Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: Hrx1gAxPWJ6n9bBq5TBTVGNHIbEHEm2nCIA8FtEcAsc=
Subject key identifier: 61:36:E7:B6:A2:D8:08:CE:8E:BD:9D:42:2A:2D:12:39:9E:16:34:47
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 019A54BF9145CD50651D299913876C295290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 0105
Signing time: Wed 05 Nov 2025 16:00:31 +0000
Manifest this update: Wed 05 Nov 2025 16:00:31 +0000
Manifest next update: Thu 06 Nov 2025 16:00:31 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: HOMx8xC9/VLAJH9dOxdZlJW+C/y9zk7S0SZIzRFPtew=)
2: ef5i4gFsUjQtA9jIFWXZmLBsI5w.roa (hash: nHPFZXhPCy6Yr/I1NdWh8sLmeUGTngr7MiMVHJxQNuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:91:45:cd:50:65:1d:29:99:13:87:6c:29:52:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Nov 5 16:00:31 2025 GMT
Not After : Nov 6 16:00:31 2025 GMT
Subject: CN=6136e7b6a2d808ce8ebd9d422a2d12399e163447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:43:6a:81:8e:6f:43:de:97:9f:d2:a4:f5:
d7:87:fd:bc:a8:de:02:a0:a3:52:07:87:c8:30:d3:
9c:d7:e3:d0:fa:12:2e:f2:d1:f5:5f:83:e7:3a:19:
d9:f6:0f:b6:8e:cb:ab:69:72:2d:f9:aa:d6:d8:4d:
ce:90:00:bb:94:7e:1d:5c:9e:6e:8c:96:ab:8a:29:
1d:7c:53:c4:11:b3:2a:a1:a4:91:3f:f3:6d:27:b0:
d8:b0:b4:e0:29:e8:fd:1c:d6:16:87:2c:b5:f2:ad:
b1:2f:60:06:9d:38:51:bb:93:8f:94:e0:35:8b:bb:
1e:81:5d:59:53:bb:7b:99:f7:87:a4:b6:94:59:b4:
3b:59:a7:21:65:2e:1b:13:72:75:76:58:06:74:de:
3c:eb:97:cf:20:25:00:c0:ae:0d:b2:51:5a:b2:3e:
63:33:a2:9a:30:bb:9c:99:35:28:39:62:ab:0a:18:
fd:cb:5d:ff:37:e3:75:ec:12:21:9d:8e:43:33:8e:
58:c8:e0:d2:38:db:33:26:83:68:44:46:b0:9f:da:
db:29:98:80:e3:0e:07:bd:91:2d:bf:0a:ef:ee:9c:
2c:0b:cb:b7:29:10:36:62:37:40:1c:39:65:f3:71:
24:7e:8b:13:59:cf:f4:b2:84:79:54:28:d5:9e:31:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:36:E7:B6:A2:D8:08:CE:8E:BD:9D:42:2A:2D:12:39:9E:16:34:47
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7e:33:81:cb:95:10:bd:38:9f:fa:7f:81:96:33:d4:ff:df:
9a:69:76:9f:11:d8:55:e5:7e:c9:86:2a:42:7d:5b:a8:88:23:
05:f2:64:2b:f9:36:36:ea:3c:f6:2c:d1:83:d1:56:8f:ed:13:
da:41:21:df:30:74:a8:ac:63:ab:b7:98:5f:9e:48:eb:7f:12:
b2:73:76:3d:aa:56:d5:a4:eb:0c:d2:8e:54:0c:a6:79:39:78:
a1:22:54:64:52:1d:69:13:cf:ef:87:88:8d:93:24:a5:7e:f6:
eb:84:5d:b7:57:a9:61:ee:c5:8a:29:30:c2:d3:f5:5d:eb:81:
49:1b:47:f8:f5:d5:3e:a1:1b:fc:fc:e3:d9:8c:82:49:df:f2:
31:f5:30:07:41:b8:d9:64:d1:20:32:f2:e4:1d:00:09:67:fc:
54:58:a4:5d:50:ee:ad:85:b4:b2:6c:9f:ce:16:9a:2b:38:46:
42:d3:2d:85:25:1d:26:0e:0b:93:7f:5a:2f:42:f9:d1:70:0f:
32:a0:9c:06:5d:2c:40:72:18:24:3c:64:db:ff:9d:2e:41:ba:
92:84:2f:d4:f1:2d:b2:7c:32:91:3d:75:9d:30:2d:c5:6c:41:
55:7e:21:40:1c:69:44:76:a4:4f:aa:8d:8a:03:ca:f8:e3:37:
0d:0f:21:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUv5FFzVBlHSmZE4dsKVKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODcxNjllMDMwZTM3MjVkNmViNDc4YTMyN2U2YmRmMzZi
ZThkMmYwHhcNMjUxMTA1MTYwMDMxWhcNMjUxMTA2MTYwMDMxWjAzMTEwLwYDVQQD
Eyg2MTM2ZTdiNmEyZDgwOGNlOGViZDlkNDIyYTJkMTIzOTllMTYzNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26NDaoGOb0Pel5/SpPXXh/28qN4C
oKNSB4fIMNOc1+PQ+hIu8tH1X4PnOhnZ9g+2jsuraXIt+arW2E3OkAC7lH4dXJ5u
jJariikdfFPEEbMqoaSRP/NtJ7DYsLTgKej9HNYWhyy18q2xL2AGnThRu5OPlOA1
i7segV1ZU7t7mfeHpLaUWbQ7WachZS4bE3J1dlgGdN4865fPICUAwK4NslFasj5j
M6KaMLucmTUoOWKrChj9y13/N+N17BIhnY5DM45YyODSONszJoNoREawn9rbKZiA
4w4HvZEtvwrv7pwsC8u3KRA2YjdAHDll83EkfosTWc/0soR5VCjVnjEWEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGE257ai2AjOjr2dQiotEjmeFjRHMB8GA1UdIwQY
MBaAFGGHFp4DDjcl1utHijJ+a982vo0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83NjE5ZWMtNTQzOC00NTUyLWFiYWIt
NDgwZGY4ZjQxZTQ0LzEvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83NjE5ZWMtNTQzOC00NTUyLWFiYWItNDgwZGY4ZjQxZTQ0
LzEvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaH4zgcuV
EL04n/p/gZYz1P/fmml2nxHYVeV+yYYqQn1bqIgjBfJkK/k2Nuo89izRg9FWj+0T
2kEh3zB0qKxjq7eYX55I638SsnN2PapW1aTrDNKOVAymeTl4oSJUZFIdaRPP74eI
jZMkpX7264Rdt1epYe7FiikwwtP1XeuBSRtH+PXVPqEb/Pzj2YyCSd/yMfUwB0G4
2WTRIDLy5B0ACWf8VFikXVDurYW0smyfzhaaKzhGQtMthSUdJg4Lk39aL0L50XAP
MqCcBl0sQHIYJDxk2/+dLkG6koQv1PEtsnwykT11nTAtxWxBVX4hQBxpRHakT6qN
igPK+OM3DQ8hWg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:26 2025 by rpki-client