Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: +rgr6LAtQJNCzc5ytsRdWkoiid+j7tIYYMW7V9CXZZg=
Subject key identifier: 70:53:38:F4:C1:1A:79:2E:B0:C6:5F:9E:6F:5D:5D:1D:3D:55:0A:65
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 019A5119A1AB838559FD040D500232F46EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 23:00:25 +0000
Manifest this update: Tue 04 Nov 2025 23:00:25 +0000
Manifest next update: Wed 05 Nov 2025 23:00:25 +0000
Files and hashes: 1: 1-4YCAM0PPWpbsIo98h9fkDFWnfg.roa (hash: 3vMBuIr7SB4QB0M6+bNSVLgKbzy+afGhB2NFcCi6J/M=)
2: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: wvNOptHPVwo+qJZTzo2Pc51ou+NEyTt3dwfUa2n8FEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:a1:ab:83:85:59:fd:04:0d:50:02:32:f4:6e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Nov 4 23:00:25 2025 GMT
Not After : Nov 5 23:00:25 2025 GMT
Subject: CN=705338f4c11a792eb0c65f9e6f5d5d1d3d550a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:a9:43:44:c4:38:e3:76:3c:be:5d:57:1b:
89:61:cc:68:63:3f:58:bf:7f:1b:4c:2b:a1:01:d1:
82:6c:c4:70:aa:2e:7b:d0:2b:c0:1e:ce:03:19:e2:
60:17:ec:d4:37:0b:dd:a2:8b:0d:1d:a1:de:54:fa:
f3:e5:00:95:e6:5a:f3:6c:0e:30:00:94:3f:e9:38:
16:c6:93:18:0f:45:a4:63:e7:1d:b7:08:4a:4a:99:
26:75:cc:86:bd:10:34:12:f1:e5:07:92:2e:d5:ac:
33:34:f1:c7:16:ff:4f:9a:7e:da:72:a8:b9:59:e1:
c7:f0:a0:93:95:1a:b9:6e:73:98:13:3b:32:34:60:
30:fa:86:e1:a5:0f:df:ee:74:3f:92:c8:ab:96:ac:
7e:7b:c2:fb:25:90:45:62:e8:3e:eb:0a:01:f7:b7:
5f:92:3a:84:8a:99:9b:b4:d3:e0:ca:83:69:3e:60:
b3:8c:b2:05:fb:4e:99:66:f4:b2:1f:84:6e:89:50:
2d:a6:2e:c9:53:02:2a:f8:a7:f0:bc:a0:90:0d:da:
11:14:5c:2b:1a:60:ab:cc:a2:79:9c:c8:d9:5e:e6:
a6:1a:8b:30:a5:58:45:9f:1d:d2:59:fc:bd:73:ea:
3c:aa:6c:e4:07:bc:d0:90:4a:1f:f9:f7:28:39:7c:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:53:38:F4:C1:1A:79:2E:B0:C6:5F:9E:6F:5D:5D:1D:3D:55:0A:65
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1b:a8:76:c8:39:bd:da:30:43:08:42:b4:5d:c2:d2:97:84:
59:cc:e4:c7:20:51:24:44:2b:d5:f5:ad:26:0d:91:20:e7:e2:
9b:45:07:43:f3:96:bd:16:aa:18:68:30:3b:a4:0f:4b:92:b6:
80:7d:f6:a8:7a:b2:c8:cd:70:f1:24:48:8c:2e:d7:be:e3:9a:
73:24:46:ad:90:94:0d:d6:ef:3e:c7:f4:aa:92:c6:a5:e0:75:
57:c2:1f:4d:14:a8:66:53:0c:b0:3b:c1:04:cd:8c:27:46:7d:
02:0e:21:6c:c5:fc:7b:dd:5b:2f:b7:ff:e7:2a:75:39:4b:12:
84:5d:c9:48:b1:eb:4a:8e:19:a5:e1:3c:39:63:af:0a:f1:61:
fb:a5:f4:4c:b9:3b:77:6b:0d:29:f0:1d:95:41:7e:2f:9e:19:
72:77:0b:94:b8:a1:9f:5d:ac:a7:58:43:c5:52:ed:ec:3c:db:
81:22:40:9d:02:0c:55:ab:5c:53:14:98:b8:24:49:56:91:a2:
32:e9:37:54:d2:84:be:9f:13:9d:71:fc:53:27:e9:2b:06:9f:
55:f9:98:54:0c:6e:a8:8b:c1:92:dd:52:7c:39:8e:fd:03:0f:
c8:ee:dd:8b:2e:e9:05:d7:6b:89:1e:c3:ec:03:21:ed:77:62:
a3:aa:d6:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGaGrg4VZ/QQNUAIy9G7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDc3ZjIyYzY0MjhiYzg4OWIzNjViMDA2Y2I1MjQ4ZDRi
ZjYxY2YwHhcNMjUxMTA0MjMwMDI1WhcNMjUxMTA1MjMwMDI1WjAzMTEwLwYDVQQD
Eyg3MDUzMzhmNGMxMWE3OTJlYjBjNjVmOWU2ZjVkNWQxZDNkNTUwYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneOpQ0TEOON2PL5dVxuJYcxoYz9Y
v38bTCuhAdGCbMRwqi570CvAHs4DGeJgF+zUNwvdoosNHaHeVPrz5QCV5lrzbA4w
AJQ/6TgWxpMYD0WkY+cdtwhKSpkmdcyGvRA0EvHlB5Iu1awzNPHHFv9Pmn7acqi5
WeHH8KCTlRq5bnOYEzsyNGAw+obhpQ/f7nQ/ksirlqx+e8L7JZBFYug+6woB97df
kjqEipmbtNPgyoNpPmCzjLIF+06ZZvSyH4RuiVAtpi7JUwIq+KfwvKCQDdoRFFwr
GmCrzKJ5nMjZXuamGoswpVhFnx3SWfy9c+o8qmzkB7zQkEof+fcoOXy65QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBTOPTBGnkusMZfnm9dXR09VQplMB8GA1UdIwQY
MBaAFGAHfyLGQovIibNlsAbLUkjUv2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDct
ODdmZTJlNTRiYTc5LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDctODdmZTJlNTRiYTc5
LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBuodsg5
vdowQwhCtF3C0peEWczkxyBRJEQr1fWtJg2RIOfim0UHQ/OWvRaqGGgwO6QPS5K2
gH32qHqyyM1w8SRIjC7XvuOacyRGrZCUDdbvPsf0qpLGpeB1V8IfTRSoZlMMsDvB
BM2MJ0Z9Ag4hbMX8e91bL7f/5yp1OUsShF3JSLHrSo4ZpeE8OWOvCvFh+6X0TLk7
d2sNKfAdlUF+L54ZcncLlLihn12sp1hDxVLt7DzbgSJAnQIMVatcUxSYuCRJVpGi
Muk3VNKEvp8TnXH8UyfpKwafVfmYVAxuqIvBkt1SfDmO/QMPyO7diy7pBddriR7D
7AMh7Xdio6rWPQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:20:24 2025 by rpki-client