Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: 8gMVBhVhR/yvKmxmqrHbf89ZfZHN2vL+fmESXU4c2PI=
Subject key identifier: 49:C3:1B:8B:B0:34:63:57:78:9E:16:59:0C:67:50:6E:68:09:69:0D
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 019A5A8C3CBC451886A80946E0FE0FC483C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 1716
Signing time: Thu 06 Nov 2025 19:02:11 +0000
Manifest this update: Thu 06 Nov 2025 19:02:11 +0000
Manifest next update: Fri 07 Nov 2025 19:02:11 +0000
Files and hashes: 1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: E2HWP5qOvcAstvxtTVPRKdLejmPvu42el3RAMqTUULs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 19:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5a:8c:3c:bc:45:18:86:a8:09:46:e0:fe:0f:c4:83:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Nov 6 19:02:11 2025 GMT
Not After : Nov 7 19:02:11 2025 GMT
Subject: CN=49c31b8bb0346357789e16590c67506e6809690d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:4e:d9:5f:3e:8a:d5:b8:d4:7c:c4:36:9f:
6c:e0:26:9e:95:03:3d:f2:bc:7b:18:9d:9a:cf:b4:
c2:64:b8:de:bb:2d:97:88:8b:e7:ec:5a:5e:50:86:
16:49:ea:a3:b7:1a:5d:09:44:c8:23:17:a6:e5:6b:
d4:00:aa:34:74:74:d8:59:ca:ce:98:b4:d9:25:43:
5e:48:fb:bb:40:26:cf:fb:45:f3:9a:2d:9a:b2:a8:
f8:c7:58:ad:10:f5:d0:aa:df:79:05:72:9e:e2:9f:
e4:60:42:ea:d4:99:4a:df:8e:03:b9:a8:73:9a:d8:
45:b2:28:ad:ff:a4:71:3c:51:65:e5:3c:86:0e:00:
4e:85:2e:1c:94:2f:7c:a5:23:22:37:8e:19:78:c5:
b6:08:09:f9:4f:b0:62:9f:66:e1:3d:b3:04:e1:cf:
b4:1a:59:c4:be:1a:b7:0e:76:61:74:66:b3:54:ce:
64:21:54:e8:1a:7f:2f:2c:84:f3:65:65:77:1f:39:
f1:49:f6:74:f0:3d:b2:da:3b:93:15:f9:76:7e:f5:
df:ad:c2:b6:b0:b0:37:63:58:bc:2a:4c:92:8d:a9:
f1:e9:6a:f4:45:b6:ba:d8:16:a6:e8:70:9b:d2:ec:
23:bd:25:7e:75:31:a0:2d:07:23:b5:7a:ac:84:da:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C3:1B:8B:B0:34:63:57:78:9E:16:59:0C:67:50:6E:68:09:69:0D
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:97:5a:37:4e:28:e3:d2:ca:7c:9a:d6:3a:0e:3b:14:03:8a:
e8:da:3f:de:00:f2:81:43:63:e8:b4:95:26:c3:f3:c0:98:2a:
76:47:77:e9:10:89:0a:87:a7:fe:77:de:1d:e4:05:c8:fe:e1:
07:72:1c:92:44:e3:a5:76:d9:19:cb:43:25:f8:aa:54:5c:b6:
e1:d0:0c:1b:b8:5a:46:0f:96:ed:46:18:23:68:cb:50:68:34:
ff:8c:45:5e:43:9b:9e:2b:ac:02:1a:3f:13:bb:6d:28:d3:c1:
98:46:df:48:ff:bd:56:4c:c6:eb:8f:15:33:21:2e:3a:ff:52:
bd:e7:50:e4:51:3b:d7:ba:fd:f5:cf:8c:b0:50:2f:ae:5c:04:
d0:e3:c6:61:f3:4f:e2:6f:97:cd:74:39:67:fc:58:9d:e5:49:
5b:49:e3:ac:11:e5:a1:42:50:91:44:85:d6:4c:ea:a1:53:69:
a2:93:b5:20:5f:51:76:84:b5:a7:4f:06:71:bc:ef:c2:01:19:
d0:88:88:ee:12:77:25:cd:84:2d:92:00:ce:a8:c3:4a:8f:9e:
f5:8c:b3:a7:b9:05:95:80:d1:5d:6d:4a:f3:e1:93:a3:ff:35:
12:75:ca:3c:aa:fa:9f:d3:bc:88:6e:b7:c5:bc:8d:86:51:06:
da:15:c4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpajDy8RRiGqAlG4P4PxIPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTEwNmRhYWQzYTk3M2ZkZTk4OTE0ZjdjYzFjY2QzNWQ4
Y2MzYzMwHhcNMjUxMTA2MTkwMjExWhcNMjUxMTA3MTkwMjExWjAzMTEwLwYDVQQD
Eyg0OWMzMWI4YmIwMzQ2MzU3Nzg5ZTE2NTkwYzY3NTA2ZTY4MDk2OTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qxO2V8+itW41HzENp9s4CaelQM9
8rx7GJ2az7TCZLjeuy2XiIvn7FpeUIYWSeqjtxpdCUTIIxem5WvUAKo0dHTYWcrO
mLTZJUNeSPu7QCbP+0Xzmi2asqj4x1itEPXQqt95BXKe4p/kYELq1JlK344Duahz
mthFsiit/6RxPFFl5TyGDgBOhS4clC98pSMiN44ZeMW2CAn5T7Bin2bhPbME4c+0
GlnEvhq3DnZhdGazVM5kIVToGn8vLITzZWV3HznxSfZ08D2y2juTFfl2fvXfrcK2
sLA3Y1i8KkySjanx6Wr0Rba62Bam6HCb0uwjvSV+dTGgLQcjtXqshNoDbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnDG4uwNGNXeJ4WWQxnUG5oCWkNMB8GA1UdIwQY
MBaAFMhRBtqtOpc/3piRT3zBzNNdjMPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUt
ZmVmNDg3MTJhY2FiLzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUtZmVmNDg3MTJhY2Fi
LzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5daN04o
49LKfJrWOg47FAOK6No/3gDygUNj6LSVJsPzwJgqdkd36RCJCoen/nfeHeQFyP7h
B3IckkTjpXbZGctDJfiqVFy24dAMG7haRg+W7UYYI2jLUGg0/4xFXkObniusAho/
E7ttKNPBmEbfSP+9VkzG648VMyEuOv9SvedQ5FE717r99c+MsFAvrlwE0OPGYfNP
4m+XzXQ5Z/xYneVJW0njrBHloUJQkUSF1kzqoVNpopO1IF9RdoS1p08GcbzvwgEZ
0IiI7hJ3Jc2ELZIAzqjDSo+e9Yyzp7kFlYDRXW1K8+GTo/81EnXKPKr6n9O8iG63
xbyNhlEG2hXEuw==
-----END CERTIFICATE-----
Generated at Fri Nov 7 00:27:02 2025 by rpki-client