Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: IWn156LKITKfecwNGjL7pJJWduZoB3c0HOJSVP4jmj4=
Subject key identifier: 78:61:BD:6E:CB:04:DF:A6:BC:46:E9:44:11:81:7C:4F:A5:1B:EA:48
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 019A2176F00C2260129F1C837CBE1C0AE5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 17:00:33 +0000
Manifest this update: Sun 26 Oct 2025 17:00:33 +0000
Manifest next update: Mon 27 Oct 2025 17:00:33 +0000
Files and hashes: 1: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: oew9fQxoe2yxQh87RkbmBe7njNHrPQjpRTwFpyM6TDk=)
2: lpQpCVUUyuieF-my1hQ69F4PEZk.roa (hash: WA4/OyJVwgJx0ERp2sKecmZzmYmPwtki2xCkuF+SczM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:f0:0c:22:60:12:9f:1c:83:7c:be:1c:0a:e5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Oct 26 17:00:33 2025 GMT
Not After : Oct 27 17:00:33 2025 GMT
Subject: CN=7861bd6ecb04dfa6bc46e94411817c4fa51bea48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:05:03:5a:56:60:aa:dc:7f:94:07:1d:41:87:
ec:6c:42:93:6a:51:89:8a:d9:19:ad:f3:04:3f:92:
dd:08:c1:54:37:8e:b2:ed:93:33:f4:3e:ed:cd:03:
eb:41:13:eb:e8:60:68:16:db:4b:70:be:ec:31:f3:
8b:6d:8f:0a:2f:91:66:fa:85:b7:41:b0:44:0b:de:
e2:64:71:2f:c6:ff:ee:94:9b:8d:1a:cb:2a:65:9d:
5a:9f:89:20:af:9c:31:cc:bc:fd:dd:79:16:02:ca:
a0:f8:6b:0f:49:a7:f7:8c:9d:3e:7c:63:ab:9e:15:
43:c3:87:20:65:90:62:99:93:22:6a:7e:6e:5b:9e:
bf:7d:3c:a1:dd:b1:79:50:93:fe:6f:5b:30:d4:b4:
70:8a:7e:0d:44:25:83:5f:d2:3f:64:21:9f:a9:e7:
64:e6:74:ce:60:e5:b7:29:88:e6:c9:70:f9:f6:d5:
b0:1f:5c:82:c9:07:6c:d3:4a:fc:ed:0d:94:c5:82:
1a:fb:eb:7e:b9:90:90:61:70:7d:1f:be:7a:bc:f6:
61:0e:37:d1:be:5b:66:7f:18:36:41:a6:bd:76:5d:
62:1f:19:eb:c4:78:98:5d:e8:0e:7c:ed:c1:18:47:
88:d8:ea:23:ec:f0:ee:98:90:72:ed:a7:01:79:08:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:61:BD:6E:CB:04:DF:A6:BC:46:E9:44:11:81:7C:4F:A5:1B:EA:48
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:52:17:71:f9:88:91:a1:4b:7d:8d:26:04:cb:2c:32:63:0b:
91:78:28:4d:bb:2c:00:d7:2b:db:76:e3:48:1e:77:19:fd:3b:
18:78:4c:b7:fd:cd:8d:b0:b2:3a:73:ac:39:13:83:39:5b:a3:
24:9b:8a:4d:7e:88:c4:16:c5:18:86:96:dc:a5:68:73:15:57:
3b:e3:2c:63:4f:4b:3c:38:b3:6d:81:a0:ef:f8:d0:61:c2:04:
21:9f:52:ff:b3:d8:cf:4a:ed:48:f6:c5:a2:a3:6d:d2:50:ff:
0e:84:e1:fd:a9:3d:9e:fa:f8:f1:e1:09:db:d6:24:fa:c5:ca:
40:c4:e9:ca:09:bd:63:3b:83:93:ef:42:04:da:a8:da:03:7f:
0f:6d:1e:43:ee:ed:e1:eb:a3:d7:8b:3c:d5:e5:d1:29:17:9e:
04:e1:6e:1c:6d:cb:aa:d9:aa:88:b8:99:0b:98:4c:e4:81:90:
6e:f7:cc:84:f7:a3:f2:59:03:a9:71:31:7b:b4:f2:0b:72:ac:
80:c8:6e:97:b4:fa:4c:cb:70:e8:5a:54:c0:43:08:ec:b6:4f:
c2:5f:90:b8:65:7f:a6:c5:34:5e:67:50:ba:fa:6f:4a:3e:bd:
01:b8:28:54:f1:d2:56:8e:ce:58:4c:d6:a2:53:33:15:b4:db:
37:88:de:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohdvAMImASnxyDfL4cCuWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMmFlZjRjN2JmZTdlMDcyZjYyZDJkZDUwNWFiNTdlMzdl
YTM4NWUwHhcNMjUxMDI2MTcwMDMzWhcNMjUxMDI3MTcwMDMzWjAzMTEwLwYDVQQD
Eyg3ODYxYmQ2ZWNiMDRkZmE2YmM0NmU5NDQxMTgxN2M0ZmE1MWJlYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigUDWlZgqtx/lAcdQYfsbEKTalGJ
itkZrfMEP5LdCMFUN46y7ZMz9D7tzQPrQRPr6GBoFttLcL7sMfOLbY8KL5Fm+oW3
QbBEC97iZHEvxv/ulJuNGssqZZ1an4kgr5wxzLz93XkWAsqg+GsPSaf3jJ0+fGOr
nhVDw4cgZZBimZMian5uW56/fTyh3bF5UJP+b1sw1LRwin4NRCWDX9I/ZCGfqedk
5nTOYOW3KYjmyXD59tWwH1yCyQds00r87Q2UxYIa++t+uZCQYXB9H756vPZhDjfR
vltmfxg2Qaa9dl1iHxnrxHiYXegOfO3BGEeI2Ooj7PDumJBy7acBeQgWwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhhvW7LBN+mvEbpRBGBfE+lG+pIMB8GA1UdIwQY
MBaAFGEq70x7/n4HL2LS3VBatX436jheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgt
YTIwN2M3YTE5ZWQyLzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgtYTIwN2M3YTE5ZWQy
LzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1IXcfmI
kaFLfY0mBMssMmMLkXgoTbssANcr23bjSB53Gf07GHhMt/3NjbCyOnOsORODOVuj
JJuKTX6IxBbFGIaW3KVocxVXO+MsY09LPDizbYGg7/jQYcIEIZ9S/7PYz0rtSPbF
oqNt0lD/DoTh/ak9nvr48eEJ29Yk+sXKQMTpygm9YzuDk+9CBNqo2gN/D20eQ+7t
4euj14s81eXRKReeBOFuHG3LqtmqiLiZC5hM5IGQbvfMhPej8lkDqXExe7TyC3Ks
gMhul7T6TMtw6FpUwEMI7LZPwl+QuGV/psU0XmdQuvpvSj69AbgoVPHSVo7OWEzW
olMzFbTbN4jekA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:06:12 2025 by rpki-client