Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: bxB91/Of2bPazTGQdaNgB9KDhUYxZeGmQER6WpDf+lM=
Subject key identifier: 14:B2:BD:9E:56:73:34:BA:0B:5B:D6:FB:86:FC:A2:4C:3A:B3:5E:5D
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 019A7226647A91B52DC35EE3C2521D21E83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 0AE5
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=)
2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=)
3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: 5xVWAL86pYyyCFXQKzR0B9LTFuIv6083Z6KeX3soXQk=)
4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:64:7a:91:b5:2d:c3:5e:e3:c2:52:1d:21:e8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=14b2bd9e567334ba0b5bd6fb86fca24c3ab35e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:63:b1:1b:68:78:98:f3:80:1b:1d:ba:7e:
86:f9:05:84:48:11:37:c2:90:03:be:64:22:ed:00:
a7:6d:e2:b3:7a:a2:fd:41:f0:30:bf:84:8f:f8:be:
32:3c:8b:6c:1b:fe:db:45:96:12:69:06:7f:24:72:
22:62:b0:c9:c8:90:d1:84:57:57:fb:d6:fd:e9:9a:
52:02:03:52:2d:80:e1:2f:22:48:ee:31:e7:8c:ce:
67:31:db:f0:7a:c9:33:40:15:ff:17:a7:4e:6f:fa:
c4:47:2b:1f:01:b4:d6:f7:ea:24:5b:22:4b:cf:8a:
60:0d:cb:43:f8:25:2e:57:e6:fc:e7:85:54:94:34:
ba:bd:16:58:1f:67:51:c6:85:71:49:a5:8f:17:17:
5f:b8:63:90:18:48:86:3a:32:f1:14:e2:0c:77:4d:
b0:6c:5e:7d:ab:a0:96:7a:41:1c:bc:ee:97:93:5e:
e5:d3:62:db:7e:db:0c:3a:00:22:13:43:12:63:88:
fc:37:55:f2:8e:63:7e:1d:1e:8c:a1:ed:1b:69:da:
e8:62:73:1c:66:8f:2d:cb:7f:a0:8c:90:fe:7d:6a:
1b:ee:d8:c1:af:2f:4f:c8:27:f2:56:5d:8c:2a:33:
ac:f0:ef:3e:6b:43:53:39:cf:59:24:16:b4:0b:4e:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B2:BD:9E:56:73:34:BA:0B:5B:D6:FB:86:FC:A2:4C:3A:B3:5E:5D
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c1:60:6d:cc:e9:0b:4f:46:3f:17:a9:22:f0:d7:60:fe:e9:
9e:6e:32:2d:aa:8c:74:69:3c:df:ad:57:25:dc:b9:e3:10:57:
7b:3d:3f:f7:f9:20:c0:ed:ba:d5:6d:23:34:90:71:e9:ce:37:
3d:9f:ce:be:2a:a3:b5:18:2a:8a:46:06:1d:32:f6:7b:0b:ef:
d1:4c:e5:60:2c:be:55:8b:00:24:b7:a4:58:24:2c:50:93:3c:
27:58:26:83:0b:6d:15:5c:6e:81:f6:ee:34:c3:fb:e8:56:24:
be:d1:6a:39:ec:d5:21:0c:ff:49:85:6c:a9:7a:3e:8f:80:e0:
c7:a6:21:6f:2a:79:39:14:28:d0:cb:70:4a:3e:ac:c8:ce:e2:
c1:2c:86:ee:b7:ee:67:01:34:da:a1:3e:93:bb:b0:ca:25:c0:
d8:b9:ac:72:77:52:1e:a7:1a:5d:24:3f:29:5a:3e:4d:0b:20:
58:1d:db:87:b7:4c:4b:14:10:5c:5e:3c:b8:87:20:73:31:ca:
a1:4c:ce:88:c1:9c:05:5e:fe:9b:2b:6f:5d:92:28:f6:10:a4:
2a:87:c9:8b:b6:14:10:2d:f6:86:46:27:f3:fb:29:b4:aa:32:
09:8f:a4:c1:a0:af:fc:44:be:e2:75:89:a4:2b:f3:d5:c4:38:
83:de:db:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJmR6kbUtw17jwlIdIeg7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNzU0OGMzN2FiZWJjNThiOTI4ZWQyODU0MzNkNjllOTVk
ZjljM2IwHhcNMjUxMTExMDkwMTUwWhcNMjUxMTEyMDkwMTUwWjAzMTEwLwYDVQQD
EygxNGIyYmQ5ZTU2NzMzNGJhMGI1YmQ2ZmI4NmZjYTI0YzNhYjM1ZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNhjsRtoeJjzgBsdun6G+QWESBE3
wpADvmQi7QCnbeKzeqL9QfAwv4SP+L4yPItsG/7bRZYSaQZ/JHIiYrDJyJDRhFdX
+9b96ZpSAgNSLYDhLyJI7jHnjM5nMdvweskzQBX/F6dOb/rERysfAbTW9+okWyJL
z4pgDctD+CUuV+b854VUlDS6vRZYH2dRxoVxSaWPFxdfuGOQGEiGOjLxFOIMd02w
bF59q6CWekEcvO6Xk17l02LbftsMOgAiE0MSY4j8N1XyjmN+HR6Moe0badroYnMc
Zo8ty3+gjJD+fWob7tjBry9PyCfyVl2MKjOs8O8+a0NTOc9ZJBa0C05uEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSyvZ5WczS6C1vW+4b8okw6s15dMB8GA1UdIwQY
MBaAFGB1SMN6vrxYuSjtKFQz1p6V35w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMt
MGM5OGM1NzBhNmUwLzEvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMtMGM5OGM1NzBhNmUw
LzEvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8Fgbczp
C09GPxepIvDXYP7pnm4yLaqMdGk8361XJdy54xBXez0/9/kgwO261W0jNJBx6c43
PZ/OviqjtRgqikYGHTL2ewvv0UzlYCy+VYsAJLekWCQsUJM8J1gmgwttFVxugfbu
NMP76FYkvtFqOezVIQz/SYVsqXo+j4Dgx6Yhbyp5ORQo0MtwSj6syM7iwSyG7rfu
ZwE02qE+k7uwyiXA2LmscndSHqcaXSQ/KVo+TQsgWB3bh7dMSxQQXF48uIcgczHK
oUzOiMGcBV7+mytvXZIo9hCkKofJi7YUEC32hkYn8/sptKoyCY+kwaCv/ES+4nWJ
pCvz1cQ4g97bTA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:47 2025 by rpki-client