Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: d9lg6P0NOPLGm7ZG4xCOp8knwrfYz3jkrlI98ROr33E=
Subject key identifier: 0D:57:3B:4B:13:33:6C:8E:F1:BC:E6:47:A2:F3:77:20:13:C3:CA:A9
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019A06DBA9C7C3DAF67262F2C1089F7FA911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 1039
Signing time: Tue 21 Oct 2025 13:00:50 +0000
Manifest this update: Tue 21 Oct 2025 13:00:50 +0000
Manifest next update: Wed 22 Oct 2025 13:00:50 +0000
Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: TbXdp5PXwfp7bwLMyS+DfGMWrU5wDioFwatLx9bv0ZE=)
2: iUluP9dzGEFPZV1QT7qhxKlYtLc.roa (hash: dqFbgrXc+CPp5bc1uUsZ9NzSqOeylcrCuwJIJApbIDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:db:a9:c7:c3:da:f6:72:62:f2:c1:08:9f:7f:a9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Oct 21 13:00:50 2025 GMT
Not After : Oct 22 13:00:50 2025 GMT
Subject: CN=0d573b4b13336c8ef1bce647a2f3772013c3caa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:71:43:a6:4f:bd:06:92:ec:71:65:7f:a6:
f3:d1:65:4e:d6:ea:f2:63:2b:b7:e4:d1:19:7a:53:
d2:a0:96:13:ce:9c:d0:01:c2:d5:09:cc:c8:c3:6a:
12:09:02:9a:a1:e8:13:09:9e:70:fc:24:ec:4c:eb:
4c:ee:bb:ee:25:ab:8b:ef:60:22:b8:88:69:68:ec:
54:25:c2:07:f3:73:ec:06:f0:e6:50:43:ab:c9:36:
ee:10:fc:30:57:2f:8a:17:99:72:6d:4e:a2:7e:e9:
4b:dc:3d:43:4e:85:7e:d1:be:ea:7e:da:35:34:78:
1f:e4:d3:8a:6d:20:fd:46:31:db:8e:52:9b:db:c1:
20:19:10:c8:06:af:d0:eb:ff:21:62:2e:20:f6:d3:
a8:11:2a:e8:92:4a:e1:b4:a9:25:92:dc:d7:26:7e:
17:46:da:72:02:e4:16:af:4d:81:ef:73:fe:08:ba:
58:fa:e5:37:a7:63:7f:d4:aa:02:5e:cf:02:23:c5:
20:80:bb:57:3a:af:f1:1f:3a:a5:1a:37:2b:af:1b:
df:cc:b4:c2:04:91:4c:bd:b2:dc:a8:bd:b3:58:1f:
94:ea:38:50:19:b2:db:1e:97:32:2d:d3:2f:e0:86:
a8:e1:53:81:ea:f0:ef:b5:6b:b6:21:c8:e4:93:c0:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:3B:4B:13:33:6C:8E:F1:BC:E6:47:A2:F3:77:20:13:C3:CA:A9
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:64:69:b7:9f:fe:97:8c:c6:85:ff:b8:99:5a:7d:5b:f7:0b:
ca:7d:99:66:24:6e:2b:55:01:95:0e:bb:a6:74:f8:f0:50:78:
0c:cf:95:93:b6:b1:bc:82:48:5d:93:93:06:7f:e7:8a:d4:03:
dd:f8:7b:73:48:f3:39:53:b9:8b:01:ac:3c:cf:90:06:a1:cc:
55:a3:62:fc:2b:3f:fd:f5:67:12:0b:64:8f:1c:dc:0a:0e:35:
1a:84:af:1f:47:bf:ae:a1:99:d1:9f:be:56:7f:da:4a:58:c9:
67:9c:99:48:d8:95:c3:ad:9c:e1:e8:b7:ea:c2:5e:ca:e0:79:
01:17:72:5e:f7:03:bf:54:b5:9c:a2:54:ed:d3:2a:ad:d0:ec:
07:b4:7d:32:b9:55:cc:c2:4b:6d:ad:b3:90:6e:2c:70:f1:41:
5c:2c:4a:d0:08:43:35:a3:c4:15:89:cd:0b:d0:f6:28:e7:bd:
33:fd:bb:77:92:ff:26:44:d5:bd:df:6a:ed:09:86:a4:d5:b5:
0a:e0:bd:64:04:a0:75:90:38:d8:0d:18:20:89:08:42:59:bc:
e1:a4:0c:23:6e:59:c3:6e:12:f0:58:72:d6:cb:57:a3:c1:34:
6f:78:7f:19:41:81:73:91:44:22:22:60:71:ee:b2:1f:6d:a0:
24:c3:00:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoG26nHw9r2cmLywQiff6kRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYWVkZmRjNzEzM2U5NWY0MjQ5OGY3NzYwZjY4ZmI4MGZh
YTg0YWMwHhcNMjUxMDIxMTMwMDUwWhcNMjUxMDIyMTMwMDUwWjAzMTEwLwYDVQQD
EygwZDU3M2I0YjEzMzM2YzhlZjFiY2U2NDdhMmYzNzcyMDEzYzNjYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOJxQ6ZPvQaS7HFlf6bz0WVO1ury
Yyu35NEZelPSoJYTzpzQAcLVCczIw2oSCQKaoegTCZ5w/CTsTOtM7rvuJauL72Ai
uIhpaOxUJcIH83PsBvDmUEOryTbuEPwwVy+KF5lybU6ifulL3D1DToV+0b7qfto1
NHgf5NOKbSD9RjHbjlKb28EgGRDIBq/Q6/8hYi4g9tOoESrokkrhtKklktzXJn4X
RtpyAuQWr02B73P+CLpY+uU3p2N/1KoCXs8CI8UggLtXOq/xHzqlGjcrrxvfzLTC
BJFMvbLcqL2zWB+U6jhQGbLbHpcyLdMv4Iao4VOB6vDvtWu2Icjkk8BckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1XO0sTM2yO8bzmR6LzdyATw8qpMB8GA1UdIwQY
MBaAFGGu39xxM+lfQkmPd2D2j7gPqoSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEt
OWYzZThmOWVmYzk5LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEtOWYzZThmOWVmYzk5
LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGRpt5/+
l4zGhf+4mVp9W/cLyn2ZZiRuK1UBlQ67pnT48FB4DM+Vk7axvIJIXZOTBn/nitQD
3fh7c0jzOVO5iwGsPM+QBqHMVaNi/Cs//fVnEgtkjxzcCg41GoSvH0e/rqGZ0Z++
Vn/aSljJZ5yZSNiVw62c4ei36sJeyuB5ARdyXvcDv1S1nKJU7dMqrdDsB7R9MrlV
zMJLba2zkG4scPFBXCxK0AhDNaPEFYnNC9D2KOe9M/27d5L/JkTVvd9q7QmGpNW1
CuC9ZASgdZA42A0YIIkIQlm84aQMI25Zw24S8Fhy1stXo8E0b3h/GUGBc5FEIiJg
ce6yH22gJMMAHg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:50:11 2025 by rpki-client