Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft
File: YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft (raw, json)
Hash identifier: W4FKvh09FRIwOlHOX2ik/Xoevn3M1E7xzu0yALfd3Xw=
Subject key identifier: C2:4A:34:9A:5F:69:F9:D1:3D:0F:B8:D3:70:B6:C9:0C:A7:AC:15:13
Authority key identifier: 62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF
Certificate issuer: /CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf
Certificate serial: 019A4EF46A84757A1C94067D51396B847F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft
Manifest number: 07E1
Signing time: Tue 04 Nov 2025 13:00:32 +0000
Manifest this update: Tue 04 Nov 2025 13:00:32 +0000
Manifest next update: Wed 05 Nov 2025 13:00:32 +0000
Files and hashes: 1: YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl (hash: xhF8sFjM6JZHac6h4Ftd3urcAIKrlyF8wCL6Giqt5Us=)
2: p0WThpG_MdNvN5PcmLOinicnMKU.roa (hash: mWE6tAtdJrB/Zm93V43/E521MfBc5yD2nOmUvWByQN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6a:84:75:7a:1c:94:06:7d:51:39:6b:84:7f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf
Validity
Not Before: Nov 4 13:00:32 2025 GMT
Not After : Nov 5 13:00:32 2025 GMT
Subject: CN=c24a349a5f69f9d13d0fb8d370b6c90ca7ac1513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:9c:30:71:2c:57:6e:cc:9d:c0:bf:13:9e:
3f:4e:6f:37:67:49:57:14:ac:8a:f7:13:3f:a6:15:
ac:05:40:f2:f4:99:c6:38:df:81:a7:15:48:9b:69:
83:a2:0d:85:0c:42:34:d4:4b:c9:c0:bb:7d:33:84:
3e:af:f1:15:9f:3d:d9:0b:b6:53:d4:9f:98:66:b2:
67:6f:d9:86:12:01:3f:bd:a3:b8:71:d0:15:03:c2:
1c:1b:1e:0b:6b:de:ea:e6:46:75:68:93:7f:c1:74:
ee:a8:e1:75:32:44:71:a3:ac:28:bd:05:07:2c:14:
d1:7c:47:51:09:7b:f0:b2:a3:4e:ce:65:d6:f9:dc:
a4:da:6c:ae:a5:6d:7e:6f:91:da:b5:ca:eb:69:ff:
3e:86:5e:a8:00:2c:8d:e0:52:23:37:99:f8:b0:4a:
4f:80:eb:26:51:f3:6e:9d:69:60:1f:6d:bf:58:05:
d2:b1:d6:d5:f6:4c:a9:8a:8a:4f:5b:52:3c:1a:c4:
2c:c3:c3:26:f7:44:bd:c2:da:a3:8b:d1:76:26:4a:
1c:c6:c2:07:8a:f5:b4:85:ad:df:fb:cf:e4:47:7f:
a7:d5:1e:f8:77:74:9b:71:20:ca:bf:5e:c3:9c:59:
31:79:34:51:93:77:b0:5d:a0:d6:67:d4:df:1a:21:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:34:9A:5F:69:F9:D1:3D:0F:B8:D3:70:B6:C9:0C:A7:AC:15:13
X509v3 Authority Key Identifier:
keyid:62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:22:6c:ea:0b:f8:ad:9b:8f:2b:e0:f6:b0:7a:0c:36:b2:01:
8a:33:dd:6a:82:43:7d:c3:3d:0b:33:e7:3f:ea:a0:f2:40:65:
25:33:2f:fa:a6:32:9e:9f:3e:2d:b3:15:e2:2b:87:2c:81:4d:
bd:57:61:6f:e0:e9:b6:5e:f0:b0:0b:52:10:77:d2:6f:ac:bf:
8e:ca:8e:a5:eb:2d:63:09:04:41:1d:17:b9:51:56:23:12:ce:
1f:7a:02:cb:f1:2a:b5:c2:50:43:47:bc:f5:9c:e0:4c:81:13:
6a:df:7e:1a:66:70:d1:ab:9c:4a:ab:9e:4d:97:70:29:47:22:
64:d9:f3:0b:a5:61:84:91:b6:cf:f9:33:ae:31:6c:24:a7:08:
e5:f5:38:9e:99:a3:b9:1e:76:79:b8:88:cd:fc:fe:5e:32:48:
99:76:58:aa:01:90:b5:bc:12:12:b4:89:b8:95:14:a4:2e:15:
b9:3a:29:24:04:79:32:49:84:f1:ca:d8:98:c5:06:95:ea:f4:
27:a7:d9:0c:b3:10:3a:a1:f4:a3:70:05:a1:a2:30:da:da:9f:
c0:43:e0:dd:14:e4:71:90:c3:e4:03:4a:85:22:23:77:02:87:
b0:79:39:27:ad:90:ee:c7:36:36:30:f6:c3:af:37:c5:b1:c9:
7b:4a:e1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9GqEdXoclAZ9UTlrhH8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzlkYjE0YWMwMThiZTNiNjdkMjBiNjdlMGQ5YmEzNzZk
YmQ5YmYwHhcNMjUxMTA0MTMwMDMyWhcNMjUxMTA1MTMwMDMyWjAzMTEwLwYDVQQD
EyhjMjRhMzQ5YTVmNjlmOWQxM2QwZmI4ZDM3MGI2YzkwY2E3YWMxNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBGcMHEsV27MncC/E54/Tm83Z0lX
FKyK9xM/phWsBUDy9JnGON+BpxVIm2mDog2FDEI01EvJwLt9M4Q+r/EVnz3ZC7ZT
1J+YZrJnb9mGEgE/vaO4cdAVA8IcGx4La97q5kZ1aJN/wXTuqOF1MkRxo6wovQUH
LBTRfEdRCXvwsqNOzmXW+dyk2myupW1+b5Hatcrraf8+hl6oACyN4FIjN5n4sEpP
gOsmUfNunWlgH22/WAXSsdbV9kypiopPW1I8GsQsw8Mm90S9wtqji9F2JkocxsIH
ivW0ha3f+8/kR3+n1R74d3SbcSDKv17DnFkxeTRRk3ewXaDWZ9TfGiE7mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJKNJpfafnRPQ+403C2yQynrBUTMB8GA1UdIwQY
MBaAFGJ52xSsAYvjtn0gtn4Nm6N229m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5uYkZLd0JpLU8yZlNDMmZnMmJvM2JiMmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yNzUzZGQtNzQ0NC00Yjk3LWI3M2It
MGIzNGVkYzQxOGQ4LzEvWW5uYkZLd0JpLU8yZlNDMmZnMmJvM2JiMmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yNzUzZGQtNzQ0NC00Yjk3LWI3M2ItMGIzNGVkYzQxOGQ4
LzEvWW5uYkZLd0JpLU8yZlNDMmZnMmJvM2JiMmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCJs6gv4
rZuPK+D2sHoMNrIBijPdaoJDfcM9CzPnP+qg8kBlJTMv+qYynp8+LbMV4iuHLIFN
vVdhb+Dptl7wsAtSEHfSb6y/jsqOpestYwkEQR0XuVFWIxLOH3oCy/EqtcJQQ0e8
9ZzgTIETat9+GmZw0aucSqueTZdwKUciZNnzC6VhhJG2z/kzrjFsJKcI5fU4npmj
uR52ebiIzfz+XjJImXZYqgGQtbwSErSJuJUUpC4VuTopJAR5MkmE8crYmMUGler0
J6fZDLMQOqH0o3AFoaIw2tqfwEPg3RTkcZDD5ANKhSIjdwKHsHk5J62Q7sc2NjD2
w683xbHJe0rhpA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:04 2025 by rpki-client