Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: yky1E4hB/o9TKohEKfqFGByJe0cMYVLN8G10JmUOwjI=
Subject key identifier: E0:6F:14:39:F6:12:64:DF:CB:F3:D8:1F:C1:34:C1:F2:41:3B:0A:CB
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 019A4F2AF96E8C0590463161ACD21980789D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 0A16
Signing time: Tue 04 Nov 2025 14:00:07 +0000
Manifest this update: Tue 04 Nov 2025 14:00:07 +0000
Manifest next update: Wed 05 Nov 2025 14:00:07 +0000
Files and hashes: 1: EdKvKktbhV253248rH8OS7KgOJc.roa (hash: OVq8FxeeYttd7uYMiCGl4rm6BCNN8JrWv82y6k+zOKs=)
2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: 5mB3pBV5/Xha4XutQvMaEOfKs6bl3tVSfOLe3la3tjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:f9:6e:8c:05:90:46:31:61:ac:d2:19:80:78:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Nov 4 14:00:07 2025 GMT
Not After : Nov 5 14:00:07 2025 GMT
Subject: CN=e06f1439f61264dfcbf3d81fc134c1f2413b0acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:f6:3e:b1:86:d4:0b:45:b0:be:bc:6e:29:
63:4a:28:a5:be:52:fb:45:83:f1:49:6c:5b:25:0c:
ac:c4:be:b6:3b:fe:c5:c4:79:e3:78:6f:fd:fa:8b:
d0:4d:3a:b6:5d:41:01:6f:d4:e4:ed:f3:28:5b:e4:
24:68:c8:48:50:49:ac:63:2b:56:85:9d:38:39:6d:
c0:54:50:6f:ae:21:44:8e:24:74:f6:60:29:f6:5c:
1b:15:04:35:d7:c9:5d:3e:1d:e0:09:bd:03:65:9a:
0b:f2:96:cf:f1:e9:8d:15:3c:e5:46:ef:d6:ad:7a:
6f:e8:22:b3:18:d9:9b:33:a7:8f:1d:0d:38:15:31:
88:ea:1b:7f:cb:fd:80:a6:f1:c6:b0:63:30:ec:ac:
e5:14:5b:8e:08:5c:8e:0d:1a:25:95:95:ed:a4:bd:
8a:ca:c8:2f:67:ac:19:a4:fe:00:0d:8f:80:a4:2e:
d6:60:e9:c6:e3:63:68:97:17:ee:26:f8:1e:e9:3b:
28:96:a0:80:0e:c9:07:23:00:c7:e9:56:7f:6c:c3:
99:66:37:a9:86:83:a8:60:b9:7b:f2:62:cc:98:26:
07:e6:6d:d3:b1:7f:94:36:39:58:ac:55:e8:fa:c6:
c7:0a:6c:42:63:84:0e:d0:be:4f:56:53:64:9d:5a:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6F:14:39:F6:12:64:DF:CB:F3:D8:1F:C1:34:C1:F2:41:3B:0A:CB
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d1:c8:1e:9a:c1:04:3d:63:28:cd:1a:e8:0f:64:5d:6f:ae:
0d:01:7e:1f:7f:db:ad:dc:d4:b0:54:2f:67:f9:eb:9d:02:2c:
a6:ce:a3:21:5a:d8:a7:e0:94:09:18:fe:95:91:84:28:f5:bf:
f1:b4:32:61:9e:c8:3b:f3:c7:25:04:5f:e2:5f:28:e0:f9:c1:
2a:a4:87:c9:30:01:90:5a:d3:e3:b1:14:bb:58:55:ec:c3:8a:
94:de:36:46:7c:68:79:2e:34:66:31:22:84:f5:57:f0:c7:41:
b4:11:db:58:19:99:df:dd:47:16:ef:65:f0:d4:9e:a9:17:50:
87:73:f7:2a:14:19:da:61:24:80:27:74:2d:7a:5a:24:ae:78:
3c:c3:18:94:b1:6b:e4:87:ad:32:36:2b:a5:ec:b2:0b:ac:f1:
99:76:6e:d5:11:83:99:45:1d:4f:9c:ec:3c:1f:ac:ca:85:2d:
4c:c3:96:51:9b:45:b9:8a:9c:23:3b:e3:cf:57:b3:b6:47:53:
cd:ab:8e:51:a8:f9:76:7b:37:9b:37:fe:67:43:1f:ef:a8:b0:
8a:10:86:98:69:cb:2a:10:54:12:37:3b:ec:0e:31:9d:5a:fb:
d4:2e:8e:56:f1:8c:21:36:f0:d8:9f:9d:9e:c5:af:ff:9f:a4:
42:4e:50:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKvlujAWQRjFhrNIZgHidMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ODk2NjBiZjE0N2Y2MjhmYjdjZjhiMjcxODczN2ZlYTg2
Mjk4ZDAwHhcNMjUxMTA0MTQwMDA3WhcNMjUxMTA1MTQwMDA3WjAzMTEwLwYDVQQD
EyhlMDZmMTQzOWY2MTI2NGRmY2JmM2Q4MWZjMTM0YzFmMjQxM2IwYWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zn2PrGG1AtFsL68biljSiilvlL7
RYPxSWxbJQysxL62O/7FxHnjeG/9+ovQTTq2XUEBb9Tk7fMoW+QkaMhIUEmsYytW
hZ04OW3AVFBvriFEjiR09mAp9lwbFQQ118ldPh3gCb0DZZoL8pbP8emNFTzlRu/W
rXpv6CKzGNmbM6ePHQ04FTGI6ht/y/2ApvHGsGMw7KzlFFuOCFyODRollZXtpL2K
ysgvZ6wZpP4ADY+ApC7WYOnG42NolxfuJvge6TsolqCADskHIwDH6VZ/bMOZZjep
hoOoYLl78mLMmCYH5m3TsX+UNjlYrFXo+sbHCmxCY4QO0L5PVlNknVrk4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBvFDn2EmTfy/PYH8E0wfJBOwrLMB8GA1UdIwQY
MBaAFMmJZgvxR/Yo+3z4snGHN/6oYpjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYt
YzE5ODY1M2FhYzVmLzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYtYzE5ODY1M2FhYzVm
LzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdHIHprB
BD1jKM0a6A9kXW+uDQF+H3/brdzUsFQvZ/nrnQIsps6jIVrYp+CUCRj+lZGEKPW/
8bQyYZ7IO/PHJQRf4l8o4PnBKqSHyTABkFrT47EUu1hV7MOKlN42RnxoeS40ZjEi
hPVX8MdBtBHbWBmZ391HFu9l8NSeqRdQh3P3KhQZ2mEkgCd0LXpaJK54PMMYlLFr
5IetMjYrpeyyC6zxmXZu1RGDmUUdT5zsPB+syoUtTMOWUZtFuYqcIzvjz1eztkdT
zauOUaj5dns3mzf+Z0Mf76iwihCGmGnLKhBUEjc77A4xnVr71C6OVvGMITbw2J+d
nsWv/5+kQk5QLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:38 2025 by rpki-client