Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
File: YLuQsWeR3lqwN3oafrgwds_rINo.mft (raw, json)
Hash identifier: QmHAP0fdt5QCTWI1M+WnwiKhJChnmELN2651SfCdG7w=
Subject key identifier: 9D:2C:12:A4:61:FD:40:AF:3B:2F:5F:96:19:1B:B0:25:45:89:BE:EC
Authority key identifier: 60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA
Certificate issuer: /CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da
Certificate serial: 019A71B8425D9648746EB8D7090E34E00C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
Manifest number: CA
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: YLuQsWeR3lqwN3oafrgwds_rINo.crl (hash: ZKYi5rerScB4xQkE7RaXn9OjzmpQYeG5ett99ZeTUn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:42:5d:96:48:74:6e:b8:d7:09:0e:34:e0:0c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=9d2c12a461fd40af3b2f5f96191bb0254589beec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:d5:c9:e6:80:ae:6d:63:46:f0:84:50:f1:
94:56:e4:31:e2:f9:2e:e6:ca:b5:30:54:7a:fb:b1:
60:37:73:4f:57:01:54:03:df:64:69:29:11:97:d5:
66:43:0a:13:8c:91:12:1d:96:c2:7b:55:03:ac:aa:
2f:57:a6:d2:31:70:0c:94:84:36:0c:44:d8:ef:a6:
95:1c:91:e7:10:73:3f:fb:54:cd:b3:54:8d:2e:8f:
a6:97:0e:0e:bd:b8:f8:a1:44:85:09:62:3d:6d:cc:
3f:65:0d:4e:c9:40:8d:ac:04:43:92:89:23:c8:1a:
21:1e:c4:d5:b6:94:b6:3c:52:07:00:29:89:be:0c:
c3:75:92:75:25:f8:d8:ae:41:51:89:b0:d3:92:7d:
e2:0e:89:1f:39:0d:8e:81:f9:66:fe:5b:eb:6e:02:
69:2e:0c:05:a2:67:3c:da:71:ea:98:0d:b0:46:52:
3a:99:8e:9d:a1:0a:b9:63:4b:18:b1:75:74:dc:3c:
39:fd:4a:4e:19:ab:4f:85:fb:8d:b7:44:c0:9e:64:
7c:0f:c6:f9:db:92:71:3e:c2:7f:2b:4c:0e:03:3b:
f5:08:83:5e:90:69:b2:c2:ad:e0:79:e7:e9:31:0a:
6e:21:b3:02:0f:f0:ec:dd:74:9a:77:0a:d0:b7:c4:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2C:12:A4:61:FD:40:AF:3B:2F:5F:96:19:1B:B0:25:45:89:BE:EC
X509v3 Authority Key Identifier:
keyid:60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:81:56:91:c7:e0:b9:9c:4e:83:71:9e:30:74:34:6d:ba:e6:
09:93:42:0a:fc:dd:7a:8b:8b:4d:05:58:d0:7b:80:93:68:4d:
3f:22:c2:8d:29:c3:bc:7d:79:b7:16:b1:38:d6:c5:fd:9f:8b:
6d:93:97:45:1c:40:64:19:39:a3:24:3d:d7:d5:7c:3e:93:65:
06:c5:89:40:12:49:59:28:ec:77:bd:8b:37:67:26:cd:ef:60:
06:a2:8b:12:78:8e:a0:9d:43:a8:5a:6e:82:3e:9e:bb:e7:01:
60:12:89:23:a0:87:d7:87:f3:91:0b:d3:a9:06:b7:19:40:c1:
bb:35:07:d7:14:66:92:b9:ce:78:4e:27:4c:da:19:af:b8:7d:
34:92:6d:95:60:88:87:b4:48:07:be:26:18:3e:f7:7f:6a:3e:
4b:d3:cb:65:f5:3c:66:94:a1:bb:a7:51:df:61:03:99:10:2c:
1c:a9:b9:f5:6d:38:d2:e2:86:61:71:fe:7a:38:ed:d8:b8:f2:
50:e8:c3:f8:cd:90:07:d2:5f:ca:39:c1:80:a9:04:32:28:3a:
74:e0:25:2b:f9:fd:f6:92:aa:fd:a8:1b:22:85:50:fc:30:2e:
48:7b:03:29:fd:50:43:8e:4c:d5:b9:3f:df:2c:2e:9a:31:45:
9d:1c:c1:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEJdlkh0brjXCQ404AxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYmI5MGIxNjc5MWRlNWFiMDM3N2ExYTdlYjgzMDc2Y2Zl
YjIwZGEwHhcNMjUxMTExMDcwMTMyWhcNMjUxMTEyMDcwMTMyWjAzMTEwLwYDVQQD
Eyg5ZDJjMTJhNDYxZmQ0MGFmM2IyZjVmOTYxOTFiYjAyNTQ1ODliZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCXVyeaArm1jRvCEUPGUVuQx4vku
5sq1MFR6+7FgN3NPVwFUA99kaSkRl9VmQwoTjJESHZbCe1UDrKovV6bSMXAMlIQ2
DETY76aVHJHnEHM/+1TNs1SNLo+mlw4Ovbj4oUSFCWI9bcw/ZQ1OyUCNrARDkokj
yBohHsTVtpS2PFIHACmJvgzDdZJ1JfjYrkFRibDTkn3iDokfOQ2Ogflm/lvrbgJp
LgwFomc82nHqmA2wRlI6mY6doQq5Y0sYsXV03Dw5/UpOGatPhfuNt0TAnmR8D8b5
25JxPsJ/K0wOAzv1CINekGmywq3geefpMQpuIbMCD/Ds3XSadwrQt8SyIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0sEqRh/UCvOy9flhkbsCVFib7sMB8GA1UdIwQY
MBaAFGC7kLFnkd5asDd6Gn64MHbP6yDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUx1UXNXZVIzbHF3TjNvYWZyZ3dkc19ySU5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yMmMzMWItMTE0MC00ZjJmLTllYTkt
M2IxZGQzZDU0N2U2LzEvWUx1UXNXZVIzbHF3TjNvYWZyZ3dkc19ySU5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8yMmMzMWItMTE0MC00ZjJmLTllYTktM2IxZGQzZDU0N2U2
LzEvWUx1UXNXZVIzbHF3TjNvYWZyZ3dkc19ySU5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIFWkcfg
uZxOg3GeMHQ0bbrmCZNCCvzdeouLTQVY0HuAk2hNPyLCjSnDvH15txaxONbF/Z+L
bZOXRRxAZBk5oyQ919V8PpNlBsWJQBJJWSjsd72LN2cmze9gBqKLEniOoJ1DqFpu
gj6eu+cBYBKJI6CH14fzkQvTqQa3GUDBuzUH1xRmkrnOeE4nTNoZr7h9NJJtlWCI
h7RIB74mGD73f2o+S9PLZfU8ZpShu6dR32EDmRAsHKm59W040uKGYXH+ejjt2Ljy
UOjD+M2QB9JfyjnBgKkEMig6dOAlK/n99pKq/agbIoVQ/DAuSHsDKf1QQ45M1bk/
3ywumjFFnRzBpg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:22 2025 by rpki-client