Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
File: yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json)
Hash identifier: Z/oIsGWQoE5c2lU6NQBEbAquIpWyNAqCUPzC75jPbQk=
Subject key identifier: 84:DD:D7:5A:C5:D1:E6:A0:04:82:DD:31:3D:F8:77:D2:06:F1:03:05
Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
Certificate issuer: /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Certificate serial: 019A4EBD3ED4A8E449D3FE20371BF56CDE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
Manifest number: 0E42
Signing time: Tue 04 Nov 2025 12:00:16 +0000
Manifest this update: Tue 04 Nov 2025 12:00:16 +0000
Manifest next update: Wed 05 Nov 2025 12:00:16 +0000
Files and hashes: 1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: kWO5JP3rX/pY0yyULP9KQ4uLQidaKSpBTAeIFMO68yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3e:d4:a8:e4:49:d3:fe:20:37:1b:f5:6c:de:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Validity
Not Before: Nov 4 12:00:16 2025 GMT
Not After : Nov 5 12:00:16 2025 GMT
Subject: CN=84ddd75ac5d1e6a00482dd313df877d206f10305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:e0:b2:3b:6a:90:06:57:97:7c:55:67:a8:
ed:91:27:d8:2c:72:0c:84:c5:e1:fc:23:3e:11:1c:
35:7a:38:f2:78:e3:9f:8e:41:e5:7a:aa:5e:a2:02:
3d:e9:70:1c:23:3e:91:31:ec:96:29:f0:ff:db:b9:
4e:6b:84:2e:7d:36:7b:ca:2f:fc:96:03:ec:df:38:
83:a3:dd:76:29:59:ac:44:fd:eb:93:21:4d:a8:4e:
14:dd:f1:b3:22:32:5d:32:82:4e:cf:fe:14:e5:92:
8d:06:79:03:01:70:b8:21:8c:61:8d:aa:5f:30:ff:
86:b0:20:39:dc:de:fa:81:e5:40:52:01:2a:74:6d:
87:71:9a:93:31:a7:5f:43:e1:32:fd:92:19:a7:b0:
70:f0:06:6e:1c:6e:3c:8c:65:13:bf:f9:52:ba:f2:
87:5c:0a:ac:46:b3:01:0b:2d:5a:ad:ce:49:1e:41:
32:1e:4a:47:ab:00:e2:e2:a9:68:91:6d:ea:cf:1b:
80:d0:3d:27:76:f7:aa:a4:83:80:79:66:7d:b6:ca:
0c:1d:f6:ce:f6:56:f7:70:9a:2f:45:a5:b7:7c:69:
8a:e0:26:24:c4:c8:f6:90:b4:09:e5:6e:c5:0a:6c:
40:56:f0:28:86:79:35:15:33:a3:08:66:3d:ce:0c:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DD:D7:5A:C5:D1:E6:A0:04:82:DD:31:3D:F8:77:D2:06:F1:03:05
X509v3 Authority Key Identifier:
keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f1:98:47:67:36:c2:42:41:ec:4e:2b:13:d5:00:d6:dc:da:
57:57:c8:9b:9f:ca:d5:63:d7:98:cb:24:1f:67:bd:50:ed:e5:
47:ff:46:09:68:6f:a6:6f:6f:e0:6a:89:7a:df:65:c7:06:51:
34:5c:53:5b:07:67:e8:7e:16:df:41:ad:61:9c:31:37:75:48:
2b:c4:34:91:b5:61:5d:a2:32:af:97:1a:bc:01:21:a2:7b:a6:
f5:2a:7a:d9:fc:60:dd:cc:00:9c:e1:ad:a5:50:66:a0:79:c0:
9b:3a:00:a0:53:d2:93:43:bd:4d:c1:3e:98:8f:0d:64:56:c5:
61:73:a3:63:6d:8e:62:f3:a8:86:56:bf:8a:f2:cc:0a:c0:35:
66:1d:2f:f8:0b:da:08:71:ea:4f:b2:9b:f2:55:32:a5:fd:b0:
de:1c:0a:2c:80:01:df:76:59:bf:f8:98:82:29:3a:d9:a6:cd:
21:98:b8:e5:3c:72:0a:0d:03:d2:9b:8e:88:07:2e:8c:2f:b5:
d7:1f:7d:7b:02:36:23:df:c2:de:fa:21:c9:1d:f5:8e:c8:f7:
c4:49:f7:2b:23:d7:f0:a4:d4:29:af:0d:31:7d:60:d4:e3:7a:
7b:11:a8:d4:8a:ad:8d:d3:c6:55:b0:36:e3:f1:7e:59:ac:e0:
34:ce:bf:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvT7UqORJ0/4gNxv1bN4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MThiYTE4NTViMTExMDdlY2YwYjJiMzQzNjA3Y2NiYmU3
NmEzOGQwHhcNMjUxMTA0MTIwMDE2WhcNMjUxMTA1MTIwMDE2WjAzMTEwLwYDVQQD
Eyg4NGRkZDc1YWM1ZDFlNmEwMDQ4MmRkMzEzZGY4NzdkMjA2ZjEwMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV7gsjtqkAZXl3xVZ6jtkSfYLHIM
hMXh/CM+ERw1ejjyeOOfjkHleqpeogI96XAcIz6RMeyWKfD/27lOa4QufTZ7yi/8
lgPs3ziDo912KVmsRP3rkyFNqE4U3fGzIjJdMoJOz/4U5ZKNBnkDAXC4IYxhjapf
MP+GsCA53N76geVAUgEqdG2HcZqTMadfQ+Ey/ZIZp7Bw8AZuHG48jGUTv/lSuvKH
XAqsRrMBCy1arc5JHkEyHkpHqwDi4qlokW3qzxuA0D0ndveqpIOAeWZ9tsoMHfbO
9lb3cJovRaW3fGmK4CYkxMj2kLQJ5W7FCmxAVvAohnk1FTOjCGY9zgxg4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITd11rF0eagBILdMT34d9IG8QMFMB8GA1UdIwQY
MBaAFMgYuhhVsREH7PCys0NgfMu+dqONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMt
OWZmNmUzN2FhM2M0LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMtOWZmNmUzN2FhM2M0
LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfGYR2c2
wkJB7E4rE9UA1tzaV1fIm5/K1WPXmMskH2e9UO3lR/9GCWhvpm9v4GqJet9lxwZR
NFxTWwdn6H4W30GtYZwxN3VIK8Q0kbVhXaIyr5cavAEhonum9Sp62fxg3cwAnOGt
pVBmoHnAmzoAoFPSk0O9TcE+mI8NZFbFYXOjY22OYvOohla/ivLMCsA1Zh0v+Ava
CHHqT7Kb8lUypf2w3hwKLIAB33ZZv/iYgik62abNIZi45TxyCg0D0puOiAcujC+1
1x99ewI2I9/C3vohyR31jsj3xEn3KyPX8KTUKa8NMX1g1ON6exGo1IqtjdPGVbA2
4/F+WazgNM6/BQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:01 2025 by rpki-client