Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: aZ91Am3SrUdtwLjK9nCobSDUcNLU9vEFreCPzx/qI/M=
Subject key identifier: 05:F6:32:30:89:CB:CE:3D:13:C1:AE:65:D4:4F:71:72:4E:73:EA:09
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 0199FDD9B2F7F9DA33B3513A218A9907DDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 15C2
Signing time: Sun 19 Oct 2025 19:02:06 +0000
Manifest this update: Sun 19 Oct 2025 19:02:06 +0000
Manifest next update: Mon 20 Oct 2025 19:02:06 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: xvpMnIri62JAEzMFTqmHaOLG3oDhwd3PoQ7SPPsxo6A=)
2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b2:f7:f9:da:33:b3:51:3a:21:8a:99:07:dd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Oct 19 19:02:06 2025 GMT
Not After : Oct 20 19:02:06 2025 GMT
Subject: CN=05f6323089cbce3d13c1ae65d44f71724e73ea09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:f5:b1:1d:a7:f4:24:18:7b:38:a6:4d:b5:
d8:90:b8:4e:53:9a:28:fe:c5:ac:1c:2e:b5:7e:b4:
81:63:4d:02:ba:02:93:f7:b7:7d:47:ab:f3:ed:6b:
e1:f4:59:ff:7d:ab:6d:75:84:d1:eb:64:2d:4f:86:
70:3e:a5:00:e6:a1:82:a2:a2:27:6c:42:29:27:57:
e6:9e:27:fb:08:97:f1:7d:a7:50:18:e2:79:3c:c4:
e8:c4:16:9b:b3:e7:77:64:d5:97:21:bf:19:c2:c3:
39:ba:85:fe:6e:69:59:c7:32:3d:08:21:f1:50:08:
5b:8e:73:7e:c2:0b:f1:ed:9d:23:d4:4b:14:97:db:
4f:3f:8a:85:08:f1:77:d1:9b:93:3a:80:97:ac:61:
d6:0b:c5:02:42:a5:a8:cd:3f:4e:4f:c2:b9:3b:d6:
91:88:05:6b:a8:a0:a1:45:51:a4:f6:2f:48:f4:89:
5a:a6:57:ee:be:90:dc:96:d5:14:5e:9e:6c:a5:d1:
64:32:cd:76:04:ad:ad:6d:3c:ce:28:8a:95:8b:31:
10:89:19:4a:f2:37:6e:18:84:57:97:5b:3d:db:80:
8d:d6:f6:d7:e4:c2:cb:de:bc:cc:d7:9d:b9:06:9b:
2d:46:8d:25:87:49:40:ec:25:ca:13:fd:dc:3c:35:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F6:32:30:89:CB:CE:3D:13:C1:AE:65:D4:4F:71:72:4E:73:EA:09
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0d:cb:c0:13:e0:56:9e:50:c2:f7:c1:25:a9:b2:2b:89:66:
2e:05:ee:5d:0f:4a:e8:0d:6d:04:1d:df:7c:54:74:92:e7:c0:
fe:c9:6e:41:e7:93:55:1a:63:8b:25:c0:e8:ca:8c:5a:94:40:
bf:c1:de:ad:9b:ae:30:c5:01:f6:8f:d3:f6:ca:c1:70:04:9f:
43:48:a3:e2:9b:99:8d:15:ec:2b:57:74:23:2d:32:c3:49:ab:
5d:02:66:33:ae:0d:a0:4a:9b:52:72:e2:c7:7f:3b:43:d0:e0:
03:28:aa:b4:8c:e1:e5:67:64:d8:19:bb:f8:17:73:73:f7:bb:
ba:67:ff:ad:e3:ff:0b:6c:85:b4:7f:50:22:0b:7b:97:a3:05:
b2:ba:c4:68:ff:cb:bb:9d:7d:c7:b1:b4:86:68:80:63:78:91:
b2:5e:95:e1:51:67:5c:f3:93:16:fc:c5:f6:07:e2:35:43:0f:
2d:4a:f6:34:3d:b6:b3:91:f5:9e:70:42:c9:be:bc:15:f4:fe:
16:33:0b:b2:da:f4:37:e4:7a:4d:7f:4b:8e:23:d5:73:c9:15:
b5:da:3d:0d:ae:a9:ca:19:f2:6b:10:42:de:81:17:33:e6:fc:
02:9e:2a:51:2e:54:44:13:90:69:c3:b3:0a:c5:36:12:98:8f:
f9:3a:60:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92bL3+dozs1E6IYqZB929MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxM2Q1ZTEzNzlmZWE5ZDFkMGY3MjU2ZWQwZmM5MTgzYmU3
NGZlZmIwHhcNMjUxMDE5MTkwMjA2WhcNMjUxMDIwMTkwMjA2WjAzMTEwLwYDVQQD
EygwNWY2MzIzMDg5Y2JjZTNkMTNjMWFlNjVkNDRmNzE3MjRlNzNlYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz31sR2n9CQYezimTbXYkLhOU5oo
/sWsHC61frSBY00CugKT97d9R6vz7Wvh9Fn/fattdYTR62QtT4ZwPqUA5qGCoqIn
bEIpJ1fmnif7CJfxfadQGOJ5PMToxBabs+d3ZNWXIb8ZwsM5uoX+bmlZxzI9CCHx
UAhbjnN+wgvx7Z0j1EsUl9tPP4qFCPF30ZuTOoCXrGHWC8UCQqWozT9OT8K5O9aR
iAVrqKChRVGk9i9I9IlaplfuvpDcltUUXp5spdFkMs12BK2tbTzOKIqVizEQiRlK
8jduGIRXl1s924CN1vbX5MLL3rzM1525BpstRo0lh0lA7CXKE/3cPDVJEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAX2MjCJy849E8GuZdRPcXJOc+oJMB8GA1UdIwQY
MBaAFGE9XhN5/qnR0PclbtD8kYO+dP77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mZDYwNzAtOWUwYi00MzNhLThhNzUt
N2Y3M2E0NjcxYTFlLzEvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mZDYwNzAtOWUwYi00MzNhLThhNzUtN2Y3M2E0NjcxYTFl
LzEvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqg3LwBPg
Vp5QwvfBJamyK4lmLgXuXQ9K6A1tBB3ffFR0kufA/sluQeeTVRpjiyXA6MqMWpRA
v8HerZuuMMUB9o/T9srBcASfQ0ij4puZjRXsK1d0Iy0yw0mrXQJmM64NoEqbUnLi
x387Q9DgAyiqtIzh5Wdk2Bm7+Bdzc/e7umf/reP/C2yFtH9QIgt7l6MFsrrEaP/L
u519x7G0hmiAY3iRsl6V4VFnXPOTFvzF9gfiNUMPLUr2ND22s5H1nnBCyb68FfT+
FjMLstr0N+R6TX9LjiPVc8kVtdo9Da6pyhnyaxBC3oEXM+b8Ap4qUS5URBOQacOz
CsU2EpiP+TpgHg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:28 2025 by rpki-client