Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier: dW9C9w93CGFvuO2bQ+3JCuc0J5MdFQv5nATTzuVXQJU=
Subject key identifier: F6:2A:6B:19:62:2D:C1:30:B6:C8:C1:EF:5F:F2:E8:C7:70:6D:74:F5
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial: 019A7112D3FC6694F542B2F9FAE17C4F770D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:00:50 +0000
Manifest this update: Tue 11 Nov 2025 04:00:50 +0000
Manifest next update: Wed 12 Nov 2025 04:00:50 +0000
Files and hashes: 1: 0BbFW_BAMtuxhOMr7yakRiiM3nk.roa (hash: cNxaXLNhQqWeIbn1R3i1vPo3toGI8Ah5QnfkdRtrGsY=)
2: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: 0SVMh9b6HnTCRAaKeogPAlbzZ+pLARAAlSAxXIo13k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d3:fc:66:94:f5:42:b2:f9:fa:e1:7c:4f:77:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Validity
Not Before: Nov 11 04:00:50 2025 GMT
Not After : Nov 12 04:00:50 2025 GMT
Subject: CN=f62a6b19622dc130b6c8c1ef5ff2e8c7706d74f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:66:b2:03:9b:29:f2:26:04:50:db:e0:74:49:
4b:ea:ee:bc:01:63:cd:65:d9:6f:1b:f5:d2:92:2c:
43:35:cb:d5:e4:85:80:66:a8:46:95:9e:72:7b:ee:
ab:45:5b:50:3d:16:a8:f7:f7:f4:bf:74:2c:d1:0f:
01:63:00:1e:c4:4c:ca:41:39:68:33:85:6a:7b:dd:
30:d9:49:be:0f:8d:9b:d1:58:53:5c:3d:63:02:84:
f4:0f:c4:4c:3b:dc:ff:81:0e:0a:72:fd:fb:1f:69:
20:27:00:5e:0d:50:7e:a5:0f:e3:fe:72:98:cf:2d:
b3:dc:65:4e:47:62:83:6e:92:22:5a:c0:fa:cb:fe:
63:a1:1a:01:47:54:88:0d:7a:a7:ad:bd:dd:40:6b:
26:de:87:c5:1d:3d:41:be:07:b8:b1:b6:09:1b:ae:
b2:8f:13:63:5d:3b:3b:99:83:4f:9f:b3:36:0e:e5:
c0:b1:b2:a6:5b:2b:c8:0b:0b:77:7d:f0:29:92:bb:
89:18:b1:7e:b9:1b:d3:60:8b:2d:6a:dd:4a:af:c4:
16:85:99:88:9f:d2:c9:14:c2:f1:92:af:88:08:cb:
d3:f7:1c:f2:23:8f:37:f3:54:78:0b:bd:5d:b4:d4:
44:f7:ed:82:40:de:30:48:d7:bd:42:c2:50:e0:ae:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:6B:19:62:2D:C1:30:B6:C8:C1:EF:5F:F2:E8:C7:70:6D:74:F5
X509v3 Authority Key Identifier:
keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d1:81:a0:b4:78:c3:15:42:64:05:6e:1c:8a:c5:48:aa:c3:
f6:bf:d0:29:3f:56:20:6c:af:d9:9b:c9:2f:f8:4e:2f:b6:89:
fc:5a:95:19:43:90:36:06:29:2e:64:67:cb:26:3b:ae:af:78:
32:ca:9c:b7:4e:9b:39:0e:a1:b0:9b:00:4c:56:cb:65:a2:69:
d2:83:43:e9:f8:f1:97:e8:ac:0e:0f:67:f4:00:e4:54:f7:15:
65:30:d0:ba:66:c4:25:67:bc:25:7e:6b:5b:26:fb:40:15:d3:
4b:77:4a:c1:bf:35:ac:76:88:43:70:c9:60:36:42:31:48:35:
75:c9:a3:85:27:fc:c3:22:a4:5f:b9:a5:01:7f:c0:6f:de:f0:
68:74:8b:9f:a3:7d:07:4b:e3:4d:e4:c9:65:4d:65:bf:a1:4c:
ea:73:96:b2:41:dc:2a:3c:0c:48:24:a3:c3:00:06:52:9b:7f:
43:70:1d:eb:56:6f:7a:cc:fe:00:40:4c:a3:2e:52:f1:7f:1a:
67:21:5c:5c:5c:54:ca:9f:c3:44:92:f8:25:df:bd:1c:00:4c:
b6:e6:68:10:4d:13:fe:e2:df:e9:84:83:e5:13:79:b8:43:c7:
5b:00:8a:af:01:a2:9e:66:d2:bb:92:da:19:2d:98:02:c2:a8:
28:29:6e:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtP8ZpT1QrL5+uF8T3cNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMDRkMGY4OTFkYzQ3NWVhNzAzZTZkZWYzZDZlYWQxZThm
N2MyZDYwHhcNMjUxMTExMDQwMDUwWhcNMjUxMTEyMDQwMDUwWjAzMTEwLwYDVQQD
EyhmNjJhNmIxOTYyMmRjMTMwYjZjOGMxZWY1ZmYyZThjNzcwNmQ3NGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92ayA5sp8iYEUNvgdElL6u68AWPN
ZdlvG/XSkixDNcvV5IWAZqhGlZ5ye+6rRVtQPRao9/f0v3Qs0Q8BYwAexEzKQTlo
M4Vqe90w2Um+D42b0VhTXD1jAoT0D8RMO9z/gQ4Kcv37H2kgJwBeDVB+pQ/j/nKY
zy2z3GVOR2KDbpIiWsD6y/5joRoBR1SIDXqnrb3dQGsm3ofFHT1Bvge4sbYJG66y
jxNjXTs7mYNPn7M2DuXAsbKmWyvICwt3ffApkruJGLF+uRvTYIstat1Kr8QWhZmI
n9LJFMLxkq+ICMvT9xzyI48381R4C71dtNRE9+2CQN4wSNe9QsJQ4K69XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYqaxliLcEwtsjB71/y6MdwbXT1MB8GA1UdIwQY
MBaAFGIE0PiR3EdepwPm3vPW6tHo98LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mOTYxMjEtMDMzNS00MDJkLTg0OTEt
NGQ4OGZjZTMyMzk5LzEvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mOTYxMjEtMDMzNS00MDJkLTg0OTEtNGQ4OGZjZTMyMzk5
LzEvWWdUUS1KSGNSMTZuQS1iZTg5YnEwZWozd3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9GBoLR4
wxVCZAVuHIrFSKrD9r/QKT9WIGyv2ZvJL/hOL7aJ/FqVGUOQNgYpLmRnyyY7rq94
Msqct06bOQ6hsJsATFbLZaJp0oND6fjxl+isDg9n9ADkVPcVZTDQumbEJWe8JX5r
Wyb7QBXTS3dKwb81rHaIQ3DJYDZCMUg1dcmjhSf8wyKkX7mlAX/Ab97waHSLn6N9
B0vjTeTJZU1lv6FM6nOWskHcKjwMSCSjwwAGUpt/Q3Ad61Zvesz+AEBMoy5S8X8a
ZyFcXFxUyp/DRJL4Jd+9HABMtuZoEE0T/uLf6YSD5RN5uEPHWwCKrwGinmbSu5La
GS2YAsKoKCluxQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:26 2025 by rpki-client