Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
File: YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft (raw, json)
Hash identifier: DYYoPVL8HHMd6WGM7M8l4yUqfJVCMqdRTn5eOtPjze8=
Subject key identifier: 72:27:B0:60:0D:25:0D:3A:40:83:76:DC:3F:24:28:51:F8:3C:60:A6
Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
Certificate issuer: /CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Certificate serial: 019A5375990EDB456A61965CAAD6598BC534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
Manifest number: 0601
Signing time: Wed 05 Nov 2025 10:00:07 +0000
Manifest this update: Wed 05 Nov 2025 10:00:07 +0000
Manifest next update: Thu 06 Nov 2025 10:00:07 +0000
Files and hashes: 1: 59_xhKD0T6uSuFEYj3I2uhiqG1c.roa (hash: MYVrtUe54xpHaYsIcVLfMIx5ZncQsO+bXIz8ZL41Ros=)
2: 9qqMkqBIjABklRo0TcvZzdRORAI.roa (hash: 2MCPGhcnLXE4oMEI7o6/tc2uu9oOZ9cwxOU5/mzOPUI=)
3: YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl (hash: JOLi1hnBcXf6eHioIXXB7H9K0pvm4A2qQmtf3FoOr00=)
4: wXfYanJeLekulCR6gXF4hFd0qi4.roa (hash: kVi1Jps4RtrSVg9+xQdU2e8mO6fPm3vlK9bwNs7JRMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:99:0e:db:45:6a:61:96:5c:aa:d6:59:8b:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Validity
Not Before: Nov 5 10:00:07 2025 GMT
Not After : Nov 6 10:00:07 2025 GMT
Subject: CN=7227b0600d250d3a408376dc3f242851f83c60a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ac:8d:46:6d:eb:5c:f8:c2:1b:36:1c:27:79:
43:46:20:f0:d3:5b:65:47:dd:b5:e1:24:a9:7f:ba:
97:b9:63:b8:1e:c7:92:d8:4e:fa:fe:a3:32:64:2f:
69:32:36:98:0f:bf:b9:d1:4d:fe:55:01:6e:f2:a8:
1e:26:d7:50:a1:48:df:5f:cd:ec:fa:17:49:f5:9c:
0d:9b:fc:b5:4b:26:22:93:15:ee:f2:b5:31:74:cd:
e9:c6:78:9a:0a:b1:96:eb:a1:ca:da:74:c1:60:ea:
33:64:21:c6:8e:fa:8e:01:45:9b:ca:b2:00:c4:11:
ce:a5:f6:ab:da:5f:50:0c:dc:fb:58:a8:89:9c:7e:
ab:d4:21:ef:af:fc:9b:ef:8f:0e:cd:1b:21:15:69:
ac:8f:8d:fb:1c:77:d9:ae:4b:d1:49:11:ab:ba:06:
0f:6a:49:68:cd:7c:ea:82:1b:ab:0e:84:94:05:4e:
47:d5:09:65:5c:eb:44:9d:3c:9d:6c:bb:c9:ce:31:
a9:7f:fa:d8:3d:df:cb:52:19:2e:cb:e2:73:7d:15:
27:f9:28:b1:25:57:24:4f:c0:bc:35:89:ac:5a:c6:
d2:f5:e0:49:86:c9:27:a2:b2:5e:55:53:d0:e9:58:
d2:19:fc:6b:aa:bb:e5:bd:a9:ec:b9:5b:65:2a:c0:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:B0:60:0D:25:0D:3A:40:83:76:DC:3F:24:28:51:F8:3C:60:A6
X509v3 Authority Key Identifier:
keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d7:3d:20:cf:6b:0a:59:f1:18:27:a8:85:2f:33:23:b1:be:
d8:c4:41:31:cd:aa:81:c0:57:68:58:8c:92:7e:9c:44:55:34:
a8:1c:8a:77:02:eb:4a:b5:5e:cf:7b:1f:23:d7:31:b4:85:eb:
5c:45:50:d1:11:62:b9:8b:c2:48:dd:9b:24:2b:53:4c:5e:6e:
11:54:6d:f7:3c:3f:5f:af:08:3e:8c:35:81:6f:1d:07:a7:a8:
90:0c:5e:01:e3:a2:41:65:70:ad:d4:d8:17:a1:35:ce:5d:87:
5e:11:3d:43:c5:d4:aa:ae:6f:08:be:4c:b9:8a:53:6f:57:6f:
66:c2:30:eb:94:4f:45:32:7c:1e:e5:03:81:59:25:dd:df:6a:
b7:ac:93:c4:6e:04:34:66:f4:07:84:7d:27:51:40:a9:01:55:
90:9b:23:2a:8e:5b:35:37:dc:6e:c3:58:c7:f3:86:8e:42:fa:
ac:67:8d:1d:53:b6:5a:8b:f7:cd:2e:85:27:78:c0:bb:70:b3:
c7:32:a2:58:c5:bc:be:7d:a4:ea:cb:70:26:7f:95:98:bf:76:
42:28:b7:8d:50:d7:bc:21:a5:35:80:66:0a:ab:d4:be:0e:fd:
c4:e7:eb:ad:a9:42:08:5c:16:16:51:2c:12:40:e7:1d:f4:11:
ce:9a:74:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdZkO20VqYZZcqtZZi8U0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwM2IzMWJjNmU3ZjQyZjYzMDM4NzBmMDIzNGI0MGRlZjcx
ZmEwM2QwHhcNMjUxMTA1MTAwMDA3WhcNMjUxMTA2MTAwMDA3WjAzMTEwLwYDVQQD
Eyg3MjI3YjA2MDBkMjUwZDNhNDA4Mzc2ZGMzZjI0Mjg1MWY4M2M2MGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qyNRm3rXPjCGzYcJ3lDRiDw01tl
R9214SSpf7qXuWO4HseS2E76/qMyZC9pMjaYD7+50U3+VQFu8qgeJtdQoUjfX83s
+hdJ9ZwNm/y1SyYikxXu8rUxdM3pxniaCrGW66HK2nTBYOozZCHGjvqOAUWbyrIA
xBHOpfar2l9QDNz7WKiJnH6r1CHvr/yb748OzRshFWmsj437HHfZrkvRSRGrugYP
aklozXzqghurDoSUBU5H1QllXOtEnTydbLvJzjGpf/rYPd/LUhkuy+JzfRUn+Six
JVckT8C8NYmsWsbS9eBJhsknorJeVVPQ6VjSGfxrqrvlvansuVtlKsBBgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHInsGANJQ06QIN23D8kKFH4PGCmMB8GA1UdIwQY
MBaAFGA7Mbxuf0L2MDhw8CNLQN73H6A9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wZjIyNjYtYjRmMS00OGZjLWIyOTMt
Njc5MzI2NTZlNTk0LzEvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wZjIyNjYtYjRmMS00OGZjLWIyOTMtNjc5MzI2NTZlNTk0
LzEvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatc9IM9r
ClnxGCeohS8zI7G+2MRBMc2qgcBXaFiMkn6cRFU0qByKdwLrSrVez3sfI9cxtIXr
XEVQ0RFiuYvCSN2bJCtTTF5uEVRt9zw/X68IPow1gW8dB6eokAxeAeOiQWVwrdTY
F6E1zl2HXhE9Q8XUqq5vCL5MuYpTb1dvZsIw65RPRTJ8HuUDgVkl3d9qt6yTxG4E
NGb0B4R9J1FAqQFVkJsjKo5bNTfcbsNYx/OGjkL6rGeNHVO2Wov3zS6FJ3jAu3Cz
xzKiWMW8vn2k6stwJn+VmL92Qii3jVDXvCGlNYBmCqvUvg79xOfrralCCFwWFlEs
EkDnHfQRzpp0YQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:07:24 2025 by rpki-client