Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: xIGLCvQkGu40PCij4W7Kg9Osiuib1+F7ucFZqNZ2pmw=
Subject key identifier: CD:7A:F9:82:6C:E1:88:9D:F3:C2:E2:C3:FF:6B:02:08:92:06:E4:71
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019A71EEA7FDAE9F4A15F8EB3B8177AC80F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 1005
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
2: OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa (hash: Nbt+Vb6iqoAZa8JSy2lqdMELR5I1GGwPOjEC79BMqrA=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: 4V7Dxda78zU3XHZTDsGYv0XqGfowXzZmVQyzErez87I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a7:fd:ae:9f:4a:15:f8:eb:3b:81:77:ac:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=cd7af9826ce1889df3c2e2c3ff6b02089206e471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:56:c3:7e:9c:6f:92:b8:f1:67:aa:09:ad:3e:
83:b2:f9:c0:d4:72:64:f3:03:94:0a:75:bb:63:e6:
78:e0:12:71:46:4d:3d:e1:51:e7:50:28:b9:c7:da:
f9:2a:d3:db:20:dd:0d:11:b4:3c:bb:5c:19:a8:0e:
9e:ff:76:71:b6:d3:a3:a1:05:7a:97:bc:c1:bd:98:
37:ff:45:bc:0e:eb:4b:cd:dd:b3:96:96:c1:f9:58:
11:9c:96:ac:88:b1:95:d4:d4:18:c6:71:55:6b:9f:
f8:6d:4f:f6:7b:0c:6f:18:46:89:df:26:b2:26:43:
9c:3c:c1:e9:30:c6:de:2e:56:d9:08:38:dc:dd:3e:
01:53:41:a8:62:80:06:bb:4a:b3:dd:86:02:07:a6:
e9:89:1e:cf:86:5a:0f:46:dc:5c:a3:97:b1:40:ec:
09:7d:60:30:1b:f5:c5:da:51:54:45:f3:3e:c3:be:
ee:5f:4f:32:43:ac:97:cf:4f:f7:ab:40:89:3e:98:
74:10:56:f7:52:20:7b:19:91:be:b5:4c:31:bf:f5:
f8:49:4b:5f:bd:0c:8a:14:d9:8b:51:e5:44:bb:57:
b0:bb:f8:8e:0f:ea:f3:36:d4:2f:34:81:40:60:a8:
6e:75:f1:f1:cc:5e:cf:3b:a4:e1:67:ec:92:e5:57:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:F9:82:6C:E1:88:9D:F3:C2:E2:C3:FF:6B:02:08:92:06:E4:71
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:00:17:4b:ec:1b:32:c6:bb:ff:a5:d3:4e:86:65:fb:38:f3:
13:97:c4:40:2e:9a:3d:92:83:96:96:84:59:78:e7:4f:03:9f:
ee:79:3c:d3:f2:91:19:e8:0a:38:d9:6b:fe:44:3e:1d:31:ec:
06:55:0f:b4:27:c6:f7:c5:a7:8f:f1:1f:3e:5e:b7:31:b0:9e:
82:08:42:20:98:e7:06:6b:e7:bc:98:1c:03:b6:7a:9f:41:27:
e8:62:da:20:a0:7e:f6:fa:99:8a:84:74:85:26:1b:2e:6f:62:
1d:4b:80:00:e5:9a:f0:b9:0d:2e:21:72:59:0f:f5:11:5f:c5:
b5:06:79:8c:20:7c:c6:bd:1b:d6:60:ec:37:a4:f7:e8:25:3c:
ff:c7:ff:ff:48:a6:ae:d8:4b:95:09:98:d3:ba:e6:69:9f:43:
6c:bb:ab:99:7e:67:e9:f1:3d:8f:d4:fe:58:72:b2:75:35:52:
40:74:dd:fc:1f:69:b7:07:e1:fd:89:21:26:d6:02:1d:51:5b:
c4:a5:78:c2:23:2f:ce:0a:fc:5e:40:34:64:5f:7a:6b:b1:74:
d7:89:b0:58:38:30:41:92:2e:11:fb:12:bc:6c:26:ba:c9:6c:
6c:17:14:e7:54:18:93:22:70:0c:ed:99:cc:e1:a6:2f:f9:5f:
61:08:1a:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7qf9rp9KFfjrO4F3rIDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx
MDc1OGMwHhcNMjUxMTExMDgwMDU3WhcNMjUxMTEyMDgwMDU3WjAzMTEwLwYDVQQD
EyhjZDdhZjk4MjZjZTE4ODlkZjNjMmUyYzNmZjZiMDIwODkyMDZlNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71bDfpxvkrjxZ6oJrT6DsvnA1HJk
8wOUCnW7Y+Z44BJxRk094VHnUCi5x9r5KtPbIN0NEbQ8u1wZqA6e/3ZxttOjoQV6
l7zBvZg3/0W8DutLzd2zlpbB+VgRnJasiLGV1NQYxnFVa5/4bU/2ewxvGEaJ3yay
JkOcPMHpMMbeLlbZCDjc3T4BU0GoYoAGu0qz3YYCB6bpiR7PhloPRtxco5exQOwJ
fWAwG/XF2lFURfM+w77uX08yQ6yXz0/3q0CJPph0EFb3UiB7GZG+tUwxv/X4SUtf
vQyKFNmLUeVEu1ewu/iOD+rzNtQvNIFAYKhudfHxzF7PO6ThZ+yS5VcAlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM16+YJs4Yid88Liw/9rAgiSBuRxMB8GA1UdIwQY
MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt
Nzk0NDk3NjU5OWQ4LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4
LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwAXS+wb
Msa7/6XTToZl+zjzE5fEQC6aPZKDlpaEWXjnTwOf7nk80/KRGegKONlr/kQ+HTHs
BlUPtCfG98Wnj/EfPl63MbCegghCIJjnBmvnvJgcA7Z6n0En6GLaIKB+9vqZioR0
hSYbLm9iHUuAAOWa8LkNLiFyWQ/1EV/FtQZ5jCB8xr0b1mDsN6T36CU8/8f//0im
rthLlQmY07rmaZ9DbLurmX5n6fE9j9T+WHKydTVSQHTd/B9ptwfh/YkhJtYCHVFb
xKV4wiMvzgr8XkA0ZF96a7F014mwWDgwQZIuEfsSvGwmuslsbBcU51QYkyJwDO2Z
zOGmL/lfYQga0A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:18 2025 by rpki-client