Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: vJL3gOuXR0cn7hqfmOOMhvQ8SldeqBx5L5Yo43/g+fM=
Subject key identifier: E1:05:84:8C:05:8F:4E:37:83:F2:69:AB:83:FC:57:E1:4E:29:4F:08
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 019A4EF42051B99785F937A4A79B500B0D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:13 +0000
Manifest this update: Tue 04 Nov 2025 13:00:13 +0000
Manifest next update: Wed 05 Nov 2025 13:00:13 +0000
Files and hashes: 1: UGjGolH12_x3cCDDDs-wfhhaN4U.roa (hash: FV6D5mk0nwiH6BRySmQ169aN1Z1SEVl4Kc/yfJEULos=)
2: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: BzoouDjn5i1HdIZDIjLY6khy4nj+LpA5H6BmCoWPqVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:20:51:b9:97:85:f9:37:a4:a7:9b:50:0b:0d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: Nov 4 13:00:13 2025 GMT
Not After : Nov 5 13:00:13 2025 GMT
Subject: CN=e105848c058f4e3783f269ab83fc57e14e294f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:e3:48:16:74:0a:2b:d1:73:fa:55:22:33:
ff:ee:ed:25:f1:2e:f6:6c:d5:69:ed:b1:43:14:d6:
da:e2:6d:bf:c0:07:1d:42:9f:e4:44:cc:de:5f:2c:
d5:23:c6:58:44:4c:42:89:7d:11:7c:b1:5e:66:b5:
85:41:b4:21:d8:67:8d:8a:33:6e:a7:90:c1:c1:5e:
b1:20:a6:ed:ce:19:59:c8:f0:b7:02:62:c8:f0:9a:
7f:4b:6e:f3:7f:33:32:fd:d7:f0:f1:3e:b9:b7:26:
2f:05:0d:6e:ed:26:5e:82:f3:97:82:79:2e:04:16:
c5:e6:10:03:59:31:49:10:73:22:39:fd:18:9f:98:
99:bd:45:68:22:f2:c9:f5:89:38:5e:1e:e6:e5:2c:
9a:f0:64:0d:6a:53:8c:ce:3c:2d:17:47:e0:b8:c5:
47:cc:5a:b4:74:0a:0f:70:cd:2c:a3:92:90:d8:fa:
53:e0:8f:6c:66:41:87:12:9f:fc:21:7a:9e:55:14:
cd:6c:b4:32:1d:34:85:db:78:fb:4e:9a:17:27:2c:
8f:5e:1d:e9:17:87:3e:4f:51:73:f7:46:69:06:51:
c8:24:bd:78:94:bc:4e:d2:af:78:ed:7f:43:64:fd:
74:a9:2f:85:9a:5e:91:41:64:e1:c7:9e:07:f0:e1:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:05:84:8C:05:8F:4E:37:83:F2:69:AB:83:FC:57:E1:4E:29:4F:08
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:68:96:e2:68:7d:c8:29:d8:bd:f6:61:67:e4:26:1d:a3:46:
fc:70:dd:fa:cd:d5:66:de:a7:21:1e:cb:55:aa:72:cf:e8:25:
55:49:c8:11:b7:8a:25:f8:e2:ef:4c:fe:b8:db:f0:31:be:a7:
27:cc:fe:87:e8:fe:9e:37:bb:e8:35:bc:d4:5f:62:1c:1e:e5:
38:fb:80:c3:76:4e:2e:f3:8d:a8:0b:c6:49:b9:bc:29:35:82:
0e:ea:98:f5:99:b8:ae:5f:52:00:af:d8:63:5b:92:11:c2:d6:
84:44:87:97:03:94:3d:80:9e:ff:af:af:6d:bd:76:08:e2:43:
bd:f3:4f:a8:d5:94:a9:e3:5e:5d:ff:07:ee:a0:3d:9c:54:2d:
2f:d5:5f:ca:6d:11:00:36:ca:42:a0:0b:33:f8:a9:3f:50:56:
dc:e8:37:cb:52:66:39:38:a6:ab:e8:40:e2:fc:a1:2f:e4:3a:
21:8e:80:5c:e2:d7:aa:cc:fb:7a:f3:f6:21:ec:f6:85:a1:e5:
e9:1d:e5:56:f6:f9:25:64:c5:4e:51:c9:8b:24:5d:c0:da:ff:
1f:29:b1:81:af:4d:bd:23:0a:c7:85:33:59:fd:96:b3:53:aa:
8a:69:80:02:1d:8c:8c:a0:99:03:f2:f4:cb:6d:a8:2b:21:a4:
fd:26:a3:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9CBRuZeF+Tekp5tQCw1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTEwYTFjNjZhMGU2MDAyNGFiYWI2MmQzMzI2ODJjNzEz
YWEzNDcwHhcNMjUxMTA0MTMwMDEzWhcNMjUxMTA1MTMwMDEzWjAzMTEwLwYDVQQD
EyhlMTA1ODQ4YzA1OGY0ZTM3ODNmMjY5YWI4M2ZjNTdlMTRlMjk0ZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxHjSBZ0CivRc/pVIjP/7u0l8S72
bNVp7bFDFNba4m2/wAcdQp/kRMzeXyzVI8ZYRExCiX0RfLFeZrWFQbQh2GeNijNu
p5DBwV6xIKbtzhlZyPC3AmLI8Jp/S27zfzMy/dfw8T65tyYvBQ1u7SZegvOXgnku
BBbF5hADWTFJEHMiOf0Yn5iZvUVoIvLJ9Yk4Xh7m5Sya8GQNalOMzjwtF0fguMVH
zFq0dAoPcM0so5KQ2PpT4I9sZkGHEp/8IXqeVRTNbLQyHTSF23j7TpoXJyyPXh3p
F4c+T1Fz90ZpBlHIJL14lLxO0q947X9DZP10qS+Fml6RQWThx54H8OF0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEFhIwFj043g/Jpq4P8V+FOKU8IMB8GA1UdIwQY
MBaAFGDhChxmoOYAJKurYtMyaCxxOqNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2Mt
NjQxNzcwNzUxN2Q2LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2MtNjQxNzcwNzUxN2Q2
LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmiW4mh9
yCnYvfZhZ+QmHaNG/HDd+s3VZt6nIR7LVapyz+glVUnIEbeKJfji70z+uNvwMb6n
J8z+h+j+nje76DW81F9iHB7lOPuAw3ZOLvONqAvGSbm8KTWCDuqY9Zm4rl9SAK/Y
Y1uSEcLWhESHlwOUPYCe/6+vbb12COJDvfNPqNWUqeNeXf8H7qA9nFQtL9Vfym0R
ADbKQqALM/ipP1BW3Og3y1JmOTimq+hA4vyhL+Q6IY6AXOLXqsz7evP2Iez2haHl
6R3lVvb5JWTFTlHJiyRdwNr/Hymxga9NvSMKx4UzWf2Ws1OqimmAAh2MjKCZA/L0
y22oKyGk/SajBA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:04:10 2025 by rpki-client