Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: VHBUGEkevpbwRmym75UTG9G7f98VlOvKLAOfOhDM32g=
Subject key identifier: 61:2E:D3:93:EB:2F:17:29:B2:17:B8:8D:7E:6D:BD:14:47:19:1C:E8
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 019A2176EC04259DEF709FA5D1F3504EDEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 075C
Signing time: Sun 26 Oct 2025 17:00:33 +0000
Manifest this update: Sun 26 Oct 2025 17:00:33 +0000
Manifest next update: Mon 27 Oct 2025 17:00:33 +0000
Files and hashes: 1: A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa (hash: P87warA/sxgPpSILGT3rzWqyvJsB40eA4IbxWKqMVaU=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: ijCaChxXjjTnvPXMcI3FZeaCtlwE3cnqxIaE9CUoSbE=)
3: fPNzH31qX0DZ8V4rij7Xo2sRGO8.roa (hash: fPCz6t8saFe/YCV6Ne6vHfZKosVB2msyYYqQELy/A2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:ec:04:25:9d:ef:70:9f:a5:d1:f3:50:4e:de:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Oct 26 17:00:33 2025 GMT
Not After : Oct 27 17:00:33 2025 GMT
Subject: CN=612ed393eb2f1729b217b88d7e6dbd1447191ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:e6:4e:2e:3e:18:ac:1a:5e:02:fc:4f:32:
f9:d5:53:4d:b6:dd:74:70:08:81:98:36:6e:cb:e3:
dd:08:44:28:d4:b8:63:05:fb:97:9b:7b:e1:70:a1:
da:ac:1a:e4:ec:9b:fb:d0:1d:df:e1:1c:db:66:b0:
08:49:10:8c:45:05:65:d8:08:6c:38:c5:55:05:96:
28:82:fd:5a:e6:b8:c1:8a:2c:1a:47:a9:1b:e0:d4:
74:d4:8a:45:37:52:82:da:93:3d:3f:81:fd:25:6f:
54:ab:e0:92:88:44:3d:0e:15:25:7c:4c:da:0b:03:
d3:2f:6e:75:52:b2:0a:04:25:60:fe:bf:b8:b0:6b:
82:75:7b:d9:e9:43:40:09:61:05:9b:c2:71:ea:f8:
28:16:40:1a:42:fd:83:73:db:65:05:0d:0f:5b:38:
89:6a:b8:7c:4d:0b:ae:ef:9a:34:57:67:f3:58:a1:
9e:cb:5b:1d:7b:55:4f:10:dd:aa:63:7d:f1:63:04:
5d:f1:bb:c9:08:00:c3:ae:bb:b5:42:f1:c2:95:1e:
ac:c8:c1:6e:c7:a2:47:b6:32:77:76:a8:dd:9c:d8:
b6:de:c7:de:16:95:6f:6f:31:76:03:51:8a:61:21:
a4:38:18:b5:f3:0a:f1:8d:1b:a0:24:4f:64:e7:f2:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2E:D3:93:EB:2F:17:29:B2:17:B8:8D:7E:6D:BD:14:47:19:1C:E8
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d9:65:27:e0:6a:cd:4b:63:b6:a6:55:88:5d:03:54:32:51:
ec:ca:ba:ea:31:c9:5a:4b:bb:31:61:c9:88:eb:4d:e5:8d:e4:
3b:46:9b:26:f4:ef:cb:55:81:01:a5:de:3f:21:19:92:24:f6:
45:bf:ec:92:d2:e0:df:35:72:87:62:20:f1:ec:b0:c8:78:40:
74:a4:e5:60:d1:0d:22:24:29:e7:cb:1d:c3:ca:02:ed:87:6e:
7d:48:ed:b1:8a:e8:68:e9:b6:8c:a6:4d:21:73:eb:52:3a:8d:
39:25:73:30:63:45:1a:c7:30:6a:fa:bd:2b:f5:b6:c8:40:fb:
b1:2b:76:90:c4:6f:e4:fd:50:1a:cd:4b:27:ff:12:25:e0:b9:
2f:f5:4c:ad:05:4f:72:c0:9b:1e:22:bc:31:60:aa:f7:04:99:
37:54:47:b8:1f:eb:2e:d8:49:31:bd:37:71:62:25:c6:48:53:
de:0e:75:b0:47:f1:d6:f0:c9:dd:a0:bb:d4:91:97:5d:b7:05:
cb:17:e3:79:96:1a:6d:73:7e:7d:b2:31:8f:39:1f:be:28:fb:
fe:5e:86:bc:87:66:7d:55:36:ec:ae:93:d1:93:f0:f3:9d:b2:
f9:5e:e8:78:bb:19:02:57:83:2f:9e:cf:ba:d1:42:5a:ea:b6:
de:4d:86:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohduwEJZ3vcJ+l0fNQTt7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw
MjY1YTIwHhcNMjUxMDI2MTcwMDMzWhcNMjUxMDI3MTcwMDMzWjAzMTEwLwYDVQQD
Eyg2MTJlZDM5M2ViMmYxNzI5YjIxN2I4OGQ3ZTZkYmQxNDQ3MTkxY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8LmTi4+GKwaXgL8TzL51VNNtt10
cAiBmDZuy+PdCEQo1LhjBfuXm3vhcKHarBrk7Jv70B3f4RzbZrAISRCMRQVl2Ahs
OMVVBZYogv1a5rjBiiwaR6kb4NR01IpFN1KC2pM9P4H9JW9Uq+CSiEQ9DhUlfEza
CwPTL251UrIKBCVg/r+4sGuCdXvZ6UNACWEFm8Jx6vgoFkAaQv2Dc9tlBQ0PWziJ
arh8TQuu75o0V2fzWKGey1sde1VPEN2qY33xYwRd8bvJCADDrru1QvHClR6syMFu
x6JHtjJ3dqjdnNi23sfeFpVvbzF2A1GKYSGkOBi18wrxjRugJE9k5/L59wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEu05PrLxcpshe4jX5tvRRHGRzoMB8GA1UdIwQY
MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt
YzE4YWQzNmE3YjMwLzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw
LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNllJ+Bq
zUtjtqZViF0DVDJR7Mq66jHJWku7MWHJiOtN5Y3kO0abJvTvy1WBAaXePyEZkiT2
Rb/sktLg3zVyh2Ig8eywyHhAdKTlYNENIiQp58sdw8oC7YdufUjtsYroaOm2jKZN
IXPrUjqNOSVzMGNFGscwavq9K/W2yED7sSt2kMRv5P1QGs1LJ/8SJeC5L/VMrQVP
csCbHiK8MWCq9wSZN1RHuB/rLthJMb03cWIlxkhT3g51sEfx1vDJ3aC71JGXXbcF
yxfjeZYabXN+fbIxjzkfvij7/l6GvIdmfVU27K6T0ZPw852y+V7oeLsZAleDL57P
utFCWuq23k2GcA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 19:17:47 2025 by rpki-client