Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
File: yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json)
Hash identifier: d6X4ep9VCKSME19MN/ButGP2KaHoiECw+jc481InZ2c=
Subject key identifier: DE:44:BE:F9:F7:75:90:B8:2F:06:3D:25:4D:BD:D9:6B:B3:85:15:7C
Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
Certificate issuer: /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Certificate serial: 019A7225F56AD672124C3B34D22696A2A40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
Manifest number: 0877
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: KzFfCDjHV6hqDoqqVxbHisFAzqw.roa (hash: EJN3VDm9IKnbYFgaxZt9SIfMAHKvU3wGx8Z5+gCSQRo=)
2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: CO75mqE/XDofsM1SwdSj/DRyZG/AL3XP1NYEtPLGXGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f5:6a:d6:72:12:4c:3b:34:d2:26:96:a2:a4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=de44bef9f77590b82f063d254dbdd96bb385157c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:44:29:37:eb:fb:a0:37:a7:1a:7f:5c:70:
a8:31:a9:69:ea:62:00:01:e5:02:dd:ee:40:82:61:
21:f0:c2:4b:93:ed:93:08:88:47:35:05:ff:63:4f:
36:be:f2:b7:1b:e4:54:a7:92:26:a6:65:17:bc:7e:
23:ca:9c:18:84:64:c5:16:97:4d:93:82:2d:7e:49:
3b:1a:02:f3:05:ca:6c:d8:34:3c:14:bb:18:08:82:
e3:2b:1e:0f:54:7f:b8:d2:a1:47:d7:3f:82:a0:a5:
9c:50:1c:f0:ec:1a:5d:45:06:b5:73:4d:22:52:1d:
2a:57:1a:71:6c:3b:a1:2c:db:a6:c6:d3:b4:f4:86:
9b:57:d9:7f:ed:ea:0c:a7:12:ad:37:8a:33:2f:f1:
28:b3:33:22:11:2a:91:d4:07:b0:f1:15:a9:45:74:
fd:db:c6:cc:9b:ac:7a:22:cb:61:7b:0f:73:66:35:
05:7b:2a:f6:79:ee:74:ec:06:54:f6:fd:45:8e:a1:
f3:03:2d:be:83:f9:98:01:2e:a0:d9:e4:11:74:a7:
bd:54:56:9e:72:5c:00:c1:55:32:58:15:06:96:a5:
fc:80:3d:3d:35:8b:62:cb:ef:37:d1:b1:40:21:5c:
59:d1:b5:29:f5:33:e1:fb:fd:45:f1:e5:da:a2:aa:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:44:BE:F9:F7:75:90:B8:2F:06:3D:25:4D:BD:D9:6B:B3:85:15:7C
X509v3 Authority Key Identifier:
keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:63:ca:d5:7f:3c:13:12:53:1f:b3:63:61:2f:5c:7e:2c:b9:
3a:af:3e:87:3e:7b:e4:55:20:95:9f:36:c7:13:55:6e:63:d6:
9a:2f:d7:31:56:22:78:d0:f2:2b:0e:09:cf:16:e2:cb:01:b2:
6a:38:79:17:49:99:e8:8c:86:22:f6:dd:be:2d:44:16:22:23:
09:98:cc:aa:fa:0c:b5:f5:bc:2f:57:26:ec:ef:8a:65:d2:2b:
b5:06:da:3f:cf:fa:89:e6:37:22:63:c6:b1:d1:a7:23:22:8c:
dd:32:57:b6:11:05:81:c2:17:77:92:7c:76:73:5d:67:09:e5:
fb:7a:b2:ac:ae:b6:fe:a3:f2:86:85:b9:87:8a:0d:4f:c9:82:
18:c0:17:84:a9:38:05:ef:6e:73:a6:c6:f7:1b:4e:6a:23:26:
00:49:87:07:fe:3e:cc:90:78:9a:c2:7a:2c:4e:41:60:79:36:
e9:72:a1:d5:44:26:d5:2e:29:cf:b0:4e:2f:eb:da:82:77:17:
f1:7c:01:ef:50:a3:4b:69:47:d6:08:cb:13:a2:c1:d2:e9:5e:
03:c0:d6:e9:58:b3:5d:d5:08:73:4d:f7:c5:6e:a7:f8:2d:6f:
78:5c:d2:50:57:33:04:44:da:c8:6b:76:28:11:3d:1c:fa:08:
84:f5:f6:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJfVq1nISTDs00iaWoqQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YzFlOWUwYmM1ZjVkYTE4ZTMyNGExODEyNWI0Mjc4MDFh
ODA3ZjEwHhcNMjUxMTExMDkwMTIxWhcNMjUxMTEyMDkwMTIxWjAzMTEwLwYDVQQD
EyhkZTQ0YmVmOWY3NzU5MGI4MmYwNjNkMjU0ZGJkZDk2YmIzODUxNTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucZEKTfr+6A3pxp/XHCoMalp6mIA
AeUC3e5AgmEh8MJLk+2TCIhHNQX/Y082vvK3G+RUp5ImpmUXvH4jypwYhGTFFpdN
k4Itfkk7GgLzBcps2DQ8FLsYCILjKx4PVH+40qFH1z+CoKWcUBzw7BpdRQa1c00i
Uh0qVxpxbDuhLNumxtO09IabV9l/7eoMpxKtN4ozL/EoszMiESqR1Aew8RWpRXT9
28bMm6x6Isthew9zZjUFeyr2ee507AZU9v1FjqHzAy2+g/mYAS6g2eQRdKe9VFae
clwAwVUyWBUGlqX8gD09NYtiy+830bFAIVxZ0bUp9TPh+/1F8eXaoqrIlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5Evvn3dZC4LwY9JU292WuzhRV8MB8GA1UdIwQY
MBaAFMjB6eC8X12hjjJKGBJbQngBqAfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80ZjZmNDMtODVmNC00MDFhLWEzMmYt
ZTFlMzlmOTU2MDgxLzEveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80ZjZmNDMtODVmNC00MDFhLWEzMmYtZTFlMzlmOTU2MDgx
LzEveU1IcDRMeGZYYUdPTWtvWUVsdENlQUdvQl9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2PK1X88
ExJTH7NjYS9cfiy5Oq8+hz575FUglZ82xxNVbmPWmi/XMVYieNDyKw4JzxbiywGy
ajh5F0mZ6IyGIvbdvi1EFiIjCZjMqvoMtfW8L1cm7O+KZdIrtQbaP8/6ieY3ImPG
sdGnIyKM3TJXthEFgcIXd5J8dnNdZwnl+3qyrK62/qPyhoW5h4oNT8mCGMAXhKk4
Be9uc6bG9xtOaiMmAEmHB/4+zJB4msJ6LE5BYHk26XKh1UQm1S4pz7BOL+vagncX
8XwB71CjS2lH1gjLE6LB0uleA8DW6VizXdUIc033xW6n+C1veFzSUFczBETayGt2
KBE9HPoIhPX2ow==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:46 2025 by rpki-client