Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier: uGdYqSJujc5221P7Xtc2CFwXfTUfZ58awj+xF371EHo=
Subject key identifier: C9:69:D6:48:E2:2D:7E:F2:D2:81:2B:06:03:61:82:75:5E:8A:FF:A3
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 019A4E4FA6E6639E661863C984D2F5D8A54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 10:00:33 +0000
Manifest this update: Tue 04 Nov 2025 10:00:33 +0000
Manifest next update: Wed 05 Nov 2025 10:00:33 +0000
Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=)
2: Djx6QNMoJb-cW9yeKmXUOuLZGxc.roa (hash: kSdS/jX6rRQff6lKohOcXS4NIaspZuS+tTFddGQqIfY=)
3: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: 1Wcd84UfOadb/kNASnI4m0uuA3hRDdXKYPp6kxrp55M=)
4: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a6:e6:63:9e:66:18:63:c9:84:d2:f5:d8:a5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Nov 4 10:00:33 2025 GMT
Not After : Nov 5 10:00:33 2025 GMT
Subject: CN=c969d648e22d7ef2d2812b06036182755e8affa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:ac:d2:f4:8b:01:d5:11:b0:4f:08:24:6e:
db:a4:df:57:4b:33:92:7f:d4:f5:41:d7:e6:7a:e3:
24:ce:d8:0e:01:f1:11:c9:37:b9:a2:07:a9:23:8c:
1b:36:ae:fc:bd:f1:62:3f:55:22:e7:ee:e9:a9:da:
fb:4d:58:9f:4a:e7:16:a9:0d:ef:3a:a2:3b:1e:81:
13:b2:d8:93:f5:b7:f3:db:87:3e:c6:d0:45:e7:60:
13:5c:0e:4b:58:cf:68:57:e4:49:f5:3c:14:65:99:
a3:01:23:4d:bd:52:39:1d:c9:15:2f:da:c1:46:5a:
55:aa:af:f8:e1:05:f7:ab:a4:71:b1:45:02:15:18:
00:a2:82:17:f4:f9:0e:91:31:2f:b5:57:16:a0:f2:
d9:fb:c2:7b:1d:4c:1a:04:f7:0f:c2:f3:f7:01:60:
c4:da:12:bf:b2:44:ef:a7:f0:3b:e7:0c:af:30:a6:
78:30:2c:7f:d2:0f:8e:36:1e:8e:3b:ec:77:04:e1:
bb:2b:d7:c6:2b:fd:f5:52:db:f5:ed:59:10:0d:73:
b7:58:6b:cb:89:4a:80:1a:aa:bc:13:27:e3:b6:25:
6f:35:26:4c:d6:27:44:34:c1:32:72:b7:af:da:f1:
36:40:e6:f8:f4:35:81:95:d6:37:d2:dd:db:35:80:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:69:D6:48:E2:2D:7E:F2:D2:81:2B:06:03:61:82:75:5E:8A:FF:A3
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e7:ef:00:14:07:d7:3a:ab:3d:43:95:b3:48:68:65:98:f2:
3a:52:ec:ae:ae:ec:e6:b4:b5:99:c7:6c:c4:11:26:31:a9:ea:
85:a0:47:9c:b7:98:cf:a7:e2:5d:7e:f1:1d:d0:1b:12:7e:72:
90:89:52:58:46:1a:0a:87:5d:f4:5b:7d:80:09:d6:f0:d5:71:
01:00:56:3f:93:90:24:42:6f:9f:70:3e:1f:c7:07:05:c9:b3:
bb:44:27:ec:6b:a7:0a:67:cd:27:54:f3:6a:89:f2:a9:df:aa:
de:15:8f:a7:38:73:cf:19:2b:6c:1c:0f:f5:fa:20:5a:dd:23:
d7:f0:9d:75:63:01:0f:36:c3:54:5d:d0:53:cf:de:78:15:63:
1d:76:f6:4b:88:39:23:7d:b3:07:c5:d5:90:7c:4e:25:62:1c:
4b:16:6f:f0:05:34:c6:1e:2c:36:07:97:ae:40:e6:91:21:2e:
4b:24:28:80:c3:d9:6f:ad:f4:74:71:c6:e0:9c:63:03:2e:ca:
6e:c1:b5:85:aa:a1:c6:c4:6f:26:a2:f2:fc:fa:42:52:ea:99:
b7:04:44:45:c3:cf:5b:f6:36:64:88:81:de:8c:c0:04:e4:a0:
95:5d:c6:d4:3b:8c:db:a5:34:95:3c:31:30:f8:7b:f7:a6:25:
ff:d1:ac:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT6bmY55mGGPJhNL12KVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2
NDZjMmEwHhcNMjUxMTA0MTAwMDMzWhcNMjUxMTA1MTAwMDMzWjAzMTEwLwYDVQQD
EyhjOTY5ZDY0OGUyMmQ3ZWYyZDI4MTJiMDYwMzYxODI3NTVlOGFmZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaCs0vSLAdURsE8IJG7bpN9XSzOS
f9T1QdfmeuMkztgOAfERyTe5ogepI4wbNq78vfFiP1Ui5+7pqdr7TVifSucWqQ3v
OqI7HoETstiT9bfz24c+xtBF52ATXA5LWM9oV+RJ9TwUZZmjASNNvVI5HckVL9rB
RlpVqq/44QX3q6RxsUUCFRgAooIX9PkOkTEvtVcWoPLZ+8J7HUwaBPcPwvP3AWDE
2hK/skTvp/A75wyvMKZ4MCx/0g+ONh6OO+x3BOG7K9fGK/31Utv17VkQDXO3WGvL
iUqAGqq8EyfjtiVvNSZM1idENMEycrev2vE2QOb49DWBldY30t3bNYBKDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlp1kjiLX7y0oErBgNhgnVeiv+jMB8GA1UdIwQY
MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt
NjAxNmQ1YzA1ZjMwLzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQtNjAxNmQ1YzA1ZjMw
LzEvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOfvABQH
1zqrPUOVs0hoZZjyOlLsrq7s5rS1mcdsxBEmManqhaBHnLeYz6fiXX7xHdAbEn5y
kIlSWEYaCodd9Ft9gAnW8NVxAQBWP5OQJEJvn3A+H8cHBcmzu0Qn7GunCmfNJ1Tz
aonyqd+q3hWPpzhzzxkrbBwP9fogWt0j1/CddWMBDzbDVF3QU8/eeBVjHXb2S4g5
I32zB8XVkHxOJWIcSxZv8AU0xh4sNgeXrkDmkSEuSyQogMPZb630dHHG4JxjAy7K
bsG1haqhxsRvJqLy/PpCUuqZtwRERcPPW/Y2ZIiB3ozABOSglV3G1DuM26U0lTwx
MPh796Yl/9GsVA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:38 2025 by rpki-client