Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: wJ3cvG+syg3qNlHEM8856aoN6F2U9Mgm8H1t1ECrbOM=
Subject key identifier: F7:B7:80:61:77:D7:88:FF:71:E6:56:4B:63:81:0E:34:34:78:C9:19
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 019A71B8CF6077698B6C1E37DA88207AC550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0D1C
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: 4eHPSoa0DwmkpFAZsfzYjd5+ajZfLfenYuSR33NwAwQ=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cf:60:77:69:8b:6c:1e:37:da:88:20:7a:c5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=f7b7806177d788ff71e6564b63810e343478c919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:81:5c:72:df:54:39:7e:dd:5f:07:b9:c8:
f6:4e:51:ec:54:97:35:b0:0f:d6:cf:4d:a4:99:96:
21:d9:f2:81:7f:c0:fb:57:bc:ae:d0:17:1c:4b:b8:
9d:dc:e1:38:73:a2:b2:ad:ee:1a:87:58:b6:8b:92:
c5:a7:de:7f:0b:e7:20:97:13:85:0f:55:f4:c3:e9:
60:ef:c0:99:2d:59:de:1c:83:9b:5d:a0:88:89:cc:
1a:0d:e1:ee:23:ab:98:f8:c4:17:25:56:7c:02:84:
68:75:60:c1:01:a9:31:94:83:5c:9c:32:36:93:3e:
f9:6a:af:bf:93:e9:09:bf:64:7a:b1:6f:de:22:9a:
f1:9e:69:c8:08:f9:c4:89:dd:d0:62:43:2e:f8:e2:
3d:f1:09:19:de:56:01:59:33:49:b5:1f:51:d9:91:
60:54:64:34:60:3e:aa:a2:7f:0f:d5:9f:68:83:7c:
2b:a6:8d:b7:36:74:b2:63:2b:f9:b6:f3:fd:19:c9:
53:78:cc:27:7e:cb:21:c6:50:a0:ac:12:91:3b:a2:
67:89:fb:a5:67:bd:60:0c:62:a4:59:85:d9:fb:15:
ab:0b:f4:90:9b:e7:ca:55:b5:c0:cd:03:e8:9f:3e:
0e:7c:99:c9:aa:b5:b3:c8:6c:07:98:a0:35:00:2b:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B7:80:61:77:D7:88:FF:71:E6:56:4B:63:81:0E:34:34:78:C9:19
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:8e:37:0c:40:73:cb:67:2c:ec:07:0a:39:5f:40:b5:8b:
6a:d1:2a:d2:60:ef:8c:c4:09:f6:5a:d3:b3:dc:cb:52:8c:f5:
52:fe:53:9b:78:20:4a:df:da:d9:19:be:85:a9:43:6a:65:c5:
64:c7:a0:1f:2a:db:42:05:dd:4a:21:d4:a9:40:40:97:39:03:
82:39:ab:b6:1e:ff:ae:7f:59:8c:47:70:57:fc:c5:53:01:fb:
13:8d:29:15:6b:0b:97:ef:30:21:1e:36:fc:55:1a:4f:e9:d1:
35:86:8c:fc:4c:3c:0e:c9:4d:cd:01:85:cc:b4:a1:bf:45:a0:
3b:64:dd:11:bc:8c:81:8e:5b:51:5a:ff:e8:1c:ee:87:00:f2:
0c:26:bc:ee:cf:0e:33:e6:14:25:c6:27:68:13:8d:b6:c4:c4:
98:60:0b:b4:92:8b:83:98:75:72:51:30:b3:dd:bb:b5:f5:52:
68:a1:ee:92:db:fc:ea:07:1c:e8:b1:aa:15:b1:3d:12:a5:8b:
d6:3c:ac:92:9f:8e:de:a6:22:f3:3b:16:f1:34:40:05:96:17:
40:40:15:48:f7:06:05:b9:fa:20:d0:ee:53:8f:26:e8:86:c6:
b2:e8:fd:88:61:e7:1a:9b:c8:2c:ca:6b:ec:61:88:c1:fb:14:
e2:02:86:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuM9gd2mLbB432oggesVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMzg0MTAzMzhlMjFlOGVhYjk0MTE5ZDgwZTQxYTM5NTg0
OTFkZTYwHhcNMjUxMTExMDcwMjA4WhcNMjUxMTEyMDcwMjA4WjAzMTEwLwYDVQQD
EyhmN2I3ODA2MTc3ZDc4OGZmNzFlNjU2NGI2MzgxMGUzNDM0NzhjOTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYWBXHLfVDl+3V8Hucj2TlHsVJc1
sA/Wz02kmZYh2fKBf8D7V7yu0BccS7id3OE4c6Kyre4ah1i2i5LFp95/C+cglxOF
D1X0w+lg78CZLVneHIObXaCIicwaDeHuI6uY+MQXJVZ8AoRodWDBAakxlINcnDI2
kz75aq+/k+kJv2R6sW/eIprxnmnICPnEid3QYkMu+OI98QkZ3lYBWTNJtR9R2ZFg
VGQ0YD6qon8P1Z9og3wrpo23NnSyYyv5tvP9GclTeMwnfsshxlCgrBKRO6Jniful
Z71gDGKkWYXZ+xWrC/SQm+fKVbXAzQPonz4OfJnJqrWzyGwHmKA1ACtQiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe3gGF314j/ceZWS2OBDjQ0eMkZMB8GA1UdIwQY
MBaAFGI4QQM44h6Oq5QRnYDkGjlYSR3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQt
MTNhNThlYjlkOGY1LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQtMTNhNThlYjlkOGY1
LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE86ONwxA
c8tnLOwHCjlfQLWLatEq0mDvjMQJ9lrTs9zLUoz1Uv5Tm3ggSt/a2Rm+halDamXF
ZMegHyrbQgXdSiHUqUBAlzkDgjmrth7/rn9ZjEdwV/zFUwH7E40pFWsLl+8wIR42
/FUaT+nRNYaM/Ew8DslNzQGFzLShv0WgO2TdEbyMgY5bUVr/6BzuhwDyDCa87s8O
M+YUJcYnaBONtsTEmGALtJKLg5h1clEws927tfVSaKHuktv86gcc6LGqFbE9EqWL
1jyskp+O3qYi8zsW8TRABZYXQEAVSPcGBbn6INDuU48m6IbGsuj9iGHnGpvILMpr
7GGIwfsU4gKGhw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:33 2025 by rpki-client