Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
File: yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft (raw, json)
Hash identifier: UFNoStx+0W/TMVgTzEgaduWUguOUrpe8FuDzYISjHds=
Subject key identifier: 60:02:ED:AF:E1:DB:49:72:93:F6:FD:DC:3A:86:84:01:66:F1:E9:14
Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
Certificate issuer: /CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Certificate serial: 019A4DE16433A0081DD4E26123B97C3D130A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
Manifest number: 069F
Signing time: Tue 04 Nov 2025 08:00:08 +0000
Manifest this update: Tue 04 Nov 2025 08:00:08 +0000
Manifest next update: Wed 05 Nov 2025 08:00:08 +0000
Files and hashes: 1: jJN5SmOYRCh5g1P7LMTmmGEDihE.roa (hash: zVXVRIlXsH01/EvIe9iIxpAfO1eaFz3FhIYvYUirwQk=)
2: yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl (hash: uoeWu3DV7GJ0yIw29nX6cbv49OICp4cbKestLPZxsNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:64:33:a0:08:1d:d4:e2:61:23:b9:7c:3d:13:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Validity
Not Before: Nov 4 08:00:08 2025 GMT
Not After : Nov 5 08:00:08 2025 GMT
Subject: CN=6002edafe1db497293f6fddc3a86840166f1e914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:e4:63:5e:44:85:8a:4d:ca:a0:27:04:f4:
b1:61:d9:17:15:d1:fc:41:93:17:a7:83:cf:51:88:
29:9f:27:19:0d:8b:ab:80:80:d7:51:bd:8b:f2:81:
19:d7:5f:a4:b7:c1:f6:0f:6b:d6:e8:19:24:93:e7:
e8:2c:19:ff:f4:47:01:8d:fc:c8:20:ba:55:f8:cc:
13:50:6c:98:fa:fc:f5:5d:6b:2e:ab:f6:7e:fe:5d:
8b:94:f0:e8:e4:77:f8:76:9d:f2:0e:c4:b3:6b:fe:
9f:ac:fb:2c:5c:c9:7c:5f:c5:5f:15:09:4b:52:86:
af:dc:86:d4:0c:16:86:da:5d:c8:4c:03:1b:fb:e2:
26:17:9d:e4:61:2f:9f:11:9f:e9:72:14:e4:6a:f2:
53:59:58:16:3a:f2:8a:d8:a2:07:c4:f3:af:67:70:
0f:80:2a:71:fb:c0:a8:cc:bf:99:78:48:7a:d4:9b:
e6:29:f6:50:91:fb:53:d3:13:9b:ed:de:75:83:cf:
10:51:6c:d0:34:04:64:47:7a:be:b4:a3:f2:f2:5f:
38:ba:40:03:86:54:33:56:29:c3:df:aa:9a:37:ee:
e7:a1:95:7b:76:5d:8d:13:f4:f8:ea:4f:ae:d6:96:
7d:bf:b9:37:c1:b4:72:3a:5f:f4:7a:67:6f:fa:c4:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:ED:AF:E1:DB:49:72:93:F6:FD:DC:3A:86:84:01:66:F1:E9:14
X509v3 Authority Key Identifier:
keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7c:05:63:47:79:72:5b:cb:9d:52:2d:20:75:e8:3a:0a:d5:
fb:27:a8:1d:9e:18:ce:f9:41:68:5d:34:75:a7:b7:2e:c8:91:
16:b5:24:1f:a1:23:00:de:b7:b1:7b:f5:d1:2c:a5:84:09:21:
ad:48:31:8e:ca:95:db:2f:dc:ff:67:21:08:26:00:27:5a:f2:
66:be:f0:3a:e9:ff:55:d1:a5:19:d6:fd:2e:09:68:33:ca:4b:
a4:97:5a:83:5a:07:67:ff:c1:98:f2:e3:41:99:1f:86:bc:91:
9c:3a:37:2e:b4:07:04:da:36:bd:28:eb:cb:ad:e7:0f:77:c1:
98:7d:9b:04:d6:e4:33:f5:49:aa:f2:9d:15:23:7e:c4:c7:f4:
8c:08:1f:37:1f:c6:3b:ee:d4:fe:f0:ed:1c:82:20:b6:e1:97:
73:3e:a1:1a:a8:a4:99:9c:8c:a8:74:15:5b:5f:d8:d7:c0:e3:
78:e6:3b:b7:11:df:ae:fd:70:8a:13:79:67:bc:5a:9c:9e:6c:
8d:42:ff:4e:c8:02:25:26:15:c5:f5:19:e1:8e:51:17:de:8a:
0c:84:35:c2:43:a7:9c:dd:de:5d:c8:8d:94:07:a1:23:52:5b:
1b:f6:f8:dd:2d:d9:96:3a:63:d9:f3:9c:6c:c2:fe:39:2e:20:
d1:d6:d5:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4WQzoAgd1OJhI7l8PRMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4M2M0YzlkMmZjZTYxNjY1MTY1YzA1YTEwMWU4MTUwNDdi
NjRmNmEwHhcNMjUxMTA0MDgwMDA4WhcNMjUxMTA1MDgwMDA4WjAzMTEwLwYDVQQD
Eyg2MDAyZWRhZmUxZGI0OTcyOTNmNmZkZGMzYTg2ODQwMTY2ZjFlOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpTkY15EhYpNyqAnBPSxYdkXFdH8
QZMXp4PPUYgpnycZDYurgIDXUb2L8oEZ11+kt8H2D2vW6Bkkk+foLBn/9EcBjfzI
ILpV+MwTUGyY+vz1XWsuq/Z+/l2LlPDo5Hf4dp3yDsSza/6frPssXMl8X8VfFQlL
Uoav3IbUDBaG2l3ITAMb++ImF53kYS+fEZ/pchTkavJTWVgWOvKK2KIHxPOvZ3AP
gCpx+8CozL+ZeEh61JvmKfZQkftT0xOb7d51g88QUWzQNARkR3q+tKPy8l84ukAD
hlQzVinD36qaN+7noZV7dl2NE/T46k+u1pZ9v7k3wbRyOl/0emdv+sTpiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAC7a/h20lyk/b93DqGhAFm8ekUMB8GA1UdIwQY
MBaAFMg8TJ0vzmFmUWXAWhAegVBHtk9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjkt
NDJlZjMzYTI2ZTY2LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjktNDJlZjMzYTI2ZTY2
LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXwFY0d5
clvLnVItIHXoOgrV+yeoHZ4YzvlBaF00dae3LsiRFrUkH6EjAN63sXv10SylhAkh
rUgxjsqV2y/c/2chCCYAJ1ryZr7wOun/VdGlGdb9LgloM8pLpJdag1oHZ//BmPLj
QZkfhryRnDo3LrQHBNo2vSjry63nD3fBmH2bBNbkM/VJqvKdFSN+xMf0jAgfNx/G
O+7U/vDtHIIgtuGXcz6hGqikmZyMqHQVW1/Y18DjeOY7txHfrv1wihN5Z7xanJ5s
jUL/TsgCJSYVxfUZ4Y5RF96KDIQ1wkOnnN3eXciNlAehI1JbG/b43S3Zljpj2fOc
bML+OS4g0dbVFw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:31 2025 by rpki-client