Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier: UcYe59LWI2/gMpy08sWyn21qdqdgVOAb4RBMO7XBfVU=
Subject key identifier: 39:33:4D:72:4A:CC:29:B1:C3:7B:44:FD:D9:98:F4:81:B1:AE:BB:30
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 019A2A438B8F0D9DE46FE99403C720F71095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number: 049F
Signing time: Tue 28 Oct 2025 10:01:00 +0000
Manifest this update: Tue 28 Oct 2025 10:01:00 +0000
Manifest next update: Wed 29 Oct 2025 10:01:00 +0000
Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: FOqi84LQirZwuJ+BXpw9O44D1MVCZRFiX2hcfLDpnb8=)
2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:8b:8f:0d:9d:e4:6f:e9:94:03:c7:20:f7:10:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Oct 28 10:01:00 2025 GMT
Not After : Oct 29 10:01:00 2025 GMT
Subject: CN=39334d724acc29b1c37b44fdd998f481b1aebb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:22:41:3e:f9:b3:8d:c7:db:b1:d6:6b:8f:
96:8e:57:f4:a3:15:b2:69:47:75:dd:ba:5d:3b:cc:
19:46:b4:38:a2:8d:73:81:61:d4:3c:ab:c0:32:35:
f7:16:46:5a:e2:de:3b:e7:39:1e:7a:e0:7d:00:6a:
ff:4b:5c:81:4f:a0:8b:3f:d5:7f:c2:22:3f:b4:e1:
5d:74:8a:d1:4e:0d:71:72:66:b7:7c:bc:89:e0:38:
df:fa:2f:33:ab:da:b5:91:8c:fb:11:73:b5:f9:91:
89:42:87:16:5d:55:f6:c5:a6:4a:45:04:8b:69:9f:
78:22:9e:92:bb:f0:a8:7a:8a:1a:4a:4e:cb:01:46:
ba:44:ba:53:a6:94:e3:37:e3:7c:c4:0a:61:35:5c:
43:c8:ab:59:55:02:ab:af:f6:8f:36:eb:75:95:42:
8e:39:a4:1a:b2:5f:a9:be:c2:29:d0:c3:18:21:40:
99:41:b5:f2:31:69:8f:e8:e1:af:e7:2b:c5:72:50:
2a:c1:7d:09:b7:d0:1c:0e:14:f5:96:fb:64:5e:dc:
16:a3:fe:7f:b1:b5:fa:60:c4:9e:f0:d4:20:ab:23:
3f:79:e1:0e:f3:ed:cf:20:3f:71:b9:c2:75:77:90:
a5:46:5a:93:2c:ee:d9:6b:c7:7e:b0:6c:f4:82:8e:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:33:4D:72:4A:CC:29:B1:C3:7B:44:FD:D9:98:F4:81:B1:AE:BB:30
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:de:4d:b7:07:2d:c8:f4:79:c5:97:54:ba:40:60:7c:e5:7a:
96:30:67:af:83:40:64:60:a1:6f:e0:7f:34:80:ed:1d:6f:37:
da:4f:32:e7:56:0b:ac:65:88:88:e3:c4:0b:82:09:bf:31:ef:
c1:52:a1:f7:a0:92:bf:ad:aa:8c:cd:a1:75:38:3f:c0:8c:29:
ac:b0:21:47:c2:0f:02:a3:25:39:0b:3b:1a:d2:f1:52:3e:25:
1c:5f:2b:b3:79:8e:48:01:27:7a:98:c4:36:66:f3:76:72:28:
9a:04:8c:2a:6b:84:2d:b6:19:1c:0c:d9:0a:93:32:22:58:0e:
db:41:08:ba:1c:82:17:ff:3f:fe:d0:04:73:74:07:1f:4e:8a:
53:43:49:07:8a:a2:e0:8d:ff:67:b4:98:63:b8:73:08:d4:bd:
34:61:db:0a:6e:09:7b:7a:0a:54:dd:a6:d6:3a:ac:bb:71:ea:
0b:8d:8c:49:91:a9:75:33:d2:e1:8d:d6:2c:32:12:32:c2:6b:
c6:3f:e2:56:be:1e:57:93:e2:38:7b:4b:d6:27:65:12:03:35:
f4:ee:53:89:b2:ef:ac:a2:7b:01:21:28:6e:39:12:07:cf:c2:
ce:d8:96:5d:82:80:7e:16:a5:d2:f1:3f:f5:9d:41:ec:52:b3:
0f:1e:97:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQ4uPDZ3kb+mUA8cg9xCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzdkMmZjYmQ0M2E1MWU1MzFiYzk4YmZhYjVlYWY3MTkw
MDkwYWYwHhcNMjUxMDI4MTAwMTAwWhcNMjUxMDI5MTAwMTAwWjAzMTEwLwYDVQQD
EygzOTMzNGQ3MjRhY2MyOWIxYzM3YjQ0ZmRkOTk4ZjQ4MWIxYWViYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd4iQT75s43H27HWa4+Wjlf0oxWy
aUd13bpdO8wZRrQ4oo1zgWHUPKvAMjX3FkZa4t475zkeeuB9AGr/S1yBT6CLP9V/
wiI/tOFddIrRTg1xcma3fLyJ4Djf+i8zq9q1kYz7EXO1+ZGJQocWXVX2xaZKRQSL
aZ94Ip6Su/CoeooaSk7LAUa6RLpTppTjN+N8xAphNVxDyKtZVQKrr/aPNut1lUKO
OaQasl+pvsIp0MMYIUCZQbXyMWmP6OGv5yvFclAqwX0Jt9AcDhT1lvtkXtwWo/5/
sbX6YMSe8NQgqyM/eeEO8+3PID9xucJ1d5ClRlqTLO7Za8d+sGz0go7tTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkzTXJKzCmxw3tE/dmY9IGxrrswMB8GA1UdIwQY
MBaAFGE30vy9Q6UeUxvJi/q16vcZAJCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYt
NzMyNjUzYzRmZTJjLzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYtNzMyNjUzYzRmZTJj
LzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnd5Ntwct
yPR5xZdUukBgfOV6ljBnr4NAZGChb+B/NIDtHW832k8y51YLrGWIiOPEC4IJvzHv
wVKh96CSv62qjM2hdTg/wIwprLAhR8IPAqMlOQs7GtLxUj4lHF8rs3mOSAEnepjE
NmbzdnIomgSMKmuELbYZHAzZCpMyIlgO20EIuhyCF/8//tAEc3QHH06KU0NJB4qi
4I3/Z7SYY7hzCNS9NGHbCm4Je3oKVN2m1jqsu3HqC42MSZGpdTPS4Y3WLDISMsJr
xj/iVr4eV5PiOHtL1idlEgM19O5TibLvrKJ7ASEobjkSB8/CztiWXYKAfhal0vE/
9Z1B7FKzDx6XxA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:14:24 2025 by rpki-client