Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
File: YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json)
Hash identifier: DNfyJX7Pwm/H654O4O9upQMQJ4crOnLK6MG2cOxM3/Q=
Subject key identifier: 6C:45:2E:A0:12:C7:DC:3A:29:6D:8F:3B:C6:75:83:06:BD:11:AB:40
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Certificate issuer: /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial: 019A4EF5F9B85C7E49928282E32D7B607BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
Manifest number: 03FA
Signing time: Tue 04 Nov 2025 13:02:14 +0000
Manifest this update: Tue 04 Nov 2025 13:02:14 +0000
Manifest next update: Wed 05 Nov 2025 13:02:14 +0000
Files and hashes: 1: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: /CPA76wsylTq3yjlFJDB1N/HCz7gM+O2K+Xhosq1ADY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f9:b8:5c:7e:49:92:82:82:e3:2d:7b:60:7b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Validity
Not Before: Nov 4 13:02:14 2025 GMT
Not After : Nov 5 13:02:14 2025 GMT
Subject: CN=6c452ea012c7dc3a296d8f3bc6758306bd11ab40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:12:86:c0:97:c0:88:83:57:32:b8:cc:35:
25:cb:d7:74:47:58:58:5c:d7:38:c0:40:f6:2b:b3:
7d:8e:cf:0a:ba:f5:9a:88:73:0c:c8:b7:0a:ff:01:
02:6c:12:30:76:c6:73:ce:9d:da:2b:55:7c:f5:37:
9f:dd:dc:48:2b:c2:eb:1b:2f:9c:a5:c7:34:97:fe:
93:15:9b:43:de:9b:6d:ca:79:84:b6:d8:42:bf:6f:
8c:11:6d:68:96:86:ba:79:35:b0:f7:fe:42:34:04:
43:98:64:be:dd:d9:d8:23:a6:bb:57:76:fb:a4:55:
3c:3f:7f:dc:dc:44:67:45:8a:20:56:32:0a:ae:20:
b4:55:61:2a:b5:a5:93:d4:05:ea:9c:6c:6e:65:bb:
a6:ec:2a:21:47:4c:ee:0c:0e:a4:bb:60:23:9a:c2:
64:83:38:da:46:e7:08:b2:88:c0:33:28:93:45:8e:
a7:3d:b4:72:2f:5d:0d:b4:5f:c1:5d:cf:40:71:80:
a5:79:cb:b2:b4:f8:4a:56:3c:8b:1b:c8:83:ad:1a:
e0:a5:c2:47:02:b8:57:82:03:f7:d1:c6:b4:61:e5:
12:9c:d5:3b:9f:07:1e:d9:57:b5:63:09:26:92:5c:
a8:ca:b6:72:4d:58:6f:d6:7f:ca:4a:a9:0c:d0:f4:
72:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:45:2E:A0:12:C7:DC:3A:29:6D:8F:3B:C6:75:83:06:BD:11:AB:40
X509v3 Authority Key Identifier:
keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3e:76:a4:79:b2:89:ed:8b:1d:d8:37:3f:16:bf:c3:64:bd:
bc:ce:d1:5c:75:39:21:e4:e2:78:dc:9c:dd:57:9e:7c:f3:d6:
e8:bd:5c:52:59:77:9b:7b:cd:d5:5e:19:dc:5d:db:a8:ab:c7:
fb:9d:8b:9f:3c:23:b7:bd:89:df:7a:6a:ad:21:e8:32:48:09:
d1:0a:93:04:6b:a5:ac:b9:67:22:be:b3:71:d9:e7:fa:fe:df:
9c:8c:57:99:91:0b:92:28:d4:d2:9d:6f:07:f3:ce:02:56:e5:
4e:5a:aa:b2:0c:e9:15:5d:a0:e7:6b:ef:2c:78:05:3a:df:92:
e2:aa:ce:eb:75:9a:63:77:08:bc:58:54:f4:a4:d9:5e:c6:2a:
f9:1d:c4:92:e3:fc:e6:c5:c7:1d:10:6c:7d:0d:dc:07:38:93:
c3:36:e2:2f:f5:64:e1:ce:d7:b7:44:22:59:89:53:69:10:68:
71:ad:33:e0:f0:b9:94:13:4d:17:0d:97:95:4a:10:a8:3b:84:
01:25:2d:cb:2e:f9:45:4e:55:0a:8b:c3:d1:c5:59:57:3d:10:
fc:b9:0b:97:dd:3b:17:33:a5:c0:14:ce:38:30:38:aa:c2:15:
8e:85:62:9a:3d:fd:22:8f:be:17:2e:26:65:78:11:47:48:86:
8e:2a:b1:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9fm4XH5JkoKC4y17YHvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTVlNGZlZDVjY2FmNjAzYjQ2Njg0YTIxNTUzY2U4NjI2
ZWY5YzEwHhcNMjUxMTA0MTMwMjE0WhcNMjUxMTA1MTMwMjE0WjAzMTEwLwYDVQQD
Eyg2YzQ1MmVhMDEyYzdkYzNhMjk2ZDhmM2JjNjc1ODMwNmJkMTFhYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1EShsCXwIiDVzK4zDUly9d0R1hY
XNc4wED2K7N9js8KuvWaiHMMyLcK/wECbBIwdsZzzp3aK1V89Tef3dxIK8LrGy+c
pcc0l/6TFZtD3pttynmEtthCv2+MEW1oloa6eTWw9/5CNARDmGS+3dnYI6a7V3b7
pFU8P3/c3ERnRYogVjIKriC0VWEqtaWT1AXqnGxuZbum7CohR0zuDA6ku2AjmsJk
gzjaRucIsojAMyiTRY6nPbRyL10NtF/BXc9AcYClecuytPhKVjyLG8iDrRrgpcJH
ArhXggP30ca0YeUSnNU7nwce2Ve1YwkmklyoyrZyTVhv1n/KSqkM0PRyWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxFLqASx9w6KW2PO8Z1gwa9EatAMB8GA1UdIwQY
MBaAFGLl5P7VzK9gO0ZoSiFVPOhibvnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgt
M2UxZDczMWRkNjMwLzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgtM2UxZDczMWRkNjMw
LzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhj52pHmy
ie2LHdg3Pxa/w2S9vM7RXHU5IeTieNyc3VeefPPW6L1cUll3m3vN1V4Z3F3bqKvH
+52Lnzwjt72J33pqrSHoMkgJ0QqTBGulrLlnIr6zcdnn+v7fnIxXmZELkijU0p1v
B/POAlblTlqqsgzpFV2g52vvLHgFOt+S4qrO63WaY3cIvFhU9KTZXsYq+R3EkuP8
5sXHHRBsfQ3cBziTwzbiL/Vk4c7Xt0QiWYlTaRBoca0z4PC5lBNNFw2XlUoQqDuE
ASUtyy75RU5VCovD0cVZVz0Q/LkLl907FzOlwBTOODA4qsIVjoVimj39Io++Fy4m
ZXgRR0iGjiqxJw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:40 2025 by rpki-client