Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: 2nQdtSfFHfHKtw0PtzmZH0alTJ+ylcTJq4FMRfjd2Z8=
Subject key identifier: C4:5B:13:19:24:A3:B2:4A:F7:FC:B9:A2:D3:CC:A1:6C:33:98:FE:59
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 019A7293FC628D49A61378929CB5DC703C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=)
2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: GqbiR7fXWO3q2g6ZJ8bk7QskxrUksHdW0Lqf+G3X3Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fc:62:8d:49:a6:13:78:92:9c:b5:dc:70:3c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=c45b131924a3b24af7fcb9a2d3cca16c3398fe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:27:4c:9a:fd:60:42:6e:1c:c9:f4:e3:57:
4b:b1:fe:b6:33:ed:f4:61:b5:72:92:46:e3:01:0b:
2d:8e:4b:7a:73:a5:99:47:b5:45:23:08:93:08:16:
b5:72:cb:39:98:ca:9c:b3:c1:41:45:f8:69:89:97:
83:c2:5e:42:dd:60:01:c5:a9:58:bd:a3:b2:cc:3d:
ec:90:ea:76:25:26:85:2a:bb:e3:a7:4d:8c:33:17:
4c:e4:57:76:b4:4f:9a:67:e1:ed:d2:dc:3b:df:cf:
d6:5f:7c:79:cf:4e:3c:f7:d8:65:82:89:70:a5:bf:
16:93:95:c7:ea:ab:ab:15:ae:18:9e:2e:7f:5b:bc:
9f:a5:04:29:87:06:fe:77:e3:e0:30:ed:f3:6e:bd:
c4:0e:9c:e7:9f:54:f1:18:af:f4:68:bd:03:bc:c1:
c7:22:4b:81:8a:ca:d0:1a:63:d6:7a:19:34:69:df:
3d:21:f5:70:9f:4e:33:a1:ba:84:7a:b7:29:40:55:
2f:6f:ec:e7:64:36:d9:3b:6a:7d:50:96:68:28:2e:
b6:93:35:8c:c3:3e:3a:0c:5d:f1:ff:3b:64:90:9a:
a1:cc:87:9c:5c:1e:f6:c2:69:f4:c9:00:e0:d9:59:
84:01:aa:3e:b0:54:c2:ed:99:b7:52:68:53:71:8d:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:13:19:24:A3:B2:4A:F7:FC:B9:A2:D3:CC:A1:6C:33:98:FE:59
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d2:0e:78:c3:fe:39:f3:8f:0f:8d:4b:05:e5:cb:ce:eb:32:
ea:12:07:a1:09:9e:7b:f1:a5:8e:36:ab:96:da:09:35:fe:e4:
80:5c:6b:f3:24:a4:31:bb:e6:13:a6:38:3b:a7:40:38:a5:d2:
f5:26:04:95:db:91:aa:c7:39:58:b0:cd:85:0b:50:ba:80:42:
7b:dc:f9:83:1a:5d:52:44:d0:9c:8f:63:22:5d:e4:4f:f9:99:
b8:84:67:23:92:11:11:6e:6a:07:84:8c:3f:ab:a2:8c:ca:f6:
53:8b:62:12:cc:f8:95:cd:60:bf:17:67:f8:20:a5:52:35:01:
1c:50:5c:0e:3a:de:0e:f7:63:ce:13:64:22:0b:80:44:46:14:
f0:0a:89:90:2c:11:ee:b7:b9:77:5c:e4:49:fb:8f:26:5a:f4:
6d:a3:c6:a6:d2:a6:35:c2:d0:32:66:d8:7d:7c:68:f0:68:22:
20:0b:f9:8b:c9:78:f8:f2:d6:52:63:21:29:a3:9f:1c:d8:4e:
3e:cd:f8:f9:c5:5b:51:c6:b8:5a:bc:b7:79:89:61:1d:06:88:
b1:5a:8b:7d:8b:07:e6:e1:c0:47:47:cf:22:8d:41:6f:db:99:
02:92:cf:12:c7:f1:5a:b0:36:f0:ee:9e:02:06:b6:a5:26:6c:
89:ac:df:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk/xijUmmE3iSnLXccDx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjFlMzFjMDlmZTgyNmZlNGQ3OTJlN2ZhODg1NWUwYWQz
OTM0MmEwHhcNMjUxMTExMTEwMTMyWhcNMjUxMTEyMTEwMTMyWjAzMTEwLwYDVQQD
EyhjNDViMTMxOTI0YTNiMjRhZjdmY2I5YTJkM2NjYTE2YzMzOThmZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV8nTJr9YEJuHMn041dLsf62M+30
YbVykkbjAQstjkt6c6WZR7VFIwiTCBa1css5mMqcs8FBRfhpiZeDwl5C3WABxalY
vaOyzD3skOp2JSaFKrvjp02MMxdM5Fd2tE+aZ+Ht0tw738/WX3x5z04899hlgolw
pb8Wk5XH6qurFa4Yni5/W7yfpQQphwb+d+PgMO3zbr3EDpznn1TxGK/0aL0DvMHH
IkuBisrQGmPWehk0ad89IfVwn04zobqEercpQFUvb+znZDbZO2p9UJZoKC62kzWM
wz46DF3x/ztkkJqhzIecXB72wmn0yQDg2VmEAao+sFTC7Zm3UmhTcY3bNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRbExkko7JK9/y5otPMoWwzmP5ZMB8GA1UdIwQY
MBaAFGGx4xwJ/oJv5NeS5/qIVeCtOTQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mYjJhNDUtOGQ5NC00YThkLWJjYjAt
NjE5MWI5ZDBjZGEzLzEvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mYjJhNDUtOGQ5NC00YThkLWJjYjAtNjE5MWI5ZDBjZGEz
LzEvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadIOeMP+
OfOPD41LBeXLzusy6hIHoQmee/GljjarltoJNf7kgFxr8ySkMbvmE6Y4O6dAOKXS
9SYElduRqsc5WLDNhQtQuoBCe9z5gxpdUkTQnI9jIl3kT/mZuIRnI5IREW5qB4SM
P6uijMr2U4tiEsz4lc1gvxdn+CClUjUBHFBcDjreDvdjzhNkIguAREYU8AqJkCwR
7re5d1zkSfuPJlr0baPGptKmNcLQMmbYfXxo8GgiIAv5i8l4+PLWUmMhKaOfHNhO
Ps34+cVbUca4Wry3eYlhHQaIsVqLfYsH5uHAR0fPIo1Bb9uZApLPEsfxWrA28O6e
Aga2pSZsiazf6g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:03:29 2025 by rpki-client