Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: MiDuXKGb1Ic+1j1n0wcCE3PxYbRAdAO9gNsYC4FysVk=
Subject key identifier: 77:F9:53:D3:CE:AC:AD:0E:87:13:EB:FA:6A:C5:76:72:19:2C:84:74
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 0199F68DD66F1E5EE0BDD4C15F62E6B13D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 014D
Signing time: Sat 18 Oct 2025 09:01:54 +0000
Manifest this update: Sat 18 Oct 2025 09:01:54 +0000
Manifest next update: Sun 19 Oct 2025 09:01:54 +0000
Files and hashes: 1: XeHwlV4_nC5T8BptDxih7yIgLeg.roa (hash: SOsMIv7q0cLJ7sDVkddmO8lkJPy7j4qBPOmyU0Pco9g=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: Kf9FtpygUz91Osr85dxCd46IRoXk1pog/i5LxmfPKe4=)
3: _CP3e0WLgHreGwKUhpdfEeFss0U.roa (hash: QypuSrQ37amqxwFK8xiRJM3wGtIQUHMjSUwWELe4qw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f6:8d:d6:6f:1e:5e:e0:bd:d4:c1:5f:62:e6:b1:3d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Oct 18 09:01:54 2025 GMT
Not After : Oct 19 09:01:54 2025 GMT
Subject: CN=77f953d3ceacad0e8713ebfa6ac57672192c8474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:f5:96:02:17:62:ec:41:6d:fb:1f:b8:48:
54:b2:99:e6:d2:49:87:1e:99:0d:d2:3a:f0:d0:1a:
8e:19:e2:d8:09:0e:8b:fa:b8:13:62:af:1f:e4:61:
e7:5a:43:c7:f3:11:65:40:49:90:34:8b:77:d5:fc:
5f:3b:c9:b0:33:97:05:0f:08:f0:bf:6b:4c:39:5a:
ec:89:49:12:7f:ff:ae:a4:fc:90:a7:96:f7:7e:ea:
c1:9d:16:3b:01:9e:7a:7e:b8:4f:95:6a:84:3c:67:
51:0f:c6:10:0e:e4:d2:c2:2f:d6:e2:3d:ef:70:b7:
57:8a:1c:e9:6f:b6:2a:ee:b1:d1:e4:31:25:a1:f8:
f3:0d:f8:47:c6:43:21:2e:a3:3e:b1:df:59:d5:03:
b2:47:7d:f5:01:53:65:d0:fd:0e:f7:4e:f2:9a:c6:
af:56:98:c2:18:c5:36:5a:b0:6a:e0:88:fe:f1:7a:
5b:25:61:7f:50:40:c6:a0:78:44:6d:a4:a3:c2:6d:
c3:75:e5:e2:c7:81:dc:99:5f:6f:eb:a2:b9:a7:bb:
a5:02:ae:23:28:c9:39:52:bf:94:7f:48:df:78:b5:
d9:2b:e5:20:57:d3:ed:f7:49:3a:55:43:cb:83:46:
55:12:a6:59:71:87:de:c0:ce:c4:97:9c:99:91:5b:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F9:53:D3:CE:AC:AD:0E:87:13:EB:FA:6A:C5:76:72:19:2C:84:74
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f3:74:9d:89:5f:83:af:02:16:3f:c6:1e:6c:66:9a:f6:eb:
81:fa:f9:a2:9b:fb:13:cc:cf:17:29:7c:5c:c3:bf:f4:4a:0e:
47:d8:c7:98:19:ca:f2:d3:6f:9d:93:b3:49:87:39:bd:6f:39:
59:cf:3f:6b:e9:d0:6d:f4:f3:2b:da:66:7b:d0:bf:97:11:ee:
79:97:f0:b3:0a:fe:2a:89:02:cd:ec:1e:48:b3:18:b3:0c:46:
44:32:75:75:df:66:eb:7e:39:f1:a1:34:f7:dd:b3:02:87:65:
e7:0c:92:04:a0:a9:03:5e:8e:ae:7c:23:be:53:37:78:0f:9c:
fd:7a:45:cc:b6:61:e5:fa:57:19:3b:7a:10:22:48:60:cc:d4:
a9:06:15:73:3e:fb:d7:94:34:f2:f0:2d:cf:66:0a:19:06:08:
45:c1:f9:2d:5d:38:18:9a:3c:93:4a:f4:a1:c0:b7:86:3f:9b:
1d:1e:f2:61:d5:75:0d:0f:8d:cd:bc:45:5f:c3:26:4f:26:de:
a0:b1:3f:1e:91:d0:a9:43:22:af:7e:96:d6:b1:7a:7d:c6:6f:
f8:b9:8a:bf:7a:a8:26:40:d9:af:2c:22:d1:2d:b4:db:57:48:
5b:83:17:f2:40:87:8d:06:e8:07:27:3d:69:7f:68:62:6f:4f:
46:bf:72:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn2jdZvHl7gvdTBX2LmsT2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOWVhN2FiYWZjNTJjN2ZmYTIwYTdhNmFhZTRhZTJkMjYy
NTIwNzYwHhcNMjUxMDE4MDkwMTU0WhcNMjUxMDE5MDkwMTU0WjAzMTEwLwYDVQQD
Eyg3N2Y5NTNkM2NlYWNhZDBlODcxM2ViZmE2YWM1NzY3MjE5MmM4NDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0r1lgIXYuxBbfsfuEhUspnm0kmH
HpkN0jrw0BqOGeLYCQ6L+rgTYq8f5GHnWkPH8xFlQEmQNIt31fxfO8mwM5cFDwjw
v2tMOVrsiUkSf/+upPyQp5b3furBnRY7AZ56frhPlWqEPGdRD8YQDuTSwi/W4j3v
cLdXihzpb7Yq7rHR5DElofjzDfhHxkMhLqM+sd9Z1QOyR331AVNl0P0O907ymsav
VpjCGMU2WrBq4Ij+8XpbJWF/UEDGoHhEbaSjwm3DdeXix4HcmV9v66K5p7ulAq4j
KMk5Ur+Uf0jfeLXZK+UgV9Pt90k6VUPLg0ZVEqZZcYfewM7El5yZkVvscQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHf5U9POrK0OhxPr+mrFdnIZLIR0MB8GA1UdIwQY
MBaAFGCep6uvxSx/+iCnpqrkri0mJSB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEt
NDE3MGI4MmFkZjVkLzEvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEtNDE3MGI4MmFkZjVk
LzEvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfN0nYlf
g68CFj/GHmxmmvbrgfr5opv7E8zPFyl8XMO/9EoOR9jHmBnK8tNvnZOzSYc5vW85
Wc8/a+nQbfTzK9pme9C/lxHueZfwswr+KokCzeweSLMYswxGRDJ1dd9m63458aE0
992zAodl5wySBKCpA16OrnwjvlM3eA+c/XpFzLZh5fpXGTt6ECJIYMzUqQYVcz77
15Q08vAtz2YKGQYIRcH5LV04GJo8k0r0ocC3hj+bHR7yYdV1DQ+NzbxFX8MmTybe
oLE/HpHQqUMir36W1rF6fcZv+LmKv3qoJkDZrywi0S2021dIW4MX8kCHjQboByc9
aX9oYm9PRr9yPA==
-----END CERTIFICATE-----
Generated at Sat Oct 18 11:43:22 2025 by rpki-client