Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: q3+V3EzR708KQKcZydbuzNplyIEVmc6jM5CNQ3RLlXw=
Subject key identifier: 64:7A:1E:13:44:50:3C:55:C1:29:7E:3E:F4:91:67:83:B1:C3:76:6D
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 019A725C733990F31838E513F8E563C12EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: nMAccy3mB86r4dWPE8XURUatphdHrTd27SdT4yvOiKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:73:39:90:f3:18:38:e5:13:f8:e5:63:c1:2e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=647a1e1344503c55c1297e3ef4916783b1c3766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:a3:23:ae:b3:cb:b7:dd:56:91:ec:95:37:
c8:23:ef:e4:0d:0a:c2:d8:a3:f5:45:60:9f:6f:e8:
4c:da:f0:a8:ee:6c:e4:ff:de:de:45:9b:a6:84:15:
a4:93:6b:7c:b9:72:05:30:dc:c7:54:26:16:66:62:
1b:1c:99:f6:49:45:01:2e:42:82:a8:d6:f1:75:ee:
09:82:bd:45:6d:13:49:9e:86:c4:65:d7:4a:4e:92:
79:88:3d:8d:75:9b:6a:19:9d:12:3b:26:f2:5b:db:
70:5c:7c:b4:a9:0b:84:ac:05:f2:b0:72:6e:68:73:
64:86:33:59:40:e5:85:fc:c0:a7:a8:7a:03:69:d3:
d8:60:80:1d:d8:d7:70:6a:f0:2b:b2:63:4c:ab:eb:
04:44:79:93:94:9b:d0:2e:b3:17:c7:8c:f7:8b:50:
d8:7a:0d:e7:b1:92:e9:8c:ae:ed:4f:0c:78:01:95:
26:15:22:98:bc:c8:f1:3c:73:42:ff:71:d6:9f:7a:
80:5a:15:59:2c:45:ea:89:e1:ab:ea:f9:3b:e1:c0:
a2:6d:02:b9:5c:8a:39:5c:6b:21:0d:c3:9c:07:7b:
d3:ce:95:66:eb:8c:e0:8e:b7:69:cf:27:d2:e9:e2:
05:36:c4:65:da:8e:85:c3:1e:ab:de:50:79:1e:b9:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:1E:13:44:50:3C:55:C1:29:7E:3E:F4:91:67:83:B1:C3:76:6D
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:32:bb:e2:05:5b:08:49:aa:a1:fd:76:77:97:00:98:e1:f7:
89:d4:12:bd:80:65:c2:44:68:94:af:3e:f4:6f:a5:19:0a:c6:
e1:59:9d:20:d5:26:a9:7f:20:57:32:4e:a4:e8:78:ec:c1:9a:
2a:97:d2:be:2d:63:ed:b6:3b:da:20:0f:70:07:c3:ac:f8:0f:
66:d1:fd:44:26:1d:14:2e:04:6b:37:64:df:0d:a7:1d:7b:38:
e5:af:73:e0:d3:08:34:e6:29:df:e0:7d:b1:58:b4:a1:f9:d6:
81:1c:23:ed:25:de:93:6a:8c:7a:73:2b:3b:89:e7:04:75:e6:
36:15:d9:a1:b5:92:db:47:29:d6:ec:8f:d0:b0:07:fa:02:20:
27:47:29:52:92:82:20:83:41:44:9b:ff:66:1c:23:e6:5e:25:
cb:9f:72:a3:56:97:85:39:c7:93:35:e6:a8:68:e8:fc:a3:e6:
b3:6b:64:f4:71:58:57:8e:f0:14:b9:f6:6d:3f:12:7d:60:35:
32:27:4d:0f:eb:36:20:ba:c9:bb:75:5f:4a:cf:8e:2f:cb:4c:
09:4c:4e:48:2e:b7:00:38:c3:65:ac:16:73:98:e0:5b:35:f7:
a6:91:34:31:ef:96:f3:b3:47:7f:05:8b:84:f3:fd:fc:aa:4d:
b5:e7:aa:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXHM5kPMYOOUT+OVjwS60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhNjljODE3MjA0NDg1NDkzMWYxMDBhNTliZDA4OWNi
ODg4MWEwHhcNMjUxMTExMTAwMDUyWhcNMjUxMTEyMTAwMDUyWjAzMTEwLwYDVQQD
Eyg2NDdhMWUxMzQ0NTAzYzU1YzEyOTdlM2VmNDkxNjc4M2IxYzM3NjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u+jI66zy7fdVpHslTfII+/kDQrC
2KP1RWCfb+hM2vCo7mzk/97eRZumhBWkk2t8uXIFMNzHVCYWZmIbHJn2SUUBLkKC
qNbxde4Jgr1FbRNJnobEZddKTpJ5iD2NdZtqGZ0SOybyW9twXHy0qQuErAXysHJu
aHNkhjNZQOWF/MCnqHoDadPYYIAd2NdwavArsmNMq+sERHmTlJvQLrMXx4z3i1DY
eg3nsZLpjK7tTwx4AZUmFSKYvMjxPHNC/3HWn3qAWhVZLEXqieGr6vk74cCibQK5
XIo5XGshDcOcB3vTzpVm64zgjrdpzyfS6eIFNsRl2o6Fwx6r3lB5HrlUpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR6HhNEUDxVwSl+PvSRZ4Oxw3ZtMB8GA1UdIwQY
MBaAFGMRppyBcgRIVJMfEApZvQicuIgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMt
ZDBlMGYyMTM5MzZjLzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMtZDBlMGYyMTM5MzZj
LzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzK74gVb
CEmqof12d5cAmOH3idQSvYBlwkRolK8+9G+lGQrG4VmdINUmqX8gVzJOpOh47MGa
KpfSvi1j7bY72iAPcAfDrPgPZtH9RCYdFC4Eazdk3w2nHXs45a9z4NMINOYp3+B9
sVi0ofnWgRwj7SXek2qMenMrO4nnBHXmNhXZobWS20cp1uyP0LAH+gIgJ0cpUpKC
IINBRJv/Zhwj5l4ly59yo1aXhTnHkzXmqGjo/KPms2tk9HFYV47wFLn2bT8SfWA1
MidND+s2ILrJu3VfSs+OL8tMCUxOSC63ADjDZawWc5jgWzX3ppE0Me+W87NHfwWL
hPP9/KpNteeqPw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:38 2025 by rpki-client