Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: hUI2ymiFjMad35zRBL0EALXj5gnKDyIuzSflI8w8a/k=
Subject key identifier: E8:BA:99:C3:0C:EB:0F:18:41:21:CF:0F:00:FE:F0:A4:2B:91:07:F2
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 019A2478C1325C380C1454CC2A18E0495775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 03DF
Signing time: Mon 27 Oct 2025 07:01:24 +0000
Manifest this update: Mon 27 Oct 2025 07:01:24 +0000
Manifest next update: Tue 28 Oct 2025 07:01:24 +0000
Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=)
2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: wsWJu9hRbdriOZ7GzDgpZJZOSFYKxbewczdKsrJL8BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:c1:32:5c:38:0c:14:54:cc:2a:18:e0:49:57:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Oct 27 07:01:24 2025 GMT
Not After : Oct 28 07:01:24 2025 GMT
Subject: CN=e8ba99c30ceb0f184121cf0f00fef0a42b9107f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:fe:c0:d3:73:6c:a9:e7:d2:ed:43:c0:c2:
35:b1:51:66:43:7d:29:d8:66:74:51:db:0e:3b:8d:
7a:71:09:b9:a6:ad:46:62:93:28:0d:56:d6:7b:36:
33:12:6a:1b:2b:7c:60:20:16:19:cd:0b:0d:42:ed:
15:56:ea:f1:ac:fc:cd:4f:e3:89:52:88:38:bc:a5:
3f:e0:1a:68:4d:60:d3:58:a4:ac:5e:3a:bd:ab:e5:
26:84:b7:f7:c1:90:ee:61:1e:e8:79:0e:20:9a:4f:
a6:d5:43:fc:c8:c1:e8:63:9f:e0:71:f2:9a:eb:6f:
17:b8:31:ec:1f:ed:da:48:1a:d1:80:17:6b:9e:c8:
06:fb:f5:e3:d5:25:b2:90:a3:d6:40:3c:0c:e1:9d:
46:57:10:f2:98:9e:08:f7:cf:de:c7:97:1a:7b:61:
64:30:6e:96:3c:37:3a:f0:97:66:d0:c8:71:0e:a7:
d8:46:34:3d:ce:bd:e5:6d:20:22:bf:90:68:93:41:
a6:c4:3c:f3:58:d8:9f:16:46:4e:7d:23:5f:8b:b3:
49:d8:64:70:9a:4e:99:a2:0c:e3:07:b2:2e:76:bc:
a4:71:3f:6a:08:bc:be:74:34:7c:10:22:7a:5a:c4:
99:2e:d3:03:cf:e4:e4:e6:60:03:11:ff:98:64:41:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:99:C3:0C:EB:0F:18:41:21:CF:0F:00:FE:F0:A4:2B:91:07:F2
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a8:1d:f2:25:c2:d6:43:19:f8:a4:d9:bf:0b:ed:c1:94:77:
04:1f:b4:87:ae:b9:9e:87:55:42:fa:4f:22:ea:ef:36:d6:55:
1a:ac:3b:92:c6:d1:a8:7b:64:06:6c:cf:3c:a6:48:8d:69:c4:
01:fd:ec:ae:eb:ab:b9:b5:77:5b:3a:55:18:a8:f5:dc:c8:b2:
ae:b1:4d:30:48:ba:77:70:67:d2:95:c4:de:50:4b:cd:9b:b7:
05:5a:2e:17:1e:a1:7b:03:aa:bd:a5:84:92:4e:15:75:c5:2b:
47:3f:34:98:f1:12:93:b0:96:f8:09:88:cd:0d:ba:d5:05:38:
97:f9:60:fe:93:b9:7a:99:ff:aa:cb:e2:1c:53:e3:dc:04:f9:
9f:7b:63:03:ad:b7:c4:22:d7:5c:bf:3b:ec:b3:ec:c2:c8:42:
e8:e8:01:09:08:b3:c8:ac:43:2e:22:7c:d9:5f:0d:00:0d:f7:
dc:93:5e:5c:a7:01:86:a9:7a:10:28:05:f1:39:4e:66:33:59:
88:e9:a3:2e:5f:62:cc:fb:d9:25:0c:25:ed:14:26:01:09:28:
42:a5:c7:d1:95:cb:4b:ef:f3:c4:d3:66:ce:ba:87:66:8e:ff:
b9:2b:77:44:66:c3:b1:24:4f:04:be:96:9e:77:ef:b5:e0:2f:
e0:b2:cb:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeMEyXDgMFFTMKhjgSVd1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjBiNjAxMTM5YmUwMTM1NjllYmY4ZTFiZWI1YTY5NGI5
Yzg3ZWMwHhcNMjUxMDI3MDcwMTI0WhcNMjUxMDI4MDcwMTI0WjAzMTEwLwYDVQQD
EyhlOGJhOTljMzBjZWIwZjE4NDEyMWNmMGYwMGZlZjBhNDJiOTEwN2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtX+wNNzbKnn0u1DwMI1sVFmQ30p
2GZ0UdsOO416cQm5pq1GYpMoDVbWezYzEmobK3xgIBYZzQsNQu0VVurxrPzNT+OJ
Uog4vKU/4BpoTWDTWKSsXjq9q+UmhLf3wZDuYR7oeQ4gmk+m1UP8yMHoY5/gcfKa
628XuDHsH+3aSBrRgBdrnsgG+/Xj1SWykKPWQDwM4Z1GVxDymJ4I98/ex5cae2Fk
MG6WPDc68Jdm0MhxDqfYRjQ9zr3lbSAiv5Bok0GmxDzzWNifFkZOfSNfi7NJ2GRw
mk6ZogzjB7IudrykcT9qCLy+dDR8ECJ6WsSZLtMDz+Tk5mADEf+YZEFw/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOi6mcMM6w8YQSHPDwD+8KQrkQfyMB8GA1UdIwQY
MBaAFGJgtgETm+ATVp6/jhvrWmlLnIfsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEt
MjliYjZhYjJjZjVjLzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEtMjliYjZhYjJjZjVj
LzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6gd8iXC
1kMZ+KTZvwvtwZR3BB+0h665nodVQvpPIurvNtZVGqw7ksbRqHtkBmzPPKZIjWnE
Af3sruurubV3WzpVGKj13MiyrrFNMEi6d3Bn0pXE3lBLzZu3BVouFx6hewOqvaWE
kk4VdcUrRz80mPESk7CW+AmIzQ261QU4l/lg/pO5epn/qsviHFPj3AT5n3tjA623
xCLXXL877LPswshC6OgBCQizyKxDLiJ82V8NAA333JNeXKcBhql6ECgF8TlOZjNZ
iOmjLl9izPvZJQwl7RQmAQkoQqXH0ZXLS+/zxNNmzrqHZo7/uSt3RGbDsSRPBL6W
nnfvteAv4LLLsg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:24 2025 by rpki-client