Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: zaM+Pd/4Y0CEHnQVBbxXuey2D0hTJC+6R57f8rYHq3w=
Subject key identifier: 1A:41:CB:D9:48:69:18:1D:A0:46:E4:70:68:C0:8B:7E:1C:AE:BF:E2
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 019A70DC0AC0B6B0CFC7E7D387D301602196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 145C
Signing time: Tue 11 Nov 2025 03:01:00 +0000
Manifest this update: Tue 11 Nov 2025 03:01:00 +0000
Manifest next update: Wed 12 Nov 2025 03:01:00 +0000
Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: U08V2SWVAbYihzWwnHM4ezfW2LglkA2+g6Y/HiLvPGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0a:c0:b6:b0:cf:c7:e7:d3:87:d3:01:60:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Nov 11 03:01:00 2025 GMT
Not After : Nov 12 03:01:00 2025 GMT
Subject: CN=1a41cbd94869181da046e47068c08b7e1caebfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:66:96:51:27:65:dc:7c:b5:a5:e3:b7:ce:
c3:c7:83:d5:da:ff:02:60:33:a3:ee:1d:28:94:7d:
86:f4:e9:cb:70:a3:70:89:53:14:cf:35:9d:ba:94:
26:0a:3b:c4:fc:0b:50:82:3a:fa:ec:bd:6b:4c:3f:
28:51:fb:29:78:21:04:c2:81:fd:1a:7b:de:f8:e9:
2b:f8:df:5d:0d:81:94:31:e0:b3:0f:1c:cd:3b:dd:
39:0e:bb:d2:f8:00:9f:5e:cf:a3:50:f8:e5:0b:8c:
fd:af:6a:01:7d:07:f9:5a:89:77:af:6a:77:68:27:
d4:d1:ff:00:5f:c3:29:9d:42:c5:dc:a9:35:51:80:
fe:87:61:47:d8:e0:53:da:3f:ff:40:c4:d4:a5:da:
20:b6:61:0f:df:af:90:4f:0c:84:26:42:8b:e7:ae:
9a:4f:78:70:1a:4c:11:a3:3e:e3:89:f8:c2:8e:fa:
74:22:38:76:4f:d6:e6:29:a4:20:d5:91:d7:6e:2a:
99:5c:ac:51:c1:f8:6a:07:4f:31:e3:13:14:1c:cb:
42:8a:d8:02:2c:e5:d4:3b:f0:fd:cc:51:9d:99:75:
70:1b:06:8a:71:40:9a:18:dc:71:30:22:6b:8d:83:
71:c3:41:94:ec:22:8a:9e:2e:93:8c:ea:17:39:74:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:41:CB:D9:48:69:18:1D:A0:46:E4:70:68:C0:8B:7E:1C:AE:BF:E2
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3f:20:c1:e4:8c:d4:c7:ed:19:6c:a4:93:f7:29:92:98:d6:
00:11:18:4f:e7:c3:ef:8e:0f:b6:67:f6:7e:6e:68:34:c8:53:
ba:7c:d1:9c:28:41:ee:75:b8:04:2b:67:05:cc:75:4f:59:b9:
35:f8:25:24:44:e2:fa:d8:bb:e5:66:57:91:ce:a9:80:de:be:
2c:77:18:dc:18:54:b2:f6:01:4a:40:d7:2f:e4:cb:7f:7e:78:
3a:62:d6:e4:72:29:60:4b:72:04:f8:28:19:12:a3:09:4c:83:
a6:b0:8d:fd:ce:af:d9:e8:7d:6c:d7:33:25:8d:ef:51:f9:e8:
96:4e:e2:a5:1d:d8:e3:1c:06:f2:b5:3c:b1:40:bb:35:92:22:
4a:44:8b:03:52:47:29:6e:ee:74:3d:ce:cc:53:be:b4:49:65:
a2:49:68:99:e9:63:58:ae:27:6a:c7:7f:6f:27:38:51:76:25:
f7:76:a2:10:81:7b:99:91:3e:54:9e:75:2b:6f:8e:95:5d:29:
9d:1e:29:d3:ca:6a:ab:42:91:6d:c0:2b:73:38:99:af:0c:43:
c4:57:c4:a0:1e:44:32:7c:55:bd:3c:3b:4b:e7:47:6c:4d:f2:
87:85:83:01:6a:d9:ef:be:50:92:bf:6d:ae:64:7b:7e:5e:28:
36:ff:3c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3ArAtrDPx+fTh9MBYCGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2NlYTZlMTAzYTIzMjVjNDhjMTY2N2E5OWM3YjE3ZWIz
Y2U3YjYwHhcNMjUxMTExMDMwMTAwWhcNMjUxMTEyMDMwMTAwWjAzMTEwLwYDVQQD
EygxYTQxY2JkOTQ4NjkxODFkYTA0NmU0NzA2OGMwOGI3ZTFjYWViZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gVmllEnZdx8taXjt87Dx4PV2v8C
YDOj7h0olH2G9OnLcKNwiVMUzzWdupQmCjvE/AtQgjr67L1rTD8oUfspeCEEwoH9
Gnve+Okr+N9dDYGUMeCzDxzNO905DrvS+ACfXs+jUPjlC4z9r2oBfQf5Wol3r2p3
aCfU0f8AX8MpnULF3Kk1UYD+h2FH2OBT2j//QMTUpdogtmEP36+QTwyEJkKL566a
T3hwGkwRoz7jifjCjvp0Ijh2T9bmKaQg1ZHXbiqZXKxRwfhqB08x4xMUHMtCitgC
LOXUO/D9zFGdmXVwGwaKcUCaGNxxMCJrjYNxw0GU7CKKni6TjOoXOXTDbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpBy9lIaRgdoEbkcGjAi34crr/iMB8GA1UdIwQY
MBaAFGB86m4QOiMlxIwWZ6mcexfrPOe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lNjE5ODUtZjg4MS00MDM1LWFiNWIt
YzlhOWJhYTQzZjk0LzEvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lNjE5ODUtZjg4MS00MDM1LWFiNWItYzlhOWJhYTQzZjk0
LzEvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoT8gweSM
1MftGWykk/cpkpjWABEYT+fD744Ptmf2fm5oNMhTunzRnChB7nW4BCtnBcx1T1m5
NfglJETi+ti75WZXkc6pgN6+LHcY3BhUsvYBSkDXL+TLf354OmLW5HIpYEtyBPgo
GRKjCUyDprCN/c6v2eh9bNczJY3vUfnolk7ipR3Y4xwG8rU8sUC7NZIiSkSLA1JH
KW7udD3OzFO+tElloklomeljWK4nasd/byc4UXYl93aiEIF7mZE+VJ51K2+OlV0p
nR4p08pqq0KRbcArcziZrwxDxFfEoB5EMnxVvTw7S+dHbE3yh4WDAWrZ775Qkr9t
rmR7fl4oNv88LQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:08 2025 by rpki-client