Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: h31CvK7IwCA0GdWan8fJhwtt/SSmpxuNuvP07E0A5+s=
Subject key identifier: F7:53:D9:9D:5E:70:E8:0F:55:0F:F8:0F:A9:03:92:EA:EE:8A:66:75
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 019A6DDAD6D70BBD3764737C1236F4E7E77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0DFF
Signing time: Mon 10 Nov 2025 13:00:49 +0000
Manifest this update: Mon 10 Nov 2025 13:00:49 +0000
Manifest next update: Tue 11 Nov 2025 13:00:49 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: M4k7/2i3rdKpPekzHUfkRJ1csqtB6AJMusayivffsps=)
2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 08:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:da:d6:d7:0b:bd:37:64:73:7c:12:36:f4:e7:e7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Nov 10 13:00:49 2025 GMT
Not After : Nov 11 13:00:49 2025 GMT
Subject: CN=f753d99d5e70e80f550ff80fa90392eaee8a6675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:0f:c5:b4:99:ca:f3:c7:87:73:4d:a4:f4:
6a:ef:7a:c4:ae:4c:0b:51:1b:de:ed:8f:45:92:47:
39:e9:b9:de:4a:3f:10:fc:27:ec:e8:e6:c9:03:66:
1e:22:65:8f:1f:f8:cb:c1:ae:6b:aa:e6:e4:56:52:
e4:e2:72:5b:e2:93:b5:b8:ad:d2:24:88:44:cc:2c:
02:19:94:fb:0b:d1:ae:11:2a:bf:25:8e:4a:49:ef:
62:81:bf:82:9c:f8:8a:5d:63:0c:1f:bc:e7:3a:fe:
56:c8:11:15:ca:a8:c9:1c:50:6a:14:65:a2:b5:30:
69:75:ef:de:28:8b:e1:00:0c:64:c8:12:41:33:6c:
f2:36:e8:f8:97:51:63:90:8f:39:df:a9:d7:c4:e4:
7b:88:ed:f8:71:68:a0:3d:a6:1a:fd:04:05:31:32:
15:92:67:3f:4e:69:bd:42:78:c5:2f:fa:30:b6:b9:
eb:5a:01:f3:95:fc:08:e0:b9:0d:ca:7c:83:52:70:
c0:7c:e6:96:bc:9e:4d:1f:27:5b:fe:b6:88:06:6d:
a0:5d:35:bc:a6:92:bb:30:47:8a:e5:5a:f2:db:21:
ad:f0:c4:76:c2:c5:72:05:ad:1f:ee:76:86:28:9f:
8f:5b:9a:28:dd:fe:7f:f7:44:81:a5:68:7a:48:59:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:53:D9:9D:5E:70:E8:0F:55:0F:F8:0F:A9:03:92:EA:EE:8A:66:75
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f6:ce:62:7f:4f:34:32:80:3d:8c:5a:21:53:e3:92:0f:ad:
f2:a7:c8:1d:b5:44:0a:93:e8:87:59:ab:e5:4f:af:ec:63:a1:
29:0d:85:3a:1c:f6:d3:6a:87:ca:36:62:ea:4b:1d:ce:3a:e7:
2c:74:af:ab:71:4f:1e:f3:d4:ba:58:da:01:c4:81:05:08:c8:
2c:1b:49:cc:bd:46:cb:57:38:57:c9:76:a2:3c:0a:d0:60:9a:
71:96:83:75:24:95:a9:24:4e:6b:6f:b0:45:10:d5:4e:de:7f:
fb:23:89:cc:91:e4:cd:d4:db:49:1b:ef:49:d7:3b:c2:a6:f4:
47:39:22:d7:98:29:36:1c:26:df:be:c7:0a:b6:22:a3:1a:39:
fd:f3:b2:99:5f:20:ce:23:6f:0c:62:f9:5d:3b:aa:9f:c6:fb:
ba:7b:cc:0d:e9:8d:3f:dc:4f:db:c6:69:f7:bf:8f:3a:3e:89:
38:cf:5e:94:c1:d8:31:60:9b:b2:3f:31:24:ae:b4:37:a2:b4:
43:d0:dd:9c:81:ce:dd:65:95:2f:7f:5e:b9:35:72:81:13:56:
eb:37:63:42:4d:13:e2:81:8e:7d:13:b1:26:05:e3:75:7d:e5:
fc:56:9c:14:dc:45:fc:62:28:b5:b5:65:11:67:8d:e5:04:4d:
c6:1e:66:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpt2tbXC703ZHN8Ejb05+d9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzMzY2Q2ZjFiNTljMGI2ODJlMWRhMzg5MjM3ZWRhM2U5
ZGE5MTgwHhcNMjUxMTEwMTMwMDQ5WhcNMjUxMTExMTMwMDQ5WjAzMTEwLwYDVQQD
EyhmNzUzZDk5ZDVlNzBlODBmNTUwZmY4MGZhOTAzOTJlYWVlOGE2Njc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlEPxbSZyvPHh3NNpPRq73rErkwL
URve7Y9Fkkc56bneSj8Q/Cfs6ObJA2YeImWPH/jLwa5rqubkVlLk4nJb4pO1uK3S
JIhEzCwCGZT7C9GuESq/JY5KSe9igb+CnPiKXWMMH7znOv5WyBEVyqjJHFBqFGWi
tTBpde/eKIvhAAxkyBJBM2zyNuj4l1FjkI8536nXxOR7iO34cWigPaYa/QQFMTIV
kmc/Tmm9QnjFL/owtrnrWgHzlfwI4LkNynyDUnDAfOaWvJ5NHydb/raIBm2gXTW8
ppK7MEeK5Vry2yGt8MR2wsVyBa0f7naGKJ+PW5oo3f5/90SBpWh6SFmmuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdT2Z1ecOgPVQ/4D6kDkuruimZ1MB8GA1UdIwQY
MBaAFGAzPNbxtZwLaC4do4kjfto+nakYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDct
Y2RiMjgxYTJiM2E4LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDctY2RiMjgxYTJiM2E4
LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/bOYn9P
NDKAPYxaIVPjkg+t8qfIHbVECpPoh1mr5U+v7GOhKQ2FOhz202qHyjZi6ksdzjrn
LHSvq3FPHvPUuljaAcSBBQjILBtJzL1Gy1c4V8l2ojwK0GCacZaDdSSVqSROa2+w
RRDVTt5/+yOJzJHkzdTbSRvvSdc7wqb0Rzki15gpNhwm377HCrYioxo5/fOymV8g
ziNvDGL5XTuqn8b7unvMDemNP9xP28Zp97+POj6JOM9elMHYMWCbsj8xJK60N6K0
Q9DdnIHO3WWVL39euTVygRNW6zdjQk0T4oGOfROxJgXjdX3l/FacFNxF/GIotbVl
EWeN5QRNxh5mDg==
-----END CERTIFICATE-----
Generated at Mon Nov 10 15:47:16 2025 by rpki-client