Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
File: YV-738kB6OsOzQ3T9AhcEonP7fc.mft (raw, json)
Hash identifier: Z6Uh4+nF5nLykPfs4CbDcwDmkFtc9WL2HQl3sb/ABrg=
Subject key identifier: 8B:47:43:CD:3A:0D:D4:4E:B5:95:A9:DF:5E:C3:8B:19:3F:03:57:62
Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
Certificate issuer: /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Certificate serial: 019A72CA552C5E9D85BD5B99D1A73C1D2AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 12:00:53 +0000
Manifest this update: Tue 11 Nov 2025 12:00:53 +0000
Manifest next update: Wed 12 Nov 2025 12:00:53 +0000
Files and hashes: 1: YV-738kB6OsOzQ3T9AhcEonP7fc.crl (hash: bcQZxBsASwhX8f/4nm9RJdb/gZU9eV4HmR95hSK/LK4=)
2: zUm1UcOkH8VnWPvUTxzaQHBNg6s.roa (hash: YZzvXulBT76YYOeLZF1dhxyHao92MWHlpmNInJlWXUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:55:2c:5e:9d:85:bd:5b:99:d1:a7:3c:1d:2a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Validity
Not Before: Nov 11 12:00:53 2025 GMT
Not After : Nov 12 12:00:53 2025 GMT
Subject: CN=8b4743cd3a0dd44eb595a9df5ec38b193f035762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:25:b0:8d:50:20:7e:58:0b:47:a5:61:83:
59:5a:4f:3d:55:78:f5:b5:94:cb:e7:a7:2e:d4:ba:
1f:a9:fb:75:32:5a:d7:9f:a4:8f:f3:3c:69:c8:67:
d4:41:55:f8:26:08:af:4b:75:33:13:a2:5f:e8:ba:
16:b7:54:c4:61:f1:68:0c:7b:21:ff:c2:32:6d:94:
46:26:ef:0c:ee:13:a8:d9:76:d9:dc:5c:44:a4:12:
99:e8:bb:d7:29:19:78:23:5d:96:f8:2c:88:6e:03:
c5:31:b6:5b:29:9f:f0:15:a8:2b:14:6d:46:bd:d5:
0e:7c:84:02:42:64:74:ad:a1:64:18:88:a5:5c:03:
76:2f:e5:29:a8:31:29:4c:b2:ed:ca:40:47:e2:bf:
6e:65:28:39:81:e7:1c:92:2a:25:3d:8c:7c:a8:c5:
ce:9c:bb:70:48:2c:38:ac:80:93:1c:3a:72:ad:51:
bf:c8:15:c9:d2:dc:45:fa:e2:77:b6:11:01:ac:e2:
ef:e0:4e:22:8a:cd:c0:8a:57:c7:0c:3f:3a:59:04:
02:f9:4b:75:19:57:b6:c1:33:74:7e:5c:b4:78:99:
a6:98:fd:af:d5:b5:27:7d:a7:c9:57:a4:bb:cd:e7:
c9:e3:94:f5:3b:0e:9f:6a:6d:a9:41:eb:cb:45:7e:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:43:CD:3A:0D:D4:4E:B5:95:A9:DF:5E:C3:8B:19:3F:03:57:62
X509v3 Authority Key Identifier:
keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:10:a7:de:e3:f8:03:eb:cf:f5:75:fc:f1:30:e5:1c:44:3e:
02:16:fc:bd:63:6a:c0:89:c3:41:e0:6f:89:6f:a4:89:23:ab:
04:85:d7:9c:87:15:cc:3e:45:2b:d7:35:83:da:7a:76:ca:50:
f3:a4:9d:e1:d0:c1:81:16:a3:71:c3:87:43:67:6a:7d:a8:fc:
bb:5f:df:47:b2:63:4e:34:fc:d4:ae:53:50:04:74:d9:84:5e:
95:9b:c4:42:c3:da:a2:27:34:4d:ad:d1:31:bf:fa:18:e6:2c:
64:35:63:2f:44:5c:9e:22:ab:78:4c:3d:08:6a:08:4f:7e:1f:
db:5e:16:9d:a8:61:71:67:f9:e9:f9:48:79:31:e6:75:de:b1:
ee:c1:e8:4c:b5:73:7d:4f:cf:5e:59:cb:f2:75:9c:dc:0b:35:
6c:f8:f5:bf:99:7b:e4:cf:c9:5e:b5:1a:58:cf:bd:d6:7e:0c:
96:4e:3b:45:04:6a:0d:ef:e1:b3:65:3d:d6:a9:28:4d:0f:18:
3d:25:4a:06:6f:cc:d6:e4:12:e3:c7:82:c4:fb:93:52:c4:58:
80:3f:2d:c1:45:e2:5b:c9:97:9a:07:e2:55:38:0b:42:4a:a1:
1d:ab:07:27:b3:b9:b5:4a:d6:d4:77:92:75:e9:71:e3:e3:77:
5f:56:28:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyylUsXp2FvVuZ0ac8HSrRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNWZiYmRmYzkwMWU4ZWIwZWNkMGRkM2Y0MDg1YzEyODlj
ZmVkZjcwHhcNMjUxMTExMTIwMDUzWhcNMjUxMTEyMTIwMDUzWjAzMTEwLwYDVQQD
Eyg4YjQ3NDNjZDNhMGRkNDRlYjU5NWE5ZGY1ZWMzOGIxOTNmMDM1NzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lolsI1QIH5YC0elYYNZWk89VXj1
tZTL56cu1Lofqft1MlrXn6SP8zxpyGfUQVX4JgivS3UzE6Jf6LoWt1TEYfFoDHsh
/8IybZRGJu8M7hOo2XbZ3FxEpBKZ6LvXKRl4I12W+CyIbgPFMbZbKZ/wFagrFG1G
vdUOfIQCQmR0raFkGIilXAN2L+UpqDEpTLLtykBH4r9uZSg5gecckiolPYx8qMXO
nLtwSCw4rICTHDpyrVG/yBXJ0txF+uJ3thEBrOLv4E4iis3AilfHDD86WQQC+Ut1
GVe2wTN0fly0eJmmmP2v1bUnfafJV6S7zefJ45T1Ow6fam2pQevLRX40PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItHQ806DdROtZWp317Dixk/A1diMB8GA1UdIwQY
MBaAFGFfu9/JAejrDs0N0/QIXBKJz+33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVYtNzM4a0I2T3NPelEzVDlBaGNFb25QN2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83NGYzMTMtN2M5Mi00YzU0LTgzOGYt
NzljNzIyYzU0ZTE5LzEvWVYtNzM4a0I2T3NPelEzVDlBaGNFb25QN2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy83NGYzMTMtN2M5Mi00YzU0LTgzOGYtNzljNzIyYzU0ZTE5
LzEvWVYtNzM4a0I2T3NPelEzVDlBaGNFb25QN2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRCn3uP4
A+vP9XX88TDlHEQ+Ahb8vWNqwInDQeBviW+kiSOrBIXXnIcVzD5FK9c1g9p6dspQ
86Sd4dDBgRajccOHQ2dqfaj8u1/fR7JjTjT81K5TUAR02YRelZvEQsPaoic0Ta3R
Mb/6GOYsZDVjL0RcniKreEw9CGoIT34f214WnahhcWf56flIeTHmdd6x7sHoTLVz
fU/PXlnL8nWc3As1bPj1v5l75M/JXrUaWM+91n4Mlk47RQRqDe/hs2U91qkoTQ8Y
PSVKBm/M1uQS48eCxPuTUsRYgD8twUXiW8mXmgfiVTgLQkqhHasHJ7O5tUrW1HeS
delx4+N3X1YoDA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:11 2025 by rpki-client