Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier: CbEYl+e64dDoWgFWoMFrc7sVwcN6z97JgRBqPturTQQ=
Subject key identifier: 23:34:4F:4A:01:C9:37:4B:89:C6:80:BB:E6:0A:2C:0F:8B:2E:E1:45
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 019A28F9CF08B480F2711C1054E1E2EAEA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number: 0B6B
Signing time: Tue 28 Oct 2025 04:00:51 +0000
Manifest this update: Tue 28 Oct 2025 04:00:51 +0000
Manifest next update: Wed 29 Oct 2025 04:00:51 +0000
Files and hashes: 1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: eEDCW2LddUPqFhIG2wMTy8sUz1HS+sksh1fEei5Un5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:cf:08:b4:80:f2:71:1c:10:54:e1:e2:ea:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: Oct 28 04:00:51 2025 GMT
Not After : Oct 29 04:00:51 2025 GMT
Subject: CN=23344f4a01c9374b89c680bbe60a2c0f8b2ee145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:2a:c5:c2:63:dc:01:19:81:e2:61:f7:1e:
87:ac:91:6d:78:a4:e5:c1:b7:50:87:39:fb:0e:1a:
d5:05:bf:6e:ca:2d:86:78:7d:f7:a7:f0:89:c0:8d:
ed:2c:76:26:59:51:db:f5:f2:5b:5a:7e:2b:bc:f6:
91:53:99:c8:7f:7d:f1:d5:01:e9:1c:c5:5d:cb:04:
09:d4:57:5f:93:e6:11:f2:3a:f1:65:22:61:b9:e2:
da:06:66:c0:1d:29:4a:b8:99:27:b9:3f:f2:9a:fe:
bc:61:ec:e1:c8:b5:28:ec:8b:a9:1f:89:ff:7a:23:
38:7c:f4:6f:b5:15:ab:b6:b1:68:9a:60:25:15:99:
fd:b8:18:11:b9:25:6f:f6:b4:2b:b7:7a:7e:22:78:
32:fd:9b:79:0b:a2:29:3c:11:25:1b:36:b0:2f:d0:
6b:cd:8e:6f:77:34:ce:b3:17:85:6d:32:00:b0:46:
1a:88:d2:9a:60:1e:70:f4:21:63:95:de:a8:79:ef:
18:2e:3f:21:9e:6c:91:40:68:91:52:b7:53:a6:81:
1e:f3:44:af:e8:46:39:60:b0:fc:6a:ee:09:6b:c8:
6b:6f:79:ab:88:cd:e7:24:61:98:66:80:96:a0:a9:
e4:71:d2:8d:76:f5:b2:09:2a:2f:e2:b9:16:d6:5e:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:34:4F:4A:01:C9:37:4B:89:C6:80:BB:E6:0A:2C:0F:8B:2E:E1:45
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a7:38:9e:90:64:05:ad:df:32:aa:b9:7e:05:c3:e5:cd:3b:
66:05:da:ea:35:bb:d9:22:ab:6f:8c:b5:fb:a0:7e:02:b8:03:
3b:ce:25:4e:63:ca:7f:26:ec:60:6c:cd:61:bc:cb:8b:e1:11:
bb:03:76:c5:00:a5:aa:0b:c4:e8:ce:85:09:a8:80:81:a8:5b:
a9:61:fa:ab:fd:26:b9:cb:2e:f9:a8:8f:ab:25:68:65:90:8c:
16:5c:fa:25:ce:6a:4f:6e:c9:4e:21:1a:ed:b3:6a:08:1d:4f:
3d:f0:37:a4:04:06:2d:cd:fc:4f:24:a2:82:08:6c:1d:0d:b1:
47:ec:52:06:8e:2d:37:bc:a3:4d:12:88:f9:fb:a5:01:d3:9c:
1c:04:1d:6a:8f:35:3d:24:48:21:32:d7:7c:e1:89:62:bd:6f:
59:cb:2b:f0:5f:ea:f3:46:3f:e4:37:ae:03:e3:99:33:ef:bb:
e3:f0:07:e9:a0:61:4b:4f:2a:8d:08:c6:11:57:ce:7d:b2:72:
95:67:15:67:49:51:a0:73:92:15:ce:bd:0e:ef:ca:56:e7:91:
05:a8:40:cf:e7:a1:90:f3:4a:97:ee:a6:e9:b7:08:86:4c:ea:
57:25:f8:22:28:27:74:a1:e0:2c:50:9e:02:2f:c0:e9:e9:ae:
7e:d3:9f:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoo+c8ItIDycRwQVOHi6upzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWRmMmJiY2NjMDJlNGU3ZjQ2NGQ2OWZhYWYzZDZjMzcy
MzQ5NWUwHhcNMjUxMDI4MDQwMDUxWhcNMjUxMDI5MDQwMDUxWjAzMTEwLwYDVQQD
EygyMzM0NGY0YTAxYzkzNzRiODljNjgwYmJlNjBhMmMwZjhiMmVlMTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx8qxcJj3AEZgeJh9x6HrJFteKTl
wbdQhzn7DhrVBb9uyi2GeH33p/CJwI3tLHYmWVHb9fJbWn4rvPaRU5nIf33x1QHp
HMVdywQJ1Fdfk+YR8jrxZSJhueLaBmbAHSlKuJknuT/ymv68YezhyLUo7IupH4n/
eiM4fPRvtRWrtrFommAlFZn9uBgRuSVv9rQrt3p+Ingy/Zt5C6IpPBElGzawL9Br
zY5vdzTOsxeFbTIAsEYaiNKaYB5w9CFjld6oee8YLj8hnmyRQGiRUrdTpoEe80Sv
6EY5YLD8au4Ja8hrb3mriM3nJGGYZoCWoKnkcdKNdvWyCSov4rkW1l5RFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM0T0oByTdLicaAu+YKLA+LLuFFMB8GA1UdIwQY
MBaAFMod8rvMwC5Of0ZNafqvPWw3I0leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTkt
ZGQ0OWVjYzI2MDk1LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTktZGQ0OWVjYzI2MDk1
LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKc4npBk
Ba3fMqq5fgXD5c07ZgXa6jW72SKrb4y1+6B+ArgDO84lTmPKfybsYGzNYbzLi+ER
uwN2xQClqgvE6M6FCaiAgahbqWH6q/0mucsu+aiPqyVoZZCMFlz6Jc5qT27JTiEa
7bNqCB1PPfA3pAQGLc38TySigghsHQ2xR+xSBo4tN7yjTRKI+fulAdOcHAQdao81
PSRIITLXfOGJYr1vWcsr8F/q80Y/5DeuA+OZM++74/AH6aBhS08qjQjGEVfOfbJy
lWcVZ0lRoHOSFc69Du/KVueRBahAz+ehkPNKl+6m6bcIhkzqVyX4IigndKHgLFCe
Ai/A6emuftOfFA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:38:44 2025 by rpki-client