Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: 3EEeEaBSXI45/V6IQRmHpzmol3bVqAkgqvjuEcHwWZk=
Subject key identifier: 73:57:DD:D5:3C:00:DC:AC:47:E2:B7:79:E5:BF:01:B9:96:0E:85:C2
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 019A2A44515C0620568B6893D780196B85A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 10:01:51 +0000
Manifest this update: Tue 28 Oct 2025 10:01:51 +0000
Manifest next update: Wed 29 Oct 2025 10:01:51 +0000
Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: P9EB3EBZvKUulvhsOwKK8MlY1vM0LnU+KsYWpCNXEIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:51:5c:06:20:56:8b:68:93:d7:80:19:6b:85:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Oct 28 10:01:51 2025 GMT
Not After : Oct 29 10:01:51 2025 GMT
Subject: CN=7357ddd53c00dcac47e2b779e5bf01b9960e85c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:98:f4:a6:4d:5c:a0:2c:ed:5a:2e:f5:0e:
d2:3b:8f:76:5f:2c:06:aa:b9:60:c8:26:cb:b5:77:
3d:bf:cb:50:e8:0b:59:66:a0:df:63:f4:5b:29:3a:
90:42:a6:1c:79:ff:fa:0a:6c:f2:4e:fe:61:28:1a:
b0:9a:24:22:cb:53:80:fc:fd:28:db:6b:00:59:49:
82:fb:84:b0:21:c1:07:ad:f5:f0:c8:da:e2:23:79:
1e:4d:2d:a4:9d:9d:89:26:09:87:98:b7:b2:d3:f6:
63:f6:c7:2a:32:41:a2:c7:78:0b:cc:0f:74:cf:ff:
a9:e7:f6:7a:e4:21:35:40:8a:74:32:15:98:3d:c5:
5b:85:a4:42:81:e1:72:02:a8:78:3e:9d:f3:28:18:
fc:3c:56:63:df:3e:af:43:31:d4:97:15:50:2f:5e:
e4:1f:0a:67:45:b3:da:36:5a:63:1f:5a:40:b7:a1:
fd:79:7b:85:cf:1c:b2:21:6e:96:f3:bb:61:3f:ae:
c0:1c:0b:f1:40:aa:1c:5b:b2:47:71:5a:f0:0b:12:
4c:6b:b5:fe:85:bb:68:50:8e:7e:96:0f:61:87:c7:
17:da:ea:49:bf:13:23:ed:f0:74:f7:de:7e:69:21:
42:f2:a6:ae:a1:f6:ed:f2:15:cc:4d:f8:02:8c:62:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:57:DD:D5:3C:00:DC:AC:47:E2:B7:79:E5:BF:01:B9:96:0E:85:C2
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b9:19:37:61:1b:17:aa:05:a2:a6:83:6c:ca:d2:d3:d5:21:
3f:d6:20:11:9d:0d:2d:18:f6:54:48:bc:33:e4:d0:36:dd:0b:
d0:f8:2f:fc:5d:01:3f:b9:31:c4:9a:10:e3:03:c5:49:7b:25:
d0:26:13:0d:ab:70:c9:de:a8:88:32:48:ea:0c:95:97:12:b5:
8f:50:56:a2:9a:81:31:50:26:b4:10:94:36:6f:61:4e:a2:e1:
6c:14:1a:04:db:a9:8d:d8:10:de:f2:f3:36:c3:0b:79:ba:ae:
bf:cc:81:71:64:7b:03:23:e7:2d:3c:ed:1c:1c:13:4d:8a:64:
cb:ea:d7:42:36:0a:d2:c9:f2:e4:06:66:a9:de:d3:3e:e1:6a:
3a:bf:eb:c5:b1:e7:bf:ef:33:c0:aa:df:44:64:a1:44:a1:fd:
a6:19:47:59:a9:18:40:4b:40:c2:83:ae:fd:98:de:ee:07:e6:
22:e1:c0:43:20:f2:2b:04:c6:64:31:28:46:b2:4e:31:53:f1:
c1:23:07:4e:ad:b7:90:3c:e8:6a:14:98:7c:13:f2:75:86:09:
59:b9:34:f3:f8:4d:8d:11:93:18:da:d5:66:35:0f:9c:60:b6:
f2:bc:29:b8:a2:c7:1e:0d:27:81:99:f0:79:13:ac:4e:e7:61:
2b:03:ec:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqRFFcBiBWi2iT14AZa4WhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjYxMzMxMWE3ODY5YzMzNWNhNjZjYjQyM2NjNmU4YjJm
YTkwMmMwHhcNMjUxMDI4MTAwMTUxWhcNMjUxMDI5MTAwMTUxWjAzMTEwLwYDVQQD
Eyg3MzU3ZGRkNTNjMDBkY2FjNDdlMmI3NzllNWJmMDFiOTk2MGU4NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ2Y9KZNXKAs7Vou9Q7SO492XywG
qrlgyCbLtXc9v8tQ6AtZZqDfY/RbKTqQQqYcef/6CmzyTv5hKBqwmiQiy1OA/P0o
22sAWUmC+4SwIcEHrfXwyNriI3keTS2knZ2JJgmHmLey0/Zj9scqMkGix3gLzA90
z/+p5/Z65CE1QIp0MhWYPcVbhaRCgeFyAqh4Pp3zKBj8PFZj3z6vQzHUlxVQL17k
HwpnRbPaNlpjH1pAt6H9eXuFzxyyIW6W87thP67AHAvxQKocW7JHcVrwCxJMa7X+
hbtoUI5+lg9hh8cX2upJvxMj7fB0995+aSFC8qauofbt8hXMTfgCjGJYvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNX3dU8ANysR+K3eeW/AbmWDoXCMB8GA1UdIwQY
MBaAFMr2EzEaeGnDNcpmy0I8xuiy+pAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMt
YzMxMGVjYTNjMDdiLzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85NGVhNGItM2ZmMC00ZjdiLTlkODMtYzMxMGVjYTNjMDdi
LzEveXZZVE1ScDRhY00xeW1iTFFqekc2TEw2a0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLkZN2Eb
F6oFoqaDbMrS09UhP9YgEZ0NLRj2VEi8M+TQNt0L0Pgv/F0BP7kxxJoQ4wPFSXsl
0CYTDatwyd6oiDJI6gyVlxK1j1BWopqBMVAmtBCUNm9hTqLhbBQaBNupjdgQ3vLz
NsMLebquv8yBcWR7AyPnLTztHBwTTYpky+rXQjYK0sny5AZmqd7TPuFqOr/rxbHn
v+8zwKrfRGShRKH9phlHWakYQEtAwoOu/Zje7gfmIuHAQyDyKwTGZDEoRrJOMVPx
wSMHTq23kDzoahSYfBPydYYJWbk08/hNjRGTGNrVZjUPnGC28rwpuKLHHg0ngZnw
eROsTudhKwPsYQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:12:25 2025 by rpki-client