Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: A52x8a1EgtB0ZzIdqBaf2dF6K1wF7A5kJZIYSB55NX8=
Subject key identifier: D4:BD:0D:4D:D7:31:09:2D:AD:15:37:ED:FF:3B:FA:91:B4:F8:95:E5
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019A1F886BB2B5EADD0D4E628F4BAC58DF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0EF0
Signing time: Sun 26 Oct 2025 08:00:25 +0000
Manifest this update: Sun 26 Oct 2025 08:00:25 +0000
Manifest next update: Mon 27 Oct 2025 08:00:25 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: u9NVXBLXSHedsj7yw+XZR6jPtlKsWPyJPunr35+lBvY=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:6b:b2:b5:ea:dd:0d:4e:62:8f:4b:ac:58:df:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Oct 26 08:00:25 2025 GMT
Not After : Oct 27 08:00:25 2025 GMT
Subject: CN=d4bd0d4dd731092dad1537edff3bfa91b4f895e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:94:d3:46:b2:d7:f1:18:cf:4b:33:85:a1:
ca:f0:83:eb:72:1c:43:26:ba:cf:6a:46:db:a3:17:
95:48:1d:d3:ef:95:1e:08:8f:bd:e8:34:84:00:76:
fc:2d:93:e1:5f:31:72:cf:91:f6:9c:5f:09:d6:07:
54:98:13:26:7c:c5:33:7c:a3:28:e4:54:c5:df:9b:
62:a5:8d:38:b6:06:28:1f:df:9a:de:06:9a:40:2d:
6a:2f:75:01:a2:ba:3d:8b:ad:d8:40:bd:9e:7f:81:
f4:31:82:47:4e:67:90:05:6d:1f:65:d1:00:ec:1f:
1b:19:e5:f4:74:86:66:f3:be:fd:a3:8a:45:a6:c7:
61:ff:29:6c:ec:b5:c5:df:7c:f7:40:45:36:ca:c2:
07:e4:86:40:ef:17:3d:5d:6f:26:2e:9a:b0:76:08:
6b:74:6d:29:7d:53:a6:7a:79:71:c1:f6:b5:2c:26:
53:1e:14:9e:32:e2:8c:0a:6a:cf:2c:f5:45:96:8a:
71:f2:c7:de:ba:71:7f:78:2d:7c:18:f7:46:8f:c3:
69:06:32:cd:72:4e:7b:e6:a7:a9:55:47:c2:1d:cf:
08:72:38:a2:fc:24:a2:3c:71:b1:98:de:c5:49:80:
1f:79:04:af:04:71:6a:ba:ad:a9:ff:b6:27:8b:18:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BD:0D:4D:D7:31:09:2D:AD:15:37:ED:FF:3B:FA:91:B4:F8:95:E5
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6c:df:43:97:9f:f8:ae:aa:d6:fd:fc:f9:8a:4e:e1:e1:ba:
08:52:87:ff:d7:4b:c3:75:8f:e8:34:40:fa:d6:69:7e:84:b4:
67:35:58:9c:67:ca:4a:0b:a0:93:c8:f1:e2:57:a1:77:92:a1:
43:df:8d:c0:c9:e3:ff:0b:5e:dc:97:22:f4:c4:c2:5c:37:d1:
4c:6f:d9:25:a6:1b:b6:bf:79:26:24:97:2e:28:76:40:b9:1a:
e7:89:4a:63:87:43:15:d9:54:d4:97:53:89:0f:54:75:2d:1f:
7f:26:c3:29:66:f2:3f:81:6f:51:50:2e:91:ed:56:3c:b4:e5:
55:4e:a3:7b:31:2d:5c:52:91:4b:65:de:23:aa:79:64:cf:b5:
e8:fb:17:24:1e:76:7f:b0:9a:cc:38:6d:23:4b:7e:46:cd:b0:
a9:ad:f4:b8:62:c9:91:13:c0:c6:15:8a:ec:04:6e:5b:92:f4:
77:00:a1:a2:1d:34:25:3d:9d:15:3e:c2:9e:e3:9b:4a:ac:ae:
57:48:33:1c:29:3d:a8:17:7d:38:02:12:a4:41:98:a9:95:e2:
48:67:c1:b9:87:c5:cb:4b:a0:2c:ec:ac:40:00:1c:fc:1d:5d:
e6:d4:50:09:16:4f:c0:eb:8a:b9:7c:20:1a:df:e6:df:1a:4e:
77:8c:0d:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofiGuyterdDU5ij0usWN+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwODAxMWVhNTFhOWZiY2Y4YmFlMGRmMWVkNDk5YTM0MDdk
NjMwNTMwHhcNMjUxMDI2MDgwMDI1WhcNMjUxMDI3MDgwMDI1WjAzMTEwLwYDVQQD
EyhkNGJkMGQ0ZGQ3MzEwOTJkYWQxNTM3ZWRmZjNiZmE5MWI0Zjg5NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeSU00ay1/EYz0szhaHK8IPrchxD
JrrPakbboxeVSB3T75UeCI+96DSEAHb8LZPhXzFyz5H2nF8J1gdUmBMmfMUzfKMo
5FTF35tipY04tgYoH9+a3gaaQC1qL3UBoro9i63YQL2ef4H0MYJHTmeQBW0fZdEA
7B8bGeX0dIZm8779o4pFpsdh/yls7LXF33z3QEU2ysIH5IZA7xc9XW8mLpqwdghr
dG0pfVOmenlxwfa1LCZTHhSeMuKMCmrPLPVFlopx8sfeunF/eC18GPdGj8NpBjLN
ck575qepVUfCHc8Icjii/CSiPHGxmN7FSYAfeQSvBHFquq2p/7YnixgG9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS9DU3XMQktrRU37f87+pG0+JXlMB8GA1UdIwQY
MBaAFGCAEepRqfvPi64N8e1JmjQH1jBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80ZjBlYzUtNTRkMi00MGZiLTk0OTgt
NzQyZjg2OTFiZWFhLzEvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80ZjBlYzUtNTRkMi00MGZiLTk0OTgtNzQyZjg2OTFiZWFh
LzEvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWzfQ5ef
+K6q1v38+YpO4eG6CFKH/9dLw3WP6DRA+tZpfoS0ZzVYnGfKSgugk8jx4lehd5Kh
Q9+NwMnj/wte3Jci9MTCXDfRTG/ZJaYbtr95JiSXLih2QLka54lKY4dDFdlU1JdT
iQ9UdS0ffybDKWbyP4FvUVAuke1WPLTlVU6jezEtXFKRS2XeI6p5ZM+16PsXJB52
f7CazDhtI0t+Rs2wqa30uGLJkRPAxhWK7ARuW5L0dwChoh00JT2dFT7CnuObSqyu
V0gzHCk9qBd9OAISpEGYqZXiSGfBuYfFy0ugLOysQAAc/B1d5tRQCRZPwOuKuXwg
Gt/m3xpOd4wNSQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:37:09 2025 by rpki-client