Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: 6zMPOAPCHQyBB0i+EVaQDxy9D59IwOs5q9RTchtAZnI=
Subject key identifier: 6A:C5:3E:BA:C4:13:C7:14:05:CA:E0:26:4D:C2:80:66:FC:7F:DA:5B
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 019A4DAB0AF67E0829E52888FB7DEFECC640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0E41
Signing time: Tue 04 Nov 2025 07:00:46 +0000
Manifest this update: Tue 04 Nov 2025 07:00:46 +0000
Manifest next update: Wed 05 Nov 2025 07:00:46 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: Tz01xMF1IfdJSBqU8ZlMlThwNC7ZkJyEpaM+tJDThKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0a:f6:7e:08:29:e5:28:88:fb:7d:ef:ec:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Nov 4 07:00:46 2025 GMT
Not After : Nov 5 07:00:46 2025 GMT
Subject: CN=6ac53ebac413c71405cae0264dc28066fc7fda5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:02:1b:5e:5c:1f:9b:7a:75:54:6a:d9:9e:05:
15:c7:30:01:44:e2:81:9b:c5:94:46:1b:bf:08:45:
a8:75:61:40:11:4c:22:4a:ff:8c:9d:c9:f8:9e:ca:
9d:ab:11:ed:0e:ff:91:64:77:9c:87:66:c3:e9:45:
a0:35:a0:8f:ee:39:8d:93:8d:2d:0f:c2:59:32:7a:
29:92:84:5d:3f:19:c3:c8:77:10:df:7e:0b:24:e1:
d6:e7:9f:f0:c7:b1:2f:88:77:97:16:00:a0:cc:52:
2c:14:a5:ea:f9:06:a9:b5:d0:10:6b:37:f1:33:4a:
d0:70:7e:05:54:6d:c1:ee:ce:fa:e8:8b:8e:fc:73:
5d:30:70:00:fd:ca:8d:c4:f2:79:2d:4f:5e:fa:51:
5d:1d:0c:99:45:03:da:f3:26:7f:76:39:a3:45:cd:
4e:f5:98:7c:dc:16:19:39:d5:7d:ae:fc:b1:b6:64:
2a:d8:76:d7:b5:c5:e3:a5:f6:6b:bb:f9:ce:97:e2:
a3:da:21:4c:42:54:59:93:4b:60:c4:b0:f2:86:2c:
92:d0:d6:ce:a0:b9:f9:8c:69:61:33:c5:8e:a5:9d:
e7:23:e2:b4:a5:78:75:31:93:c2:bb:46:56:82:7c:
c6:99:1e:db:dd:93:30:39:9e:e9:6d:04:ed:d0:a0:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C5:3E:BA:C4:13:C7:14:05:CA:E0:26:4D:C2:80:66:FC:7F:DA:5B
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:77:bb:3e:00:b9:98:fd:1e:43:bd:97:44:e0:b0:ee:78:ea:
03:b4:7c:b2:00:02:20:5a:49:2e:fd:92:51:92:68:15:e9:f4:
64:40:fd:34:80:bd:16:67:e7:36:e6:da:ce:c8:f5:27:fd:f0:
a0:f7:49:0e:46:62:ee:33:ac:b0:f8:8d:63:3a:02:20:f4:33:
93:5f:ea:31:c9:61:f3:b0:20:1f:9b:f2:52:81:28:53:9c:2d:
8c:00:f1:9f:90:d0:a9:87:b3:3a:ff:20:90:4a:b1:99:93:d4:
6a:5f:fe:8e:57:4d:52:ae:b2:a9:2e:bb:72:1d:b1:88:72:cd:
85:ee:7d:1b:ed:33:83:ba:8b:4c:46:01:f8:71:c2:f7:da:39:
90:96:12:37:ab:4b:6b:ea:d5:cf:d5:9e:d5:53:c3:df:2b:74:
14:f4:1e:11:b4:9c:cd:2c:44:b5:13:65:c7:bc:63:e7:06:e1:
0f:47:fa:64:a0:f4:37:fb:6d:bb:f9:23:4e:c4:7d:7d:5f:25:
a2:de:c7:c9:fc:62:ae:cc:68:05:13:41:b7:c1:0c:69:5b:5b:
a9:e6:11:1f:e1:4a:95:21:92:c3:16:e5:34:1f:1e:a4:ad:44:
2f:5d:b3:70:c1:c1:de:55:96:93:b4:07:b1:48:f6:7c:e8:d1:
17:4c:51:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqwr2fggp5SiI+33v7MZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2
ZWFkNWIwHhcNMjUxMTA0MDcwMDQ2WhcNMjUxMTA1MDcwMDQ2WjAzMTEwLwYDVQQD
Eyg2YWM1M2ViYWM0MTNjNzE0MDVjYWUwMjY0ZGMyODA2NmZjN2ZkYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AIbXlwfm3p1VGrZngUVxzABROKB
m8WURhu/CEWodWFAEUwiSv+Mncn4nsqdqxHtDv+RZHech2bD6UWgNaCP7jmNk40t
D8JZMnopkoRdPxnDyHcQ334LJOHW55/wx7EviHeXFgCgzFIsFKXq+QaptdAQazfx
M0rQcH4FVG3B7s766IuO/HNdMHAA/cqNxPJ5LU9e+lFdHQyZRQPa8yZ/djmjRc1O
9Zh83BYZOdV9rvyxtmQq2HbXtcXjpfZru/nOl+Kj2iFMQlRZk0tgxLDyhiyS0NbO
oLn5jGlhM8WOpZ3nI+K0pXh1MZPCu0ZWgnzGmR7b3ZMwOZ7pbQTt0KAsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrFPrrEE8cUBcrgJk3CgGb8f9pbMB8GA1UdIwQY
MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt
NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl
LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3e7PgC5
mP0eQ72XROCw7njqA7R8sgACIFpJLv2SUZJoFen0ZED9NIC9FmfnNubazsj1J/3w
oPdJDkZi7jOssPiNYzoCIPQzk1/qMclh87AgH5vyUoEoU5wtjADxn5DQqYezOv8g
kEqxmZPUal/+jldNUq6yqS67ch2xiHLNhe59G+0zg7qLTEYB+HHC99o5kJYSN6tL
a+rVz9We1VPD3yt0FPQeEbSczSxEtRNlx7xj5wbhD0f6ZKD0N/ttu/kjTsR9fV8l
ot7HyfxirsxoBRNBt8EMaVtbqeYRH+FKlSGSwxblNB8epK1EL12zcMHB3lWWk7QH
sUj2fOjRF0xRog==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:39 2025 by rpki-client