Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier: 8la2JeSzF4DDshMw0Na8ZZ9+TyCShu3MZVJAyDmQZV4=
Subject key identifier: 28:E4:F7:FC:25:C1:41:15:72:14:77:D8:F7:E3:AB:83:3B:F8:C7:5F
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 019A7149C42EF53219D529E1F167E8A6C8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:51 +0000
Manifest this update: Tue 11 Nov 2025 05:00:51 +0000
Manifest next update: Wed 12 Nov 2025 05:00:51 +0000
Files and hashes: 1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: maXTpfT6LFYSMEcIHMqh4A4czk9+BAqz9cZIz8lpkZI=)
2: YP_ojssdziwcanJcHJab_qTOmuY.roa (hash: U3A2fg6Wi6oAAnLmfskViTy7rAEB6sn2k8/iuWaNKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c4:2e:f5:32:19:d5:29:e1:f1:67:e8:a6:c8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Nov 11 05:00:51 2025 GMT
Not After : Nov 12 05:00:51 2025 GMT
Subject: CN=28e4f7fc25c14115721477d8f7e3ab833bf8c75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:c8:69:96:0d:7f:71:95:9c:e3:53:f3:9e:
a3:a3:8d:ec:6c:48:95:eb:82:a9:d1:15:bc:46:37:
92:ac:e7:ef:aa:81:08:11:fd:ac:7e:7b:34:bf:4b:
3f:bf:82:9a:14:32:28:41:47:f1:71:7f:7f:e5:c2:
50:36:5b:96:c4:28:51:4d:0e:b2:62:1b:15:cf:0f:
a9:3b:3c:5c:7c:27:ee:48:12:bb:07:2d:92:92:bf:
a5:e5:59:1a:7b:6a:59:c2:8b:98:1a:d6:b0:09:cb:
e6:36:64:2d:0f:14:88:29:a9:fc:d3:d9:f7:5f:d4:
81:d6:1a:f7:0b:52:26:b9:a7:61:99:00:ae:a5:48:
88:c1:b6:55:88:b5:4f:be:13:36:d1:69:d9:0e:fb:
6e:83:9c:e9:21:f9:3a:1e:d7:24:3d:75:15:ed:0f:
4a:40:c7:8e:97:2d:ab:8d:3b:a8:14:fb:97:0e:68:
cb:86:bf:78:a5:52:65:e7:c3:fb:82:dd:8d:ac:ff:
5f:97:53:c7:69:70:73:44:72:78:7c:3f:6a:6d:ce:
17:27:e7:75:9b:b9:be:23:c0:c5:1a:6d:1f:e8:76:
65:3b:66:4a:6d:d8:88:9e:a5:93:33:40:5b:4b:05:
b8:24:5c:bc:58:2a:56:68:73:0c:4c:ea:2b:3c:4c:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:F7:FC:25:C1:41:15:72:14:77:D8:F7:E3:AB:83:3B:F8:C7:5F
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:95:25:78:1b:09:1b:88:65:e5:e0:d1:83:e5:e8:40:00:bf:
8e:ae:3c:3d:04:d3:3e:3c:63:70:d2:09:f0:10:e8:b9:49:4e:
5b:57:c9:4b:43:f1:ab:eb:a5:f1:c8:d5:33:50:cd:73:07:ef:
b0:77:86:7f:06:9c:93:22:83:d7:ca:89:c9:64:4a:14:5a:8f:
7d:43:76:14:73:84:70:7e:88:90:79:cc:52:32:7f:a9:ff:0a:
55:9f:d0:58:b4:49:4b:81:06:5d:a6:69:3d:c5:09:47:77:d7:
0a:f9:ea:3b:22:7f:5d:1b:5d:0d:66:06:4f:27:97:16:1c:bb:
a9:4c:26:a6:b1:19:22:30:43:6e:d5:f5:53:3f:bb:f9:fd:66:
06:55:b7:98:71:c8:11:06:8f:21:f0:05:4c:81:c1:74:0a:d1:
d3:41:f0:cd:30:56:d6:34:66:1f:90:c0:0c:eb:33:2f:ab:06:
54:42:70:99:fe:89:f5:3f:dc:d1:cc:a1:7b:d3:c3:da:60:1a:
fc:47:a2:8d:65:4f:35:02:75:b0:1a:96:e6:25:7a:64:8f:71:
83:ee:33:fc:f8:29:e0:54:1b:d1:e7:cd:0c:12:ae:36:69:2b:
51:c1:1a:97:29:7d:0c:13:7f:ee:50:f2:77:74:e4:6e:9e:04:
e3:91:26:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxScQu9TIZ1Snh8WfopsjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2MwZTk0MmJmODBhN2Q1NzQ5MGNjN2JiMDQyODViMDJh
ZWZmN2EwHhcNMjUxMTExMDUwMDUxWhcNMjUxMTEyMDUwMDUxWjAzMTEwLwYDVQQD
EygyOGU0ZjdmYzI1YzE0MTE1NzIxNDc3ZDhmN2UzYWI4MzNiZjhjNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UzIaZYNf3GVnONT856jo43sbEiV
64Kp0RW8RjeSrOfvqoEIEf2sfns0v0s/v4KaFDIoQUfxcX9/5cJQNluWxChRTQ6y
YhsVzw+pOzxcfCfuSBK7By2Skr+l5Vkae2pZwouYGtawCcvmNmQtDxSIKan809n3
X9SB1hr3C1ImuadhmQCupUiIwbZViLVPvhM20WnZDvtug5zpIfk6HtckPXUV7Q9K
QMeOly2rjTuoFPuXDmjLhr94pVJl58P7gt2NrP9fl1PHaXBzRHJ4fD9qbc4XJ+d1
m7m+I8DFGm0f6HZlO2ZKbdiInqWTM0BbSwW4JFy8WCpWaHMMTOorPEzbVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjk9/wlwUEVchR32Pfjq4M7+MdfMB8GA1UdIwQY
MBaAFGB8DpQr+Ap9V0kMx7sEKFsCrv96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUh3T2xDdjRDbjFYU1F6SHV3UW9Xd0t1XzNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kZjE1MTItM2ZhNC00MGZjLThkY2Et
NjQzN2FjZDhhM2NmLzEvWUh3T2xDdjRDbjFYU1F6SHV3UW9Xd0t1XzNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kZjE1MTItM2ZhNC00MGZjLThkY2EtNjQzN2FjZDhhM2Nm
LzEvWUh3T2xDdjRDbjFYU1F6SHV3UW9Xd0t1XzNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpUleBsJ
G4hl5eDRg+XoQAC/jq48PQTTPjxjcNIJ8BDouUlOW1fJS0Pxq+ul8cjVM1DNcwfv
sHeGfwackyKD18qJyWRKFFqPfUN2FHOEcH6IkHnMUjJ/qf8KVZ/QWLRJS4EGXaZp
PcUJR3fXCvnqOyJ/XRtdDWYGTyeXFhy7qUwmprEZIjBDbtX1Uz+7+f1mBlW3mHHI
EQaPIfAFTIHBdArR00HwzTBW1jRmH5DADOszL6sGVEJwmf6J9T/c0cyhe9PD2mAa
/EeijWVPNQJ1sBqW5iV6ZI9xg+4z/Pgp4FQb0efNDBKuNmkrUcEalyl9DBN/7lDy
d3Tkbp4E45Emyg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:22 2025 by rpki-client