Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier: fVsN7hgdX911Jf/8ZfEqkSNgN8OHipyeIXK4h2LU1v4=
Subject key identifier: EA:8F:F6:F5:35:99:F0:47:5D:5B:92:2D:6E:18:E8:08:3C:C8:5B:89
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 019A71EE819972FEF138CFB24C88198AEA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number: 034B
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa (hash: t72IL0Bu4xhSTiCzxaWI7CqqsPyLBuuMnaHiD42pbD4=)
2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: LKKP4ZHUOLFdMGZFQQF8hd/W++nUvOkBEZ4DHGbpTd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:81:99:72:fe:f1:38:cf:b2:4c:88:19:8a:ea:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=ea8ff6f53599f0475d5b922d6e18e8083cc85b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:43:b5:96:23:f8:58:5d:56:c1:b2:47:40:
d5:e4:fb:f2:48:83:eb:aa:f3:f8:42:41:6c:ce:77:
17:c1:97:83:80:21:a1:a1:a3:29:06:f6:c5:b3:66:
7f:80:9e:a1:b0:f2:22:76:d8:35:62:25:ad:81:79:
19:19:71:b2:13:40:b3:e7:e0:f9:97:6a:ce:45:49:
78:7c:94:06:6d:9e:b7:2a:90:80:b1:41:41:0f:ba:
4d:cf:c5:92:9d:df:34:3c:9b:0d:ed:53:4d:37:84:
10:c8:35:81:07:0d:bf:79:8f:6e:18:3c:cf:0b:3e:
7d:ef:09:97:72:5a:a4:48:7e:59:51:9e:69:9a:b2:
fe:a9:79:7c:a2:c7:72:80:a4:e1:f2:be:5d:f9:e7:
df:f3:98:db:6a:4d:49:f0:ce:27:a9:79:55:e8:2f:
ea:fb:a8:2a:8c:e9:28:38:d6:01:06:68:5e:98:75:
96:8a:b2:66:97:e0:74:75:0c:bc:da:dc:23:7e:44:
d1:7c:0f:50:d2:50:87:d3:dc:9a:e8:8e:08:95:5f:
a6:dd:e2:9a:38:b8:e8:d7:40:8c:c0:82:a3:ce:6a:
54:0c:fe:f3:fe:bc:c4:2e:df:11:11:c3:61:01:eb:
68:6c:dd:df:2d:ce:6d:8b:18:3e:60:d2:d0:b0:ad:
11:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:F6:F5:35:99:F0:47:5D:5B:92:2D:6E:18:E8:08:3C:C8:5B:89
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ce:43:fa:01:1b:0a:a5:65:d3:98:02:a6:ff:a9:73:6d:b6:
cb:e8:c6:98:6b:1b:01:11:f4:0b:6d:e2:3e:ac:94:90:a4:b4:
1d:b2:8c:d4:78:83:87:44:6a:4a:a7:b7:76:c8:bb:e8:b2:52:
9e:52:35:f3:e7:aa:fc:fc:39:ba:73:93:17:0f:a7:88:1f:60:
51:6d:3a:85:97:9e:c3:a8:89:dc:f5:03:95:21:86:39:76:1e:
19:57:39:49:b4:7e:c4:8b:8f:78:44:2e:99:6b:56:8b:0a:3d:
50:c5:90:64:02:2e:62:fe:c8:f8:21:7d:7c:db:7a:09:5f:8a:
e3:81:40:44:ca:1f:1a:f2:b0:b4:c0:d1:b5:d4:60:39:df:df:
41:b2:00:66:8a:60:91:68:13:56:55:31:4b:26:e5:e4:b7:a8:
b0:38:38:df:06:57:da:d7:20:a5:3b:44:52:c2:41:74:17:66:
8f:3a:5b:9c:c1:de:e3:e9:21:9f:84:c6:f0:11:25:b8:ca:ec:
d0:b5:9e:74:f1:4a:6a:8d:dc:62:23:49:b3:6a:02:96:bd:c1:
29:4f:17:d4:89:d2:b9:33:81:14:1a:cc:1e:8a:67:e1:b3:c4:
f8:c3:de:15:32:45:38:03:ed:41:43:c2:82:95:15:ae:07:2d:
95:8b:99:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7oGZcv7xOM+yTIgZiuo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4N2ZlZmI0ZGI1NzQ2NjgwYWQ2MDM2OTM0NjYyZTIzNmNh
Nzc3NzIwHhcNMjUxMTExMDgwMDQ3WhcNMjUxMTEyMDgwMDQ3WjAzMTEwLwYDVQQD
EyhlYThmZjZmNTM1OTlmMDQ3NWQ1YjkyMmQ2ZTE4ZTgwODNjYzg1Yjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUdDtZYj+FhdVsGyR0DV5PvySIPr
qvP4QkFszncXwZeDgCGhoaMpBvbFs2Z/gJ6hsPIidtg1YiWtgXkZGXGyE0Cz5+D5
l2rORUl4fJQGbZ63KpCAsUFBD7pNz8WSnd80PJsN7VNNN4QQyDWBBw2/eY9uGDzP
Cz597wmXclqkSH5ZUZ5pmrL+qXl8osdygKTh8r5d+eff85jbak1J8M4nqXlV6C/q
+6gqjOkoONYBBmhemHWWirJml+B0dQy82twjfkTRfA9Q0lCH09ya6I4IlV+m3eKa
OLjo10CMwIKjzmpUDP7z/rzELt8REcNhAetobN3fLc5tixg+YNLQsK0ReQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqP9vU1mfBHXVuSLW4Y6Ag8yFuJMB8GA1UdIwQY
MBaAFMh/77TbV0ZoCtYDaTRmLiNsp3dyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhfdnROdFhSbWdLMWdOcE5HWXVJMnluZDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wNzY4MzgtNTU0Ny00Yjk4LTgyYmIt
Njk1MGMxY2I4ODc5LzEveUhfdnROdFhSbWdLMWdOcE5HWXVJMnluZDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wNzY4MzgtNTU0Ny00Yjk4LTgyYmItNjk1MGMxY2I4ODc5
LzEveUhfdnROdFhSbWdLMWdOcE5HWXVJMnluZDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALM5D+gEb
CqVl05gCpv+pc222y+jGmGsbARH0C23iPqyUkKS0HbKM1HiDh0RqSqe3dsi76LJS
nlI18+eq/Pw5unOTFw+niB9gUW06hZeew6iJ3PUDlSGGOXYeGVc5SbR+xIuPeEQu
mWtWiwo9UMWQZAIuYv7I+CF9fNt6CV+K44FARMofGvKwtMDRtdRgOd/fQbIAZopg
kWgTVlUxSybl5LeosDg43wZX2tcgpTtEUsJBdBdmjzpbnMHe4+khn4TG8BEluMrs
0LWedPFKao3cYiNJs2oClr3BKU8X1InSuTOBFBrMHopn4bPE+MPeFTJFOAPtQUPC
gpUVrgctlYuZ9w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:33 2025 by rpki-client