Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
File: YAJlJf1EpPx1siRPgNAiY09fdjU.mft (raw, json)
Hash identifier: GinAFmPmiiy3Bc4acD/iDHChV6qwLTvdbF/OS5YQSSE=
Subject key identifier: 7B:80:B9:54:1E:51:11:35:42:03:2F:49:EE:FC:56:07:7B:6C:A1:D7
Authority key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
Certificate issuer: /CN=60026525fd44a4fc75b2244f80d022634f5f7635
Certificate serial: 019A70DBF54D30751BFE81057148483E2D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
Manifest number: 0116
Signing time: Tue 11 Nov 2025 03:00:54 +0000
Manifest this update: Tue 11 Nov 2025 03:00:54 +0000
Manifest next update: Wed 12 Nov 2025 03:00:54 +0000
Files and hashes: 1: YAJlJf1EpPx1siRPgNAiY09fdjU.crl (hash: consCAC9cC0BOGPyw1KXNvuFe9kMUq8TdgXdt/bXL+w=)
2: g9nWnsJ4s0Q4AdnedyFGxQkezGU.roa (hash: BaThYpCk19U9MWT3c8G8+GXTTA8NVbJPkga6Sb96+1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f5:4d:30:75:1b:fe:81:05:71:48:48:3e:2d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60026525fd44a4fc75b2244f80d022634f5f7635
Validity
Not Before: Nov 11 03:00:54 2025 GMT
Not After : Nov 12 03:00:54 2025 GMT
Subject: CN=7b80b9541e51113542032f49eefc56077b6ca1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:4a:24:8e:f2:d7:32:a3:93:c9:fe:87:83:
0e:90:48:3f:f4:bb:7e:47:82:d0:ae:7c:e0:7c:b2:
e3:85:b8:fa:86:6d:f0:ee:3c:76:93:70:13:74:e8:
f8:0f:c9:49:90:ff:b6:77:ba:f3:82:1f:3c:a6:52:
85:c3:10:b1:3e:69:05:da:95:9f:bf:d5:a3:86:6f:
86:f7:83:a6:a0:6d:28:17:3d:87:d9:15:0e:55:63:
6b:e6:92:d5:df:e4:a8:cb:2a:c5:ef:d5:58:15:4b:
70:55:5f:77:db:32:2f:ef:9c:d8:74:86:a3:8b:b9:
d4:3b:0e:a1:e7:3c:8c:e2:5f:74:5d:db:f4:02:37:
ae:85:71:1f:ea:ff:e2:c2:70:78:12:34:3a:16:22:
eb:7d:b8:18:de:da:b6:26:34:83:d0:47:77:f7:1b:
60:ff:91:1d:6e:80:2f:ec:d0:1c:56:24:be:d9:a2:
dd:8c:d1:89:bd:8d:57:53:ac:85:5a:f6:b0:bb:17:
2d:66:78:69:5f:c0:da:aa:c0:d0:a0:c3:1a:83:b5:
4c:76:e4:7a:86:d3:3c:d9:9b:30:75:b3:da:dc:1e:
f6:f4:3c:81:a9:74:7f:7e:a8:ba:d5:ce:f1:71:6e:
9f:e5:67:ae:58:97:5b:a8:3e:e4:78:13:5c:a3:cd:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:80:B9:54:1E:51:11:35:42:03:2F:49:EE:FC:56:07:7B:6C:A1:D7
X509v3 Authority Key Identifier:
keyid:60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0c:93:03:36:7d:4c:6a:a7:17:0c:d6:9a:1c:c7:9f:4d:14:
0c:bf:e1:3b:c3:9d:a8:cc:88:ca:2d:7e:9e:6a:c7:e7:d8:4d:
3e:0e:cc:34:de:82:c0:50:6c:11:ae:aa:50:26:95:c2:08:49:
9e:a4:85:bc:f3:53:f5:79:30:62:3b:7c:a6:b9:24:0a:81:34:
94:85:f7:1f:3e:a4:b8:55:ac:ea:ba:60:96:af:65:3d:70:cc:
b6:1b:2a:7d:3a:bf:44:91:29:89:bb:35:d2:44:44:6f:38:81:
c4:de:21:e4:a5:a4:e1:b9:0d:2c:f9:78:aa:27:47:ad:69:a6:
46:d1:4e:c2:d8:a4:1b:e5:99:a3:b2:d1:ef:37:70:36:4d:86:
cb:d2:ba:77:6c:1c:93:7f:9a:0b:47:2d:86:93:75:21:21:96:
40:ae:e1:68:29:16:98:fb:21:b6:fd:ff:ef:50:00:3d:ad:50:
e4:b0:55:62:48:e6:07:de:9f:00:be:5f:f1:6c:4e:b3:a9:e0:
cd:43:f9:4f:26:29:59:8c:66:26:e2:d1:f7:80:86:a7:ed:af:
3a:27:fb:13:0a:60:ba:20:1f:a7:9d:46:4b:ac:19:6f:24:83:
2c:5b:55:c8:6c:28:cc:7d:03:1d:79:e0:e6:f9:0c:ad:b6:e9:
b0:f8:e8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2/VNMHUb/oEFcUhIPi2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDI2NTI1ZmQ0NGE0ZmM3NWIyMjQ0ZjgwZDAyMjYzNGY1
Zjc2MzUwHhcNMjUxMTExMDMwMDU0WhcNMjUxMTEyMDMwMDU0WjAzMTEwLwYDVQQD
Eyg3YjgwYjk1NDFlNTExMTM1NDIwMzJmNDllZWZjNTYwNzdiNmNhMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA099KJI7y1zKjk8n+h4MOkEg/9Lt+
R4LQrnzgfLLjhbj6hm3w7jx2k3ATdOj4D8lJkP+2d7rzgh88plKFwxCxPmkF2pWf
v9Wjhm+G94OmoG0oFz2H2RUOVWNr5pLV3+SoyyrF79VYFUtwVV932zIv75zYdIaj
i7nUOw6h5zyM4l90Xdv0AjeuhXEf6v/iwnB4EjQ6FiLrfbgY3tq2JjSD0Ed39xtg
/5EdboAv7NAcViS+2aLdjNGJvY1XU6yFWvawuxctZnhpX8DaqsDQoMMag7VMduR6
htM82ZswdbPa3B729DyBqXR/fqi61c7xcW6f5WeuWJdbqD7keBNco833XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuAuVQeURE1QgMvSe78Vgd7bKHXMB8GA1UdIwQY
MBaAFGACZSX9RKT8dbIkT4DQImNPX3Y1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMt
ZmE5MjMzNTM1ZmYxLzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMtZmE5MjMzNTM1ZmYx
LzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQyTAzZ9
TGqnFwzWmhzHn00UDL/hO8OdqMyIyi1+nmrH59hNPg7MNN6CwFBsEa6qUCaVwghJ
nqSFvPNT9XkwYjt8prkkCoE0lIX3Hz6kuFWs6rpglq9lPXDMthsqfTq/RJEpibs1
0kREbziBxN4h5KWk4bkNLPl4qidHrWmmRtFOwtikG+WZo7LR7zdwNk2Gy9K6d2wc
k3+aC0cthpN1ISGWQK7haCkWmPshtv3/71AAPa1Q5LBVYkjmB96fAL5f8WxOs6ng
zUP5TyYpWYxmJuLR94CGp+2vOif7EwpguiAfp51GS6wZbySDLFtVyGwozH0DHXng
5vkMrbbpsPjoYA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:27 2025 by rpki-client