Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: PQsd5QMuTs8K8KjmyNtar5ITL9wVIVqHFLl9oE/Cr54=
Subject key identifier: 14:5F:E8:49:0C:19:1A:84:49:07:36:1C:21:78:77:63:3A:1F:CC:FB
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 019A503DADDEEC4FEA6A93DE0BAA53B4326F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:10 +0000
Manifest this update: Tue 04 Nov 2025 19:00:10 +0000
Manifest next update: Wed 05 Nov 2025 19:00:10 +0000
Files and hashes: 1: erRTM1_91VtMTpdLg1tFc8DEnKQ.roa (hash: igv5stthjArSt6knKlRkVvpjhTI9/bVwYZs5FEOn1NI=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: 7ER/MkM76NqchM7GmoUNRTqFPFZ0c49tGQgEgxCsIj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ad:de:ec:4f:ea:6a:93:de:0b:aa:53:b4:32:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Nov 4 19:00:10 2025 GMT
Not After : Nov 5 19:00:10 2025 GMT
Subject: CN=145fe8490c191a844907361c217877633a1fccfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:1f:9e:fd:b6:32:5d:6e:fa:44:42:8f:55:
b1:27:3c:90:07:2f:e1:21:42:e2:ef:b9:d0:bc:7b:
22:b4:fb:70:73:28:5d:5c:6e:a6:2a:a0:20:c8:ed:
d6:10:56:2b:d0:12:99:e5:3e:88:f7:1b:d1:a0:70:
94:6b:19:f8:36:13:ba:ff:a5:7d:a9:67:d0:60:9b:
8d:6f:2f:11:7e:73:cf:d3:7b:4a:06:79:3a:0d:4e:
d4:87:f3:f0:56:33:69:be:32:10:4e:20:45:03:1e:
94:f6:e8:1e:57:88:91:1d:dc:86:23:41:95:f6:be:
ba:45:d4:6b:e1:30:07:a1:ff:5d:15:e6:0e:cf:8b:
d1:a2:fe:5a:5c:f0:db:8d:03:63:fe:6d:db:ca:81:
18:bb:10:c9:83:15:fd:96:07:df:c1:74:07:8e:cb:
31:69:ec:2a:c7:7b:6c:bc:f2:b3:34:2d:c7:75:a2:
49:d7:1a:e9:74:18:8d:f0:78:e0:0d:3a:b5:bc:bb:
a1:3d:b2:bd:15:84:c7:b0:2b:fb:f7:1b:4d:4c:17:
7f:db:7b:94:a8:24:be:1f:dd:a0:43:81:ad:23:69:
87:85:c6:6c:e1:a5:9f:83:19:69:03:86:00:da:83:
a5:61:96:c2:44:13:55:ba:fd:07:b6:98:9a:8b:56:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:E8:49:0C:19:1A:84:49:07:36:1C:21:78:77:63:3A:1F:CC:FB
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:95:2e:93:30:c5:ba:3e:a0:a9:ae:5e:f3:8f:ac:6f:d3:44:
4b:2a:3c:78:df:24:a5:d2:b1:ef:8d:77:24:71:c0:4c:0e:c1:
88:95:63:e4:7f:64:d0:9d:fc:a2:f3:46:d2:92:8b:61:2d:b6:
49:9c:0e:15:9a:74:dc:82:49:34:66:e2:0b:f4:da:88:b7:0f:
a2:90:f9:d9:13:4f:b9:77:aa:7e:ec:12:6a:0f:38:9c:d7:4c:
f0:26:10:74:17:3f:0c:ec:d2:eb:03:9e:c6:cf:90:85:23:3d:
07:90:1f:f6:33:2f:18:11:30:cc:dc:96:a6:21:91:ba:10:20:
e2:ec:1d:cf:05:18:7a:82:f8:e6:ed:19:73:98:5c:53:fd:3a:
e4:0b:d3:10:58:73:5e:ed:08:51:56:55:48:07:d3:aa:8f:0e:
ce:ad:77:91:f1:ca:ff:00:53:2a:7f:f7:04:99:dd:14:6a:66:
d7:1e:f0:55:a4:a0:14:cc:75:88:07:76:9d:3f:e2:49:25:80:
68:17:b4:47:50:e8:4f:6a:ac:96:2e:7f:ec:00:7f:2a:8b:35:
80:2f:c3:3a:dd:9c:82:cc:f7:7a:ac:db:38:18:e4:83:2a:64:
fe:c7:b0:15:87:2f:24:bc:8a:ef:f6:67:2e:df:03:c6:27:67:
1a:f5:2a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPa3e7E/qapPeC6pTtDJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzNhMDM4OTU5Mjc1NmU0MTVjZGUzNDhhYmJjMjQzMTJi
MDJkZjYwHhcNMjUxMTA0MTkwMDEwWhcNMjUxMTA1MTkwMDEwWjAzMTEwLwYDVQQD
EygxNDVmZTg0OTBjMTkxYTg0NDkwNzM2MWMyMTc4Nzc2MzNhMWZjY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyQfnv22Ml1u+kRCj1WxJzyQBy/h
IULi77nQvHsitPtwcyhdXG6mKqAgyO3WEFYr0BKZ5T6I9xvRoHCUaxn4NhO6/6V9
qWfQYJuNby8RfnPP03tKBnk6DU7Uh/PwVjNpvjIQTiBFAx6U9ugeV4iRHdyGI0GV
9r66RdRr4TAHof9dFeYOz4vRov5aXPDbjQNj/m3byoEYuxDJgxX9lgffwXQHjssx
aewqx3tsvPKzNC3HdaJJ1xrpdBiN8HjgDTq1vLuhPbK9FYTHsCv79xtNTBd/23uU
qCS+H92gQ4GtI2mHhcZs4aWfgxlpA4YA2oOlYZbCRBNVuv0Htpiai1Y7BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRf6EkMGRqESQc2HCF4d2M6H8z7MB8GA1UdIwQY
MBaAFMgzoDiVknVuQVzeNIq7wkMSsC32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZWNkM2EtZTkyYS00NTA5LWI1OTAt
OWYzMDc1NzQwNTFlLzEveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jZWNkM2EtZTkyYS00NTA5LWI1OTAtOWYzMDc1NzQwNTFl
LzEveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZUukzDF
uj6gqa5e84+sb9NESyo8eN8kpdKx7413JHHATA7BiJVj5H9k0J38ovNG0pKLYS22
SZwOFZp03IJJNGbiC/TaiLcPopD52RNPuXeqfuwSag84nNdM8CYQdBc/DOzS6wOe
xs+QhSM9B5Af9jMvGBEwzNyWpiGRuhAg4uwdzwUYeoL45u0Zc5hcU/065AvTEFhz
Xu0IUVZVSAfTqo8Ozq13kfHK/wBTKn/3BJndFGpm1x7wVaSgFMx1iAd2nT/iSSWA
aBe0R1DoT2qsli5/7AB/Kos1gC/DOt2cgsz3eqzbOBjkgypk/sewFYcvJLyK7/Zn
Lt8DxidnGvUqAw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:49:57 2025 by rpki-client