Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
File: YvSxR6sO_r8-RubeqYXXUYd8u04.mft (raw, json)
Hash identifier: RC+zwTiEk1V+ZoumuKWITtbctdV06enSUpwzvOX2oJ4=
Subject key identifier: 22:6D:04:E7:26:EE:AF:FA:C2:86:19:20:FC:7C:E7:82:55:50:85:8D
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Certificate issuer: /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial: 019A54F65CC25A3C1446606BBF772D546386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 17:00:22 +0000
Manifest this update: Wed 05 Nov 2025 17:00:22 +0000
Manifest next update: Thu 06 Nov 2025 17:00:22 +0000
Files and hashes: 1: B254PCc3PRUmXT9tMIpAl8XNBm8.roa (hash: DpvsWvC8Sgiw0PT2yPQOf/12fRPoJTcquOU/HLYaUhc=)
2: YvSxR6sO_r8-RubeqYXXUYd8u04.crl (hash: BNpJnPFCbFHJV7UI8jxgqEBr/1avoUnRIs7G3iRiZk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:5c:c2:5a:3c:14:46:60:6b:bf:77:2d:54:63:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Validity
Not Before: Nov 5 17:00:22 2025 GMT
Not After : Nov 6 17:00:22 2025 GMT
Subject: CN=226d04e726eeaffac2861920fc7ce7825550858d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:ae:b2:12:88:3c:7b:c4:a5:e8:fb:83:98:
7a:47:c1:13:29:51:07:16:95:d9:91:dc:df:d4:95:
93:13:2e:9f:49:47:ac:99:48:ab:6b:89:e7:3c:63:
47:89:22:93:8b:37:ef:e1:ce:62:9e:80:ac:a7:e0:
97:1b:18:40:fb:15:44:32:9b:15:53:65:10:12:c1:
ee:1a:70:a3:60:25:46:3e:b6:ce:76:3f:78:41:db:
87:9f:17:ca:d6:4c:7b:df:30:36:ea:07:fa:03:d9:
02:fb:d0:fb:1b:c0:25:31:28:23:e3:35:9c:9e:b4:
e5:54:ab:70:54:1d:0b:5f:24:fd:93:21:bd:74:3b:
c6:49:ee:ff:19:7b:1b:53:82:40:df:f7:84:7d:d4:
d7:2a:cc:b3:c4:23:c5:33:5d:67:23:44:a3:95:62:
84:3a:07:0f:8d:30:67:0c:0d:06:30:c6:fa:7e:54:
55:bb:69:3a:5c:ef:5c:f6:62:e5:55:ce:82:ab:4a:
4a:d1:9a:22:0a:59:b3:a0:31:26:64:3d:09:b7:80:
00:df:d3:89:4a:1e:7b:6a:26:ee:e7:e5:53:95:cc:
81:61:33:49:7d:a8:e0:a1:3c:de:64:cb:1c:49:2a:
ae:8f:b4:aa:a6:92:1d:ed:15:5a:ee:7a:9f:5d:29:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:04:E7:26:EE:AF:FA:C2:86:19:20:FC:7C:E7:82:55:50:85:8D
X509v3 Authority Key Identifier:
keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6f:62:ec:ba:82:0b:7a:ea:7d:da:4a:6e:df:d4:e4:8e:98:
00:41:1b:fb:05:1b:44:20:12:0c:34:7c:a5:19:7d:cc:5f:88:
46:d3:64:b4:d9:d9:fa:ec:fa:e4:67:63:8f:84:b9:8b:99:a9:
17:dd:2b:ff:40:bb:aa:b6:d8:43:ae:dc:3f:75:25:db:26:8c:
d0:32:00:7e:06:c8:c0:4f:6e:f6:8d:ab:83:3e:be:6a:d8:02:
20:ae:37:0d:c5:b2:1b:14:57:0f:73:5d:d4:53:b3:c0:41:bb:
e8:4e:2e:a0:dd:13:a4:95:d0:91:79:36:65:12:ce:e6:ec:92:
2d:8a:72:1d:e5:2c:de:ae:0d:f6:38:45:05:2e:f1:29:23:b6:
55:9a:89:f9:6a:76:6a:bb:39:07:af:6c:f7:a3:7a:85:06:0e:
bb:d8:21:7f:34:a5:2a:b7:77:d0:a3:82:51:c1:0e:d7:61:8b:
d3:50:dc:25:bc:e1:b2:78:d7:80:27:7b:52:14:f0:30:76:7a:
1c:ec:5f:59:bc:3a:72:de:f0:d9:26:ab:c8:fa:55:7c:6a:9e:
6e:7c:dd:d0:36:8f:cf:b6:cf:26:da:29:b9:06:fa:e5:3c:ee:
f7:39:9e:eb:66:4b:2b:d6:0a:91:02:d4:29:a5:d9:5e:e3:ab:
95:2c:8f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpU9lzCWjwURmBrv3ctVGOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZjRiMTQ3YWIwZWZlYmYzZTQ2ZTZkZWE5ODVkNzUxODc3
Y2JiNGUwHhcNMjUxMTA1MTcwMDIyWhcNMjUxMTA2MTcwMDIyWjAzMTEwLwYDVQQD
EygyMjZkMDRlNzI2ZWVhZmZhYzI4NjE5MjBmYzdjZTc4MjU1NTA4NThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+GushKIPHvEpej7g5h6R8ETKVEH
FpXZkdzf1JWTEy6fSUesmUira4nnPGNHiSKTizfv4c5inoCsp+CXGxhA+xVEMpsV
U2UQEsHuGnCjYCVGPrbOdj94QduHnxfK1kx73zA26gf6A9kC+9D7G8AlMSgj4zWc
nrTlVKtwVB0LXyT9kyG9dDvGSe7/GXsbU4JA3/eEfdTXKsyzxCPFM11nI0SjlWKE
OgcPjTBnDA0GMMb6flRVu2k6XO9c9mLlVc6Cq0pK0ZoiClmzoDEmZD0Jt4AA39OJ
Sh57aibu5+VTlcyBYTNJfajgoTzeZMscSSquj7SqppId7RVa7nqfXSlQTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJtBOcm7q/6woYZIPx854JVUIWNMB8GA1UdIwQY
MBaAFGL0sUerDv6/Pkbm3qmF11GHfLtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ZTZlNWEtYWVjMC00MGFkLWE2Mjgt
ZGFiM2E5ZjAzMGRjLzEvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ZTZlNWEtYWVjMC00MGFkLWE2MjgtZGFiM2E5ZjAzMGRj
LzEvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEm9i7LqC
C3rqfdpKbt/U5I6YAEEb+wUbRCASDDR8pRl9zF+IRtNktNnZ+uz65Gdjj4S5i5mp
F90r/0C7qrbYQ67cP3Ul2yaM0DIAfgbIwE9u9o2rgz6+atgCIK43DcWyGxRXD3Nd
1FOzwEG76E4uoN0TpJXQkXk2ZRLO5uySLYpyHeUs3q4N9jhFBS7xKSO2VZqJ+Wp2
ars5B69s96N6hQYOu9ghfzSlKrd30KOCUcEO12GL01DcJbzhsnjXgCd7UhTwMHZ6
HOxfWbw6ct7w2SaryPpVfGqebnzd0DaPz7bPJtopuQb65Tzu9zme62ZLK9YKkQLU
KaXZXuOrlSyPVA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:52 2025 by rpki-client