Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/573ca7-adbd-4fed-a8b5-471dba3ab3a7/1/YdNdRlNgAjlEFjith1akmIFVaME.mft
File: YdNdRlNgAjlEFjith1akmIFVaME.mft (raw, json)
Hash identifier: 8a/6zL5Jio4pOftYTn6BbbKmg6UrQrOFetNjwql/Uck=
Subject key identifier: BF:C1:A6:82:E6:4F:91:C8:9B:8B:EA:62:A2:E1:BB:28:71:C5:BC:89
Authority key identifier: 61:D3:5D:46:53:60:02:39:44:16:38:AD:87:56:A4:98:81:55:68:C1
Certificate issuer: /CN=61d35d4653600239441638ad8756a498815568c1
Certificate serial: 019A71B7E9BA914E1A70F92899F799ACB6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdNdRlNgAjlEFjith1akmIFVaME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/573ca7-adbd-4fed-a8b5-471dba3ab3a7/1/YdNdRlNgAjlEFjith1akmIFVaME.mft
Manifest number: 33
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: YdNdRlNgAjlEFjith1akmIFVaME.crl (hash: IKpHVrWVsHLLbb/EfUOZ3PVVYlbSEBUya9K2dSfwk1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/573ca7-adbd-4fed-a8b5-471dba3ab3a7/1/YdNdRlNgAjlEFjith1akmIFVaME.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/573ca7-adbd-4fed-a8b5-471dba3ab3a7/1/YdNdRlNgAjlEFjith1akmIFVaME.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdNdRlNgAjlEFjith1akmIFVaME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e9:ba:91:4e:1a:70:f9:28:99:f7:99:ac:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d35d4653600239441638ad8756a498815568c1
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=bfc1a682e64f91c89b8bea62a2e1bb2871c5bc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:a9:4b:fd:d1:54:4d:bc:fb:f9:16:38:43:
e4:de:d4:57:78:8a:31:92:1c:5d:18:14:ac:88:ca:
62:10:ad:0e:86:f7:82:58:0b:1f:30:31:5b:5b:12:
44:c2:ba:6e:de:bd:27:76:09:ec:43:c0:f0:87:0e:
e1:fe:1a:1c:0d:38:94:00:bc:97:dd:b4:49:1d:bb:
1c:a1:f5:19:db:c6:a2:d1:53:3c:ab:f6:aa:36:07:
d3:bf:71:30:93:02:d7:25:ce:6c:c1:b6:17:1a:92:
15:b8:4f:b7:83:34:a4:ff:a8:cf:52:96:1e:56:07:
37:9b:e9:a9:03:df:7b:25:1f:10:4f:58:1e:cd:1c:
4d:c1:a9:33:7f:f9:84:59:56:8a:a2:6d:3e:3b:1b:
23:34:29:5f:28:2c:e5:2b:b2:e9:98:50:81:f8:86:
e6:86:49:16:8a:23:3e:8a:7e:2d:40:9e:1b:60:23:
4d:a0:ce:e7:5b:f5:e1:c2:1e:9a:b5:85:6a:2d:19:
9f:22:64:97:5c:e6:67:6b:e0:02:be:f3:f0:bf:28:
ab:cc:69:72:e9:58:fe:ff:c8:98:fa:40:ac:54:59:
9f:9d:a6:b0:60:9d:9a:9c:2f:b4:d0:4a:18:5a:37:
37:04:fb:a9:4f:20:94:46:fa:45:f7:15:f2:48:94:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C1:A6:82:E6:4F:91:C8:9B:8B:EA:62:A2:E1:BB:28:71:C5:BC:89
X509v3 Authority Key Identifier:
keyid:61:D3:5D:46:53:60:02:39:44:16:38:AD:87:56:A4:98:81:55:68:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdNdRlNgAjlEFjith1akmIFVaME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/573ca7-adbd-4fed-a8b5-471dba3ab3a7/1/YdNdRlNgAjlEFjith1akmIFVaME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/573ca7-adbd-4fed-a8b5-471dba3ab3a7/1/YdNdRlNgAjlEFjith1akmIFVaME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:10:3e:f3:46:92:a4:cc:c7:3a:40:69:ea:c3:c1:b3:c9:01:
9e:de:d0:ec:c5:5f:c4:96:7c:89:13:3b:c7:f8:48:6e:d5:25:
80:cb:c9:d5:10:ad:50:c2:ba:52:a2:99:ca:ac:86:b8:7d:92:
b2:c8:45:c9:74:73:2a:31:07:ec:0b:f3:2a:94:12:5d:29:65:
3f:4b:2c:69:65:57:cb:ec:54:6b:21:8b:ff:d1:40:66:37:f7:
8a:c7:f6:fd:2d:c6:c6:85:7d:91:a9:64:1c:23:15:60:ed:73:
26:56:5a:c9:6e:5c:f9:0c:f8:2b:82:8a:c5:6b:7b:d6:03:73:
ec:4d:bd:a7:55:64:53:37:6c:eb:a5:59:51:19:7d:5b:3b:b1:
8e:d3:72:73:15:7d:7a:d8:8d:ef:3f:e4:28:30:d1:58:7f:d0:
ef:1e:20:82:00:68:4e:0d:9b:af:19:01:17:5f:35:6b:61:cf:
84:b4:ca:0b:fc:8b:77:66:62:49:f9:b2:cf:6f:8c:d4:7e:9b:
59:f9:1a:bc:c9:fd:0c:b5:b7:ff:46:0f:49:bc:1a:4b:72:25:
ed:d2:0b:d2:ab:99:6f:d1:df:a1:ce:3b:e3:ec:cb:4f:f4:0e:
5e:dc:b8:1a:50:4a:89:a7:0d:cb:7b:96:20:8f:1c:65:b4:7f:
6f:44:2b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+m6kU4acPkomfeZrLb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZDM1ZDQ2NTM2MDAyMzk0NDE2MzhhZDg3NTZhNDk4ODE1
NTY4YzEwHhcNMjUxMTExMDcwMTA5WhcNMjUxMTEyMDcwMTA5WjAzMTEwLwYDVQQD
EyhiZmMxYTY4MmU2NGY5MWM4OWI4YmVhNjJhMmUxYmIyODcxYzViYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4epS/3RVE28+/kWOEPk3tRXeIox
khxdGBSsiMpiEK0OhveCWAsfMDFbWxJEwrpu3r0ndgnsQ8Dwhw7h/hocDTiUALyX
3bRJHbscofUZ28ai0VM8q/aqNgfTv3EwkwLXJc5swbYXGpIVuE+3gzSk/6jPUpYe
Vgc3m+mpA997JR8QT1gezRxNwakzf/mEWVaKom0+OxsjNClfKCzlK7LpmFCB+Ibm
hkkWiiM+in4tQJ4bYCNNoM7nW/Xhwh6atYVqLRmfImSXXOZna+ACvvPwvyirzGly
6Vj+/8iY+kCsVFmfnaawYJ2anC+00EoYWjc3BPupTyCURvpF9xXySJTw3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/BpoLmT5HIm4vqYqLhuyhxxbyJMB8GA1UdIwQY
MBaAFGHTXUZTYAI5RBY4rYdWpJiBVWjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWROZFJsTmdBamxFRmppdGgxYWttSUZWYU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzNjYTctYWRiZC00ZmVkLWE4YjUt
NDcxZGJhM2FiM2E3LzEvWWROZFJsTmdBamxFRmppdGgxYWttSUZWYU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NzNjYTctYWRiZC00ZmVkLWE4YjUtNDcxZGJhM2FiM2E3
LzEvWWROZFJsTmdBamxFRmppdGgxYWttSUZWYU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhA+80aS
pMzHOkBp6sPBs8kBnt7Q7MVfxJZ8iRM7x/hIbtUlgMvJ1RCtUMK6UqKZyqyGuH2S
sshFyXRzKjEH7AvzKpQSXSllP0ssaWVXy+xUayGL/9FAZjf3isf2/S3GxoV9kalk
HCMVYO1zJlZayW5c+Qz4K4KKxWt71gNz7E29p1VkUzds66VZURl9WzuxjtNycxV9
etiN7z/kKDDRWH/Q7x4gggBoTg2brxkBF181a2HPhLTKC/yLd2ZiSfmyz2+M1H6b
WfkavMn9DLW3/0YPSbwaS3Il7dIL0quZb9Hfoc474+zLT/QOXty4GlBKiacNy3uW
II8cZbR/b0QrSg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:53:11 2025 by rpki-client