Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: cLhsp38OH3/7h1C66Kb27tkID5kCPsBDYcFexQn9Pfk=
Subject key identifier: F8:5F:41:FD:43:E3:B6:2B:F4:98:04:04:80:A4:79:D3:6C:E4:FD:94
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 019A300F6ADCBF9FF98F30A5BB8F5BF27210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0F1E
Signing time: Wed 29 Oct 2025 13:01:47 +0000
Manifest this update: Wed 29 Oct 2025 13:01:47 +0000
Manifest next update: Thu 30 Oct 2025 13:01:47 +0000
Files and hashes: 1: 1ZXZrb7_KMMAffteaFQez59OJV0.roa (hash: qoGAFlDhNoBjbRdWcrJQCoTnOEYR10v5Gl4Yr+NRQu4=)
2: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: RPvTIna1jGsnZOWm1zWk8CZxyTnml8yI1d/cZufwbtU=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0f:6a:dc:bf:9f:f9:8f:30:a5:bb:8f:5b:f2:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Oct 29 13:01:47 2025 GMT
Not After : Oct 30 13:01:47 2025 GMT
Subject: CN=f85f41fd43e3b62bf498040480a479d36ce4fd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:a1:d9:57:f6:37:9d:ff:af:26:d6:ea:32:
5b:8f:d5:50:ff:5e:36:31:e3:9f:69:14:ef:9e:47:
d9:da:37:53:8b:94:cf:c8:4d:26:01:04:0b:9a:d6:
cc:ba:73:c4:d8:5a:c1:c3:eb:f9:d2:2b:0a:25:f7:
4d:cf:21:6f:bc:8a:7a:d6:11:3b:26:25:70:81:22:
a2:65:e0:70:57:ad:97:59:62:ef:b3:68:50:1a:6c:
8b:8a:84:21:50:9a:ce:02:64:9c:8a:30:09:5c:2c:
3d:65:7c:60:8d:93:3c:1d:61:76:86:37:b9:3e:94:
6b:bd:2c:1e:ae:03:ba:23:59:eb:a1:57:36:eb:26:
75:f5:ac:8f:22:46:a3:db:a1:9d:c4:94:e3:81:ab:
a6:a5:61:f5:ad:08:f9:e8:52:54:4f:1f:71:66:9c:
16:77:33:b4:03:2d:41:d0:32:05:5f:bb:51:fd:3c:
79:1f:d0:f0:b0:7d:bd:a9:f8:e2:4a:e0:1b:dd:05:
8f:b9:09:ba:da:01:2f:a6:ce:0b:87:67:d5:30:0c:
55:96:98:29:7d:cd:b5:4c:42:51:06:b9:0d:31:bd:
e0:25:81:63:c4:26:f0:02:38:05:72:ea:a2:89:a9:
49:8c:a0:73:44:a2:35:12:e1:59:f5:22:4d:4b:99:
30:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5F:41:FD:43:E3:B6:2B:F4:98:04:04:80:A4:79:D3:6C:E4:FD:94
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ed:e3:0d:27:e8:9c:53:5c:4e:6e:88:c5:9e:7e:0f:a9:c2:
8f:70:b5:d1:76:01:1c:e6:d1:d4:2a:f9:d7:25:1b:ea:0d:92:
34:0f:02:cc:a0:15:b2:87:17:b1:dd:14:02:97:7a:4d:75:10:
a0:f2:b7:89:cc:86:bb:fb:93:5f:80:25:36:1a:36:66:91:38:
ea:1b:63:2f:60:0a:0c:d2:70:a1:30:d9:52:c4:b5:14:2d:68:
40:71:d9:9c:05:9a:69:4a:f5:fb:13:74:74:1a:f9:d2:85:3d:
b6:10:b5:ec:a4:d2:b2:df:ba:ad:00:e9:2f:58:c2:04:91:27:
bb:78:82:8d:67:cf:3a:e5:6e:f0:62:8d:d6:05:96:2e:d4:1f:
cd:cb:fb:3f:19:c7:ca:66:48:e3:ef:29:05:c7:0a:9d:9d:d3:
c1:ab:45:d9:11:75:50:80:6e:c9:55:d2:1e:28:9b:89:1c:7d:
5e:af:1f:81:fd:36:22:d2:d3:e9:05:cb:58:33:39:43:39:b8:
dc:56:f5:f6:ab:23:ae:f6:50:3d:ca:83:f4:03:c0:45:ea:30:
e5:c7:5d:c8:79:0e:c3:a8:1b:68:9d:d2:eb:34:c1:28:e6:ef:
60:7a:91:10:4c:6a:c3:36:e3:e6:ce:f4:b5:33:38:7b:0c:a9:
ac:61:b5:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZowD2rcv5/5jzClu49b8nIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTBjZGQzMWQzYTcxZGExY2U0YTRiZDg1ZjE5ODdlM2Nh
NGVhZmEwHhcNMjUxMDI5MTMwMTQ3WhcNMjUxMDMwMTMwMTQ3WjAzMTEwLwYDVQQD
EyhmODVmNDFmZDQzZTNiNjJiZjQ5ODA0MDQ4MGE0NzlkMzZjZTRmZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37mh2Vf2N53/rybW6jJbj9VQ/142
MeOfaRTvnkfZ2jdTi5TPyE0mAQQLmtbMunPE2FrBw+v50isKJfdNzyFvvIp61hE7
JiVwgSKiZeBwV62XWWLvs2hQGmyLioQhUJrOAmScijAJXCw9ZXxgjZM8HWF2hje5
PpRrvSwergO6I1nroVc26yZ19ayPIkaj26GdxJTjgaumpWH1rQj56FJUTx9xZpwW
dzO0Ay1B0DIFX7tR/Tx5H9DwsH29qfjiSuAb3QWPuQm62gEvps4Lh2fVMAxVlpgp
fc21TEJRBrkNMb3gJYFjxCbwAjgFcuqiialJjKBzRKI1EuFZ9SJNS5kwNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhfQf1D47Yr9JgEBICkedNs5P2UMB8GA1UdIwQY
MBaAFGCQzdMdOnHaHOSkvYXxmH48pOr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2Yt
NzM1MWY4NjliNDJiLzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2YtNzM1MWY4NjliNDJi
LzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAju3jDSfo
nFNcTm6IxZ5+D6nCj3C10XYBHObR1Cr51yUb6g2SNA8CzKAVsocXsd0UApd6TXUQ
oPK3icyGu/uTX4AlNho2ZpE46htjL2AKDNJwoTDZUsS1FC1oQHHZnAWaaUr1+xN0
dBr50oU9thC17KTSst+6rQDpL1jCBJEnu3iCjWfPOuVu8GKN1gWWLtQfzcv7PxnH
ymZI4+8pBccKnZ3TwatF2RF1UIBuyVXSHiibiRx9Xq8fgf02ItLT6QXLWDM5Qzm4
3Fb19qsjrvZQPcqD9APAReow5cddyHkOw6gbaJ3S6zTBKObvYHqREExqwzbj5s70
tTM4ewyprGG1iA==
-----END CERTIFICATE-----
Generated at Wed Oct 29 22:22:23 2025 by rpki-client