Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
File: YFUCYwejbuxeaBw5SK71Oif5lzY.mft (raw, json)
Hash identifier: bMh6FRIpLlsNM4Fg/hddCKZoTqMdm0s9JJpdCk3K9ss=
Subject key identifier: FC:B5:2D:AC:51:8F:93:2E:1E:15:E5:50:77:96:B7:2F:F5:2D:DF:72
Authority key identifier: 60:55:02:63:07:A3:6E:EC:5E:68:1C:39:48:AE:F5:3A:27:F9:97:36
Certificate issuer: /CN=6055026307a36eec5e681c3948aef53a27f99736
Certificate serial: 019A718098CBDE8FE765492F2C615A378206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
Manifest number: 013B
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: 7jIqwtDbMy9vdRo0YUm5EEwEiSU.roa (hash: zcVysxxJ8InMIpqNYEgmGN9PoMJVnhc3HSBD/6SlWos=)
2: YFUCYwejbuxeaBw5SK71Oif5lzY.crl (hash: AjnoWNjMKA1UKHPpuk0b3KyQnhH2r8Wvcr9YCEh89E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:98:cb:de:8f:e7:65:49:2f:2c:61:5a:37:82:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6055026307a36eec5e681c3948aef53a27f99736
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=fcb52dac518f932e1e15e5507796b72ff52ddf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:46:30:f4:4f:39:be:29:ae:52:a8:3c:ee:
0b:e7:b6:47:a5:3e:02:5e:6d:d1:83:23:1c:40:9f:
d4:c5:11:a0:5b:c1:4d:73:af:bf:22:d9:57:39:c7:
21:f0:c6:67:e4:99:8a:e4:9a:d5:64:9b:94:3d:55:
7a:ca:a1:ca:cc:e1:56:48:9e:8a:9b:96:2a:f7:b8:
91:54:9d:a2:c1:df:5b:b7:c2:3f:d4:70:06:43:dc:
35:4c:2e:3d:aa:cc:28:34:b2:0d:d5:d2:c0:3a:ae:
b4:c3:9e:25:3b:1e:57:fe:4b:b6:f4:90:dd:d6:68:
5a:9e:fb:16:d3:4a:c0:72:12:21:7f:8c:44:93:c0:
f8:80:ea:e0:65:3c:31:24:7a:b1:7a:91:67:04:53:
3f:78:5c:2f:03:f6:e8:19:90:fc:17:26:fd:02:42:
d8:87:b4:8c:45:d6:f9:83:b6:e9:f5:4f:ac:f2:76:
79:b3:33:6e:f7:70:a1:e7:b4:12:72:fc:aa:f8:ed:
cf:8e:cc:3d:e3:95:2f:08:ec:c1:9f:57:23:6d:84:
60:f4:d6:b6:55:dc:1b:6e:37:0e:69:cc:f4:70:c2:
1b:94:21:c0:4b:0d:2f:55:0f:d3:a5:d0:b8:e6:3b:
e2:21:4f:90:10:ea:cd:c3:a5:83:f8:f5:8c:5b:aa:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:2D:AC:51:8F:93:2E:1E:15:E5:50:77:96:B7:2F:F5:2D:DF:72
X509v3 Authority Key Identifier:
keyid:60:55:02:63:07:A3:6E:EC:5E:68:1C:39:48:AE:F5:3A:27:F9:97:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:dd:cc:2f:5f:ff:06:4b:62:f9:1b:fa:29:e0:82:5c:77:40:
6a:ac:72:e2:73:53:80:ce:89:51:86:0a:80:e8:85:c2:be:cd:
f0:f9:fc:81:1e:20:2c:30:85:7d:98:ec:91:17:0e:08:3d:b6:
d6:6a:7f:3b:13:6a:93:37:2b:0f:01:2e:ff:cc:84:bd:6f:d9:
33:d7:f3:cb:f8:c7:75:b6:0f:53:87:8b:a5:23:dc:cf:90:30:
84:64:0e:10:56:fb:af:55:ff:db:c9:b5:47:c7:5a:7a:87:ea:
a4:5c:bd:40:e2:cc:0f:c1:05:b5:7a:32:a0:ac:94:3b:f9:48:
d4:2a:dc:5d:33:46:33:42:36:bc:84:7c:e6:4c:78:54:3e:6b:
c8:99:19:70:fb:60:d4:2b:df:48:07:30:3b:48:cc:59:70:43:
00:b9:b6:41:76:2b:2b:92:3d:23:90:92:bd:0c:33:bf:53:17:
ca:03:de:4c:d6:09:f9:9f:ee:cc:1f:f8:ae:4e:df:04:f5:53:
14:e1:68:e3:49:1a:36:bd:04:5d:f5:5c:7f:b1:2f:45:40:58:
a8:4c:5c:18:c2:21:e1:73:fa:57:30:6e:fa:29:72:cc:0f:e6:
c1:54:0a:9a:83:f9:cd:b5:75:65:df:92:77:bd:84:69:de:ae:
e0:99:f9:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgJjL3o/nZUkvLGFaN4IGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTUwMjYzMDdhMzZlZWM1ZTY4MWMzOTQ4YWVmNTNhMjdm
OTk3MzYwHhcNMjUxMTExMDYwMDQ0WhcNMjUxMTEyMDYwMDQ0WjAzMTEwLwYDVQQD
EyhmY2I1MmRhYzUxOGY5MzJlMWUxNWU1NTA3Nzk2YjcyZmY1MmRkZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf9GMPRPOb4prlKoPO4L57ZHpT4C
Xm3RgyMcQJ/UxRGgW8FNc6+/ItlXOcch8MZn5JmK5JrVZJuUPVV6yqHKzOFWSJ6K
m5Yq97iRVJ2iwd9bt8I/1HAGQ9w1TC49qswoNLIN1dLAOq60w54lOx5X/ku29JDd
1mhanvsW00rAchIhf4xEk8D4gOrgZTwxJHqxepFnBFM/eFwvA/boGZD8Fyb9AkLY
h7SMRdb5g7bp9U+s8nZ5szNu93Ch57QScvyq+O3Pjsw945UvCOzBn1cjbYRg9Na2
VdwbbjcOacz0cMIblCHASw0vVQ/TpdC45jviIU+QEOrNw6WD+PWMW6r4FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPy1LaxRj5MuHhXlUHeWty/1Ld9yMB8GA1UdIwQY
MBaAFGBVAmMHo27sXmgcOUiu9Ton+Zc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZVQ1l3ZWpidXhlYUJ3NVNLNzFPaWY1bHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YWE4NTgtZTFiZS00MGU5LWJkOWEt
MGVlNjMzNTdkODQ3LzEvWUZVQ1l3ZWpidXhlYUJ3NVNLNzFPaWY1bHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85YWE4NTgtZTFiZS00MGU5LWJkOWEtMGVlNjMzNTdkODQ3
LzEvWUZVQ1l3ZWpidXhlYUJ3NVNLNzFPaWY1bHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJd3ML1//
Bkti+Rv6KeCCXHdAaqxy4nNTgM6JUYYKgOiFwr7N8Pn8gR4gLDCFfZjskRcOCD22
1mp/OxNqkzcrDwEu/8yEvW/ZM9fzy/jHdbYPU4eLpSPcz5AwhGQOEFb7r1X/28m1
R8daeofqpFy9QOLMD8EFtXoyoKyUO/lI1CrcXTNGM0I2vIR85kx4VD5ryJkZcPtg
1CvfSAcwO0jMWXBDALm2QXYrK5I9I5CSvQwzv1MXygPeTNYJ+Z/uzB/4rk7fBPVT
FOFo40kaNr0EXfVcf7EvRUBYqExcGMIh4XP6VzBu+ilyzA/mwVQKmoP5zbV1Zd+S
d72Ead6u4Jn5mQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:42 2025 by rpki-client