Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier: YBkqttghNDP6nTMIvD+x3FqINpituIJPqh2XX4IXXUg=
Subject key identifier: 33:05:49:6D:57:A5:44:68:EB:30:F1:5A:D9:77:54:C3:75:80:B1:6A
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 019A7225CE08C406B55B717329FAEDB631AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number: 09C5
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: COcUW0x5kxM0ZoYaE6bjH_ilI5I.roa (hash: DiDBhNFDOT29doleyEuXM5Xz1UWaH+5+crJRRQCdBnI=)
2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: T7PenlJnlgP0bpdhBj2HD4fTLbS6pk8ML545Nr2kZzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ce:08:c4:06:b5:5b:71:73:29:fa:ed:b6:31:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=3305496d57a54468eb30f15ad97754c37580b16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:f4:94:c2:56:dd:3c:b8:e5:e9:1f:ac:d4:
2e:93:0a:8e:37:89:e6:2e:c3:57:be:c4:09:1d:df:
74:83:b7:6a:7f:47:d0:d8:9f:e4:e0:dc:83:eb:f5:
bb:aa:f1:dd:a7:c7:86:0c:20:aa:82:1b:d9:6c:3f:
96:37:08:81:70:e6:ed:ff:01:f9:fa:54:61:18:be:
55:e9:21:6d:5c:ee:11:02:f8:60:dc:38:c7:30:8a:
fc:8d:b5:c0:f5:32:d4:c1:31:21:8b:d5:1e:b6:8e:
fd:1b:eb:96:64:a7:09:1d:aa:cf:39:a9:6b:c9:c0:
e7:bc:1b:91:d3:58:10:7d:a1:af:56:6e:1d:0b:5d:
17:c0:e2:e1:da:01:80:c6:d6:87:d8:77:09:30:40:
f5:90:3e:91:13:fc:12:ff:85:68:55:86:2f:45:c4:
11:d6:e6:04:fa:3b:21:68:ba:64:86:28:be:df:4b:
04:c5:eb:f6:d7:8f:60:a6:6c:df:73:a8:8d:a2:56:
5f:9e:0b:44:38:e4:25:c6:77:f7:1c:df:0f:c5:1b:
bc:4a:5d:52:70:75:4a:76:79:8f:87:0a:2a:b6:5a:
cb:b5:87:d4:a0:0a:ea:0f:75:89:2a:d8:1c:0a:5e:
0c:6e:c0:59:20:66:ee:7a:d9:2b:64:4f:8f:23:7d:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:49:6D:57:A5:44:68:EB:30:F1:5A:D9:77:54:C3:75:80:B1:6A
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6b:af:60:af:75:17:15:04:1c:2c:76:a6:7d:fc:bd:6d:6d:
91:7e:85:ad:e2:51:64:7c:af:59:21:00:8c:58:32:80:3e:41:
7c:7f:aa:b1:20:e1:99:28:14:4f:47:d6:ae:83:4e:af:0a:cc:
d8:b3:7c:3e:bc:69:f4:30:f6:52:c0:c5:c3:70:78:5b:a9:b6:
db:a3:3a:13:81:fc:1f:ec:8b:ec:0c:99:ec:4e:fa:4f:76:0e:
bb:eb:10:b6:16:33:8d:f9:3f:c3:5c:98:bc:25:87:a0:3f:0a:
9a:19:3f:79:18:07:62:4f:7e:31:02:8d:db:60:ef:f6:53:46:
34:62:76:f2:eb:43:d2:54:4c:1c:77:01:72:be:6b:84:6d:a4:
07:43:36:ea:99:48:f6:67:04:c9:d3:8c:b6:06:fb:20:d1:64:
4f:c0:b8:a2:58:c3:05:fd:b8:be:c4:6f:95:58:5d:e7:a1:54:
81:9c:b0:01:3a:8a:68:bb:1f:b8:75:9c:7b:e0:e7:bd:14:27:
29:9c:56:c1:ed:49:60:27:2a:0d:c4:29:7f:8f:7b:6a:f2:41:
1c:18:d5:3e:81:1d:d8:fd:ef:2c:a4:5f:58:a6:36:f9:be:71:
72:2f:c5:20:e1:4a:f6:47:16:1e:27:0d:6b:37:ee:69:38:0f:
c8:40:8c:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJc4IxAa1W3FzKfrttjGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzNlYzFhMjQwMTQzZGFlMTExYmI5MmQxOTJkYWJmNzc1
ZDgxZWMwHhcNMjUxMTExMDkwMTExWhcNMjUxMTEyMDkwMTExWjAzMTEwLwYDVQQD
EygzMzA1NDk2ZDU3YTU0NDY4ZWIzMGYxNWFkOTc3NTRjMzc1ODBiMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa30lMJW3Ty45ekfrNQukwqON4nm
LsNXvsQJHd90g7dqf0fQ2J/k4NyD6/W7qvHdp8eGDCCqghvZbD+WNwiBcObt/wH5
+lRhGL5V6SFtXO4RAvhg3DjHMIr8jbXA9TLUwTEhi9Ueto79G+uWZKcJHarPOalr
ycDnvBuR01gQfaGvVm4dC10XwOLh2gGAxtaH2HcJMED1kD6RE/wS/4VoVYYvRcQR
1uYE+jshaLpkhii+30sExev2149gpmzfc6iNolZfngtEOOQlxnf3HN8PxRu8Sl1S
cHVKdnmPhwoqtlrLtYfUoArqD3WJKtgcCl4MbsBZIGbuetkrZE+PI33I/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMFSW1XpURo6zDxWtl3VMN1gLFqMB8GA1UdIwQY
MBaAFGEz7BokAUPa4RG7ktGS2r93XYHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUt
YzVmZTQ0NDIwYzA5LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUtYzVmZTQ0NDIwYzA5
LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmuvYK91
FxUEHCx2pn38vW1tkX6FreJRZHyvWSEAjFgygD5BfH+qsSDhmSgUT0fWroNOrwrM
2LN8Prxp9DD2UsDFw3B4W6m226M6E4H8H+yL7AyZ7E76T3YOu+sQthYzjfk/w1yY
vCWHoD8Kmhk/eRgHYk9+MQKN22Dv9lNGNGJ28utD0lRMHHcBcr5rhG2kB0M26plI
9mcEydOMtgb7INFkT8C4oljDBf24vsRvlVhd56FUgZywATqKaLsfuHWce+DnvRQn
KZxWwe1JYCcqDcQpf497avJBHBjVPoEd2P3vLKRfWKY2+b5xci/FIOFK9kcWHicN
azfuaTgPyECMpw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:57 2025 by rpki-client