Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File: ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier: rWghbkQ1sdI0GcdotZv5kvw3PP3+2a2yf82dO2zy7Ps=
Subject key identifier: 98:45:BF:1B:09:A6:DA:5E:2B:1A:CB:B0:53:7C:A6:66:E9:4F:7A:EA
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial: 0199FAD7FE36D8A4CA77C36AB0DBBC0D6CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number: 061B
Signing time: Sun 19 Oct 2025 05:01:23 +0000
Manifest this update: Sun 19 Oct 2025 05:01:23 +0000
Manifest next update: Mon 20 Oct 2025 05:01:23 +0000
Files and hashes: 1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: Xmpd6mZWjUF+ojokpFl7iYcQ6KsehMn/t9a2cqOneSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:fe:36:d8:a4:ca:77:c3:6a:b0:db:bc:0d:6c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
Validity
Not Before: Oct 19 05:01:23 2025 GMT
Not After : Oct 20 05:01:23 2025 GMT
Subject: CN=9845bf1b09a6da5e2b1acbb0537ca666e94f7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:c8:9e:7a:10:56:a3:36:f6:79:13:f2:ff:
b4:24:3f:75:d3:e3:6b:81:d6:2c:01:ca:4e:57:b1:
9d:ea:7d:29:08:d8:16:80:b1:5a:6e:76:ba:15:c7:
52:09:6e:f8:66:f5:d4:25:71:d2:a2:20:72:7c:52:
d7:59:e3:fc:19:3e:5b:14:fd:db:39:8d:1c:30:71:
5a:95:5d:c4:8c:c6:5d:25:42:29:30:7f:4e:93:ab:
4b:b2:15:69:c7:3b:a0:81:cd:39:ef:8e:94:76:49:
c3:67:62:8c:30:46:0f:a2:e7:22:cc:eb:da:ff:01:
ed:26:9f:cc:2c:ed:34:4d:2e:30:cf:94:d4:cb:ae:
2e:0e:6c:60:c1:08:27:a4:66:8c:e5:03:96:46:ba:
60:01:61:a8:48:f7:de:47:fb:47:1e:c8:b3:68:5c:
15:5f:a0:05:46:04:93:ac:6d:42:12:6f:6d:15:8c:
c2:02:ae:36:c3:8b:8f:19:83:70:01:fa:85:14:bb:
17:0b:25:4b:fc:d0:0f:3e:c6:3a:40:7a:df:69:df:
94:59:9e:a4:a2:81:65:30:cd:c2:3d:09:59:d1:7c:
74:96:29:fc:68:94:b0:22:49:d1:f0:c7:54:67:f0:
08:2b:28:c8:d0:32:d8:b2:d3:bd:e7:40:d1:15:c2:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:45:BF:1B:09:A6:DA:5E:2B:1A:CB:B0:53:7C:A6:66:E9:4F:7A:EA
X509v3 Authority Key Identifier:
keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0e:99:f7:65:aa:33:f4:72:b0:6e:3f:c1:04:ac:e4:32:6f:
08:57:15:76:b8:a2:b1:20:ec:29:e1:a6:9b:73:f1:8b:8a:89:
02:1d:0f:7b:c8:ca:04:1b:12:a3:42:d6:cb:fc:3c:b0:be:25:
be:8d:f7:35:1f:61:e6:e3:dd:cc:0a:1a:2b:c1:6a:33:d2:0b:
73:79:2b:64:ac:a7:60:71:10:75:03:d6:57:ba:4b:8f:9c:ab:
26:e3:29:5c:d8:1f:7b:a3:6d:1f:53:12:8a:4c:29:84:b9:d3:
fd:ba:01:23:70:ff:d7:a3:a7:36:45:1b:d0:44:c4:33:fa:1b:
95:77:30:22:82:d6:2a:e7:6a:72:22:c1:70:5e:d3:1c:d4:4b:
54:30:1b:9c:62:a5:07:95:2c:da:f5:ce:f9:72:ec:d4:7a:68:
d5:35:40:90:ce:0f:6f:d0:76:88:84:7b:bd:60:19:6c:d7:51:
d0:2c:3a:1f:24:32:61:ab:02:e8:c3:5f:24:df:bd:f6:73:83:
92:b8:d8:12:bc:c8:55:57:95:17:20:58:3a:ee:ec:b6:1d:83:
98:4a:41:69:61:eb:3e:c4:98:d3:57:38:f1:c1:26:97:27:6b:
c8:99:be:0e:9a:8f:48:5c:70:3e:ca:12:17:f8:0c:a6:c7:94:
ed:cf:53:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61/422KTKd8NqsNu8DWzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzA3ZTA4NjY0MDA1NmJjMjcxZDVkMmIzZTI0ZDAxNDQw
YmFhMDQwHhcNMjUxMDE5MDUwMTIzWhcNMjUxMDIwMDUwMTIzWjAzMTEwLwYDVQQD
Eyg5ODQ1YmYxYjA5YTZkYTVlMmIxYWNiYjA1MzdjYTY2NmU5NGY3YWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwvInnoQVqM29nkT8v+0JD910+Nr
gdYsAcpOV7Gd6n0pCNgWgLFabna6FcdSCW74ZvXUJXHSoiByfFLXWeP8GT5bFP3b
OY0cMHFalV3EjMZdJUIpMH9Ok6tLshVpxzuggc05746UdknDZ2KMMEYPoucizOva
/wHtJp/MLO00TS4wz5TUy64uDmxgwQgnpGaM5QOWRrpgAWGoSPfeR/tHHsizaFwV
X6AFRgSTrG1CEm9tFYzCAq42w4uPGYNwAfqFFLsXCyVL/NAPPsY6QHrfad+UWZ6k
ooFlMM3CPQlZ0Xx0lin8aJSwIknR8MdUZ/AIKyjI0DLYstO950DRFcLIdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhFvxsJptpeKxrLsFN8pmbpT3rqMB8GA1UdIwQY
MBaAFMpwfghmQAVrwnHV0rPiTQFEC6oEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMt
Yjk5Y2UzMGQ4MzlmLzEveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMtYjk5Y2UzMGQ4Mzlm
LzEveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATw6Z92Wq
M/RysG4/wQSs5DJvCFcVdriisSDsKeGmm3Pxi4qJAh0Pe8jKBBsSo0LWy/w8sL4l
vo33NR9h5uPdzAoaK8FqM9ILc3krZKynYHEQdQPWV7pLj5yrJuMpXNgfe6NtH1MS
ikwphLnT/boBI3D/16OnNkUb0ETEM/oblXcwIoLWKudqciLBcF7THNRLVDAbnGKl
B5Us2vXO+XLs1Hpo1TVAkM4Pb9B2iIR7vWAZbNdR0Cw6HyQyYasC6MNfJN+99nOD
krjYErzIVVeVFyBYOu7sth2DmEpBaWHrPsSY01c48cEmlydryJm+DpqPSFxwPsoS
F/gMpseU7c9TCQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:21 2025 by rpki-client