Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: VVhdQUTF05EDyhRnBzGCq3WKcRqy2jaTLTRaEFMfK+w=
Subject key identifier: 6D:ED:2B:D6:00:73:0B:41:A8:35:14:F5:0B:0C:6C:EF:66:23:61:F7
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 019A4F2B99CDF1BAC5CBA441AA1512D60E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 14:00:48 +0000
Manifest this update: Tue 04 Nov 2025 14:00:48 +0000
Manifest next update: Wed 05 Nov 2025 14:00:48 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: me4pwys31eG/W44AeZXt+14F0hjE0gZPt2FAaDAqXjQ=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:99:cd:f1:ba:c5:cb:a4:41:aa:15:12:d6:0e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Nov 4 14:00:48 2025 GMT
Not After : Nov 5 14:00:48 2025 GMT
Subject: CN=6ded2bd600730b41a83514f50b0c6cef662361f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:e8:d2:c0:12:8e:57:40:9f:eb:7a:f0:11:
a9:88:20:ae:77:66:05:27:92:0e:d0:c6:82:1e:f5:
1d:b9:0c:ce:f0:08:89:78:13:e1:15:a2:9e:5e:9a:
6d:01:ca:4a:50:ac:23:a6:9c:56:d6:3e:65:c9:3c:
f6:a4:a8:c8:69:29:2b:b0:7a:73:73:62:ce:2f:f4:
b1:ce:b3:e3:df:0a:45:e0:55:f4:22:3e:da:e6:36:
46:0e:78:77:6e:d8:b8:1c:f1:90:ac:19:dc:15:84:
1a:59:c6:be:61:5b:56:dc:1c:00:78:15:17:1a:c3:
88:19:8f:a0:9b:d8:65:88:58:68:a2:63:ad:c9:6c:
74:93:b3:fa:dd:c7:89:e2:80:f9:4d:5d:35:01:bd:
25:11:53:5f:e3:c1:58:2d:1b:e3:f3:96:d1:3b:ac:
78:04:bc:76:c4:08:c8:64:a5:c1:5c:59:d3:8a:ed:
47:13:61:06:d8:32:fb:af:ee:38:ab:19:73:b1:77:
f2:4f:eb:61:b4:39:f7:96:2a:93:dd:85:ba:b6:61:
85:00:4e:de:ed:c6:60:48:02:79:46:0a:dc:5b:10:
b4:b3:bb:f8:a0:be:8f:bb:25:59:88:ab:71:14:66:
98:31:bf:fa:55:a5:78:e3:ef:a0:99:ac:9b:dc:7b:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:ED:2B:D6:00:73:0B:41:A8:35:14:F5:0B:0C:6C:EF:66:23:61:F7
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:40:37:43:a1:75:38:9a:88:ef:c3:c2:45:cf:3e:f4:19:49:
48:84:19:d5:40:66:b5:a5:21:0d:7e:12:97:ae:36:70:2e:9b:
3e:96:00:a7:c2:62:18:b2:e0:b9:57:9f:22:5e:ab:87:c7:a1:
56:39:79:ba:13:11:b0:1b:6d:8a:c3:92:55:f3:49:cd:4b:3d:
98:74:6f:e9:e2:51:d6:4d:f6:d6:28:f1:c5:27:95:5c:dd:c8:
22:3a:de:0d:84:9c:d0:4e:d6:ba:11:aa:f8:ac:85:cb:00:06:
ea:d1:6d:a7:1e:98:d7:36:5d:9a:f2:10:1e:68:cc:2c:cf:e2:
1e:4c:af:37:5d:6d:0e:88:50:4d:1c:31:b4:6b:fb:b2:d5:bd:
c0:bb:7d:12:37:24:a0:fd:db:a4:39:6c:1a:fb:4a:78:51:e5:
e9:c8:3b:1e:ba:ff:8e:13:ee:66:2e:5a:00:ac:97:02:cf:9a:
e8:f1:3a:b8:8a:40:af:75:fe:46:10:4e:35:47:d7:2d:44:a9:
39:d9:73:fd:91:46:c7:7f:d4:77:d3:d8:90:13:d1:9a:31:73:
7a:ce:92:3a:e1:f5:e4:7a:e1:6d:3e:ca:52:82:cd:92:9e:a2:
e7:a3:d7:91:2f:78:2d:e8:50:77:93:a9:ef:4e:d2:22:9d:59:
1e:33:7b:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK5nN8brFy6RBqhUS1g4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGU4NWY1ODFjNzUxMzkwOGVhMDQ2NjVmZDIzNzI2ZmQ3
MGU2MmIwHhcNMjUxMTA0MTQwMDQ4WhcNMjUxMTA1MTQwMDQ4WjAzMTEwLwYDVQQD
Eyg2ZGVkMmJkNjAwNzMwYjQxYTgzNTE0ZjUwYjBjNmNlZjY2MjM2MWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyPo0sASjldAn+t68BGpiCCud2YF
J5IO0MaCHvUduQzO8AiJeBPhFaKeXpptAcpKUKwjppxW1j5lyTz2pKjIaSkrsHpz
c2LOL/SxzrPj3wpF4FX0Ij7a5jZGDnh3bti4HPGQrBncFYQaWca+YVtW3BwAeBUX
GsOIGY+gm9hliFhoomOtyWx0k7P63ceJ4oD5TV01Ab0lEVNf48FYLRvj85bRO6x4
BLx2xAjIZKXBXFnTiu1HE2EG2DL7r+44qxlzsXfyT+thtDn3liqT3YW6tmGFAE7e
7cZgSAJ5RgrcWxC0s7v4oL6PuyVZiKtxFGaYMb/6VaV44++gmayb3Ht0swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3tK9YAcwtBqDUU9QsMbO9mI2H3MB8GA1UdIwQY
MBaAFGAOhfWBx1E5COoEZl/SNyb9cOYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDIt
NGNkYTc4OGZlODk5LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDItNGNkYTc4OGZlODk5
LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUA3Q6F1
OJqI78PCRc8+9BlJSIQZ1UBmtaUhDX4Sl642cC6bPpYAp8JiGLLguVefIl6rh8eh
Vjl5uhMRsBttisOSVfNJzUs9mHRv6eJR1k321ijxxSeVXN3IIjreDYSc0E7WuhGq
+KyFywAG6tFtpx6Y1zZdmvIQHmjMLM/iHkyvN11tDohQTRwxtGv7stW9wLt9Ejck
oP3bpDlsGvtKeFHl6cg7Hrr/jhPuZi5aAKyXAs+a6PE6uIpAr3X+RhBONUfXLUSp
Odlz/ZFGx3/Ud9PYkBPRmjFzes6SOuH15HrhbT7KUoLNkp6i56PXkS94LehQd5Op
707SIp1ZHjN7Lg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:43 2025 by rpki-client