Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: Su5iGT4nS03gFYtTz2kK7XW5zawi530043ZY9NomUOg=
Subject key identifier: C3:3E:B1:49:76:B9:37:ED:4B:A8:57:E9:D8:E1:35:65:7A:34:18:4E
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 019A71B8ACFD614E3DC33B8EBB5B3B23BA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: K21ypNssIjRXFOw0fmL843PpW-s.roa (hash: YKKmVgu8U+pfVl80ZWCnY8eOTJS6TtTJ/J+lDMSN7aE=)
2: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: sSvgkEmlmewC8xE3BZy6kO+p7rdKKElIH+IxXoxtTJg=)
3: z_DYGAISByZ4EYZLcYZm9xxTsPA.roa (hash: wyWaYpWMqLeJKfHtKjObHg0XG1oN2Hh8M5UrpYDjJyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ac:fd:61:4e:3d:c3:3b:8e:bb:5b:3b:23:ba:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=c33eb14976b937ed4ba857e9d8e135657a34184e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:c3:df:3c:db:88:33:4b:ae:6e:ba:fa:f3:
58:24:79:4a:5c:63:18:cc:df:f3:7c:e5:38:ed:16:
74:f9:51:76:5d:60:ad:6e:5e:09:71:37:bc:ec:42:
a3:eb:b5:de:5c:34:d7:e5:29:df:0a:b8:ac:50:c0:
1c:b5:6b:1d:a8:55:0a:f7:20:a1:db:80:30:4c:bf:
d5:17:91:26:80:1f:80:b6:22:6a:01:40:92:c3:13:
36:30:4c:a3:c3:9f:ac:6e:40:07:35:ec:4f:1e:cf:
7a:30:aa:94:19:95:2e:5f:42:cc:20:d4:52:a5:0e:
58:c9:79:11:58:5d:04:af:9e:76:90:80:16:df:0f:
e7:de:5c:ba:94:26:3b:8f:53:f4:57:80:11:87:25:
eb:aa:d3:3b:19:01:a3:91:31:37:2a:31:f7:39:d2:
98:bf:f7:f2:ff:5e:b2:9d:bd:5e:26:e1:6c:1f:3b:
2d:d5:9d:d5:5c:80:2e:0d:15:d0:99:9d:15:81:7d:
86:ba:49:97:6f:2b:62:59:88:df:ce:b5:9f:18:8d:
fb:49:b0:a4:73:9b:5e:5d:6d:8b:07:e7:08:9e:8f:
43:e8:45:ba:81:b0:cc:a2:4a:63:2e:1f:88:8b:46:
5a:b6:29:fd:37:ba:6c:a5:86:be:dd:57:f4:57:8e:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:B1:49:76:B9:37:ED:4B:A8:57:E9:D8:E1:35:65:7A:34:18:4E
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6d:d3:25:ed:15:ee:e0:4d:cd:c0:1a:64:63:de:72:13:48:
ff:99:43:0f:fc:7f:59:21:0c:f8:a3:6b:1d:f0:9c:79:60:61:
38:50:93:eb:7a:36:6b:9a:05:fe:b1:5f:3b:64:2a:5d:53:c2:
a1:8f:47:a4:3d:38:56:99:3c:99:e3:c1:ab:3b:31:8a:9c:e2:
bf:63:b6:c7:58:38:d4:7f:1d:c0:26:b1:ca:7e:66:e7:86:bd:
42:75:f3:ea:2b:6b:c6:eb:65:ff:a0:9c:4c:38:a6:2b:ea:72:
a2:3b:f6:83:db:98:91:55:a5:d9:ea:77:1b:67:1b:d6:f2:70:
ce:e5:56:1c:e6:0a:60:be:90:c5:78:93:ba:c7:c9:d3:38:d8:
8a:d0:41:48:b9:55:8a:23:9d:cf:4b:cd:03:f9:04:53:1f:fb:
d4:b1:6a:61:2e:70:69:3c:13:f4:6e:d2:d2:fa:cc:a6:b5:b0:
89:13:7b:61:46:b4:1a:55:52:0d:a9:fb:08:58:98:c4:90:3f:
8f:10:d9:b1:e1:d1:a9:c1:7b:e2:de:d0:a2:bc:23:ab:a7:b5:
0e:b0:87:55:c3:9c:22:e7:fa:5d:57:11:c1:78:d0:39:bc:e4:
f8:0c:16:e1:2f:51:89:9a:4f:ff:24:22:6d:a9:3f:fe:36:f0:
48:cd:53:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuKz9YU49wzuOu1s7I7owMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MjY1YjhiYTllNjE5MGYyNjA5Nzg3Y2Q5ZDkyZWZkNDhl
ZmJkOWQwHhcNMjUxMTExMDcwMTU5WhcNMjUxMTEyMDcwMTU5WjAzMTEwLwYDVQQD
EyhjMzNlYjE0OTc2YjkzN2VkNGJhODU3ZTlkOGUxMzU2NTdhMzQxODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYjD3zzbiDNLrm66+vNYJHlKXGMY
zN/zfOU47RZ0+VF2XWCtbl4JcTe87EKj67XeXDTX5SnfCrisUMActWsdqFUK9yCh
24AwTL/VF5EmgB+AtiJqAUCSwxM2MEyjw5+sbkAHNexPHs96MKqUGZUuX0LMINRS
pQ5YyXkRWF0Er552kIAW3w/n3ly6lCY7j1P0V4ARhyXrqtM7GQGjkTE3KjH3OdKY
v/fy/16ynb1eJuFsHzst1Z3VXIAuDRXQmZ0VgX2GukmXbytiWYjfzrWfGI37SbCk
c5teXW2LB+cIno9D6EW6gbDMokpjLh+Ii0Zatin9N7pspYa+3Vf0V47gywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMM+sUl2uTftS6hX6djhNWV6NBhOMB8GA1UdIwQY
MBaAFMkmW4up5hkPJgl4fNnZLv1I772dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDct
YjdhNjYwOGE4ZmJjLzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMjdkOWItY2FkNi00ZTFkLTlkMDctYjdhNjYwOGE4ZmJj
LzEveVNaYmk2bm1HUThtQ1hoODJka3VfVWp2dlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlG3TJe0V
7uBNzcAaZGPechNI/5lDD/x/WSEM+KNrHfCceWBhOFCT63o2a5oF/rFfO2QqXVPC
oY9HpD04Vpk8mePBqzsxipziv2O2x1g41H8dwCaxyn5m54a9QnXz6itrxutl/6Cc
TDimK+pyojv2g9uYkVWl2ep3G2cb1vJwzuVWHOYKYL6QxXiTusfJ0zjYitBBSLlV
iiOdz0vNA/kEUx/71LFqYS5waTwT9G7S0vrMprWwiRN7YUa0GlVSDan7CFiYxJA/
jxDZseHRqcF74t7Qorwjq6e1DrCHVcOcIuf6XVcRwXjQObzk+AwW4S9RiZpP/yQi
bak//jbwSM1T2Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:13:33 2025 by rpki-client