c0:
25:7a:cf:bb:54:6d:31:98:b5:10:1d:17:4a:c0:0f:a0:c7:41:
7b:62:90:5f:b8:1f:58:42:19:46:af:8e:91:cd:12:aa:eb:61:
e2:89:6e:e5:04:40:38:ab:e5:f2:3c:44:98:7f:9c:6e:80:fb:
fb:94:c3:d4:84:51:7b:19:42:92:3c:20:c8:bb:59:36:5c:53:
58:26:53:77:a9:81:05:f4:f3:09:03:cb:8f:1b:e8:48:aa:4e:
a7:0a:a9:79:9d:c4:06:2f:65:72:9a:a8:26:79:bf:77:ec:7e:
d4:3f:7e:3f:a4:cf:f3:54:42:a0:00:0d:7c:de:ec:21:69:30:
83:4f:f5:3f:11:ae:69:7d:90:08:d2:60:0a:2c:8f:23:5f:07:
a2:58:a5:cc:71:7e:67:7d:53:1f:9c:03:5b:b3:98:89:30:dc:
51:19:94:58:60:d1:6a:0f:54:52:db:83:88:1e:30:97:2f:59:
61:2b:5b:e1:90:5d:b4:52:62:dd:a8:c2:29:70:8c:fa:54:bd:
ce:08:28:d2:e5:d2:0f:e3:99:86:d3:fc:ed:ad:41:d9:58:d7:
66:90:1d:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77COdsvjCBLtgoi8/5QHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjA2YmQxMDgzMWNhNzM3ODc1NmI1ZTE2MTczODk2YTYw
YjAxOTEwHhcNMjUxMDE5MTAwMzAwWhcNMjUxMDIwMTAwMzAwWjAzMTEwLwYDVQQD
EygzMDkzZDM3YjMzZGRjNGE4Y2Q0YWE4NDk2MjgxZGVlNWFkOGM4OTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDbOuYFi0D0hEPbjT/AvblESoO21
StzzPCJ3pa7LmFdk606oKnoe3IielEE+4505hacR3Slp4mrdLOC0IpRG4NpOPSvR
bDqI0j1hsn9Edvxxkqay3xdxY2dvooL00za7mOMNAJq1ExZvcZT6TmMkPuFcwvCl
kyXqUNaBFmIb0Ty9/h8pmZfGpz2FkpsSopt3ymOb1+EmtuG332rBQffX+5xPZRkq
USzwodUIr+WJRv4yd4ScMMp32DH4d//XyisRuZ+5v6rdJ3kkDCtHQOWlY2srIfJp
pERcJdaiMIlLimktFn33nLESqIHVuomjEMJ/c6UytkQE1BQOSYJkSg/3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCT03sz3cSozUqoSWKB3uWtjIlaMB8GA1UdIwQY
MBaAFP8ga9EIMcpzeHVrXhYXOJamCwGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMzVkMzctNzQ0Ny00Y2Y0LTk4MmYt
NTBmMzk4YmIyNmU5LzEvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hMzVkMzctNzQ0Ny00Y2Y0LTk4MmYtNTBmMzk4YmIyNmU5
LzEvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCfeOUOd
6R297n/n05xEsaSqsaceqClef+BVovMBTVn8g/jAJXrPu1RtMZi1EB0XSsAPoMdB
e2KQX7gfWEIZRq+Okc0Squth4olu5QRAOKvl8jxEmH+cboD7+5TD1IRRexlCkjwg
yLtZNlxTWCZTd6mBBfTzCQPLjxvoSKpOpwqpeZ3EBi9lcpqoJnm/d+x+1D9+P6TP
81RCoAANfN7sIWkwg0/1PxGuaX2QCNJgCiyPI18HolilzHF+Z31TH5wDW7OYiTDc
URmUWGDRag9UUtuDiB4wly9ZYStb4ZBdtFJi3ajCKXCM+lS9zggo0uXSD+OZhtP8
7a1B2VjXZpAdug==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:52 2025 by rpki-client