Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: EJUsZ2UDbRE/nLkYFPAc2YTJ7oPMe7TgRd5LPsNZrhI=
Subject key identifier: 80:FE:47:CE:12:D4:A1:23:51:33:8A:C2:C6:CB:36:D6:ED:07:9E:B6
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 019A4F62233A4BB8EFED9CE23C1B260F5616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:22 +0000
Manifest this update: Tue 04 Nov 2025 15:00:22 +0000
Manifest next update: Wed 05 Nov 2025 15:00:22 +0000
Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: Nqbk6zP9lq1s94xgAB6tXaq3qPrcHvVxEdvr7dUzOAw=)
2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:23:3a:4b:b8:ef:ed:9c:e2:3c:1b:26:0f:56:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Nov 4 15:00:22 2025 GMT
Not After : Nov 5 15:00:22 2025 GMT
Subject: CN=80fe47ce12d4a12351338ac2c6cb36d6ed079eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:fb:1d:1d:5f:ba:e7:ec:85:75:3c:e2:a9:
e0:7a:5d:c1:21:42:54:cc:51:78:02:f9:8f:ba:ce:
62:d0:55:ad:43:69:22:31:42:f3:12:97:60:6e:5d:
91:a5:b6:a1:0a:09:0c:ac:1e:2c:59:20:5d:82:31:
6c:59:45:cf:b3:d1:82:d1:a7:f8:23:34:f9:8e:61:
da:9b:cc:2d:20:92:01:50:5f:89:4d:5d:55:45:82:
ed:36:bf:e5:39:f1:ca:7d:0c:93:54:23:a4:11:9b:
58:09:9b:c3:33:84:43:9e:6e:e1:3a:c9:71:b2:9e:
25:27:ef:17:65:77:42:e3:55:df:ae:9e:82:53:e3:
75:47:64:1e:85:70:9c:1e:16:1f:a0:e2:40:66:8f:
ed:96:51:c8:c5:02:05:b8:7f:be:10:6f:ee:c3:72:
1d:c6:b1:8f:bb:b4:69:21:b9:07:6a:b8:db:e7:c0:
cd:9d:ad:93:83:c1:e0:48:af:d8:5e:61:5b:42:9c:
9c:5e:4b:88:ad:47:f7:0e:93:30:5c:41:5b:c4:7c:
e4:3c:ce:eb:4d:04:9c:a4:13:b0:5b:1f:6c:82:c4:
e5:79:7e:bc:12:25:c7:6e:38:1c:43:72:01:41:85:
ad:69:ce:63:c8:46:4c:d5:62:48:37:3b:07:b5:52:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FE:47:CE:12:D4:A1:23:51:33:8A:C2:C6:CB:36:D6:ED:07:9E:B6
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:38:8d:1f:83:9d:27:25:09:32:b9:ce:67:54:79:8e:0b:0e:
af:16:6a:07:4d:6d:51:ba:5f:5d:37:7f:63:46:6e:fa:03:7b:
18:63:fd:80:f9:33:db:36:62:19:1b:60:25:16:6f:e0:90:dd:
e9:a2:43:08:d0:ee:1c:be:a6:58:d0:15:64:86:31:14:4d:c2:
df:dc:33:f3:74:8f:01:f1:26:14:f9:39:e4:32:8d:8d:f0:bc:
b6:59:55:cb:ee:e9:b1:a2:20:18:c0:71:9f:71:04:27:49:7d:
0a:27:bf:9a:9e:d8:b4:69:42:0a:64:1d:40:23:a9:52:25:e6:
e4:59:b9:80:fe:1a:5c:5e:d9:81:dd:f8:a4:fb:f4:db:62:d9:
33:69:02:e4:7f:3e:08:df:59:93:c5:7e:43:12:6f:2b:15:33:
f4:9c:0c:e9:02:73:71:94:53:8a:91:12:90:e2:2c:ab:4a:0e:
dd:57:76:ae:a9:ac:90:03:02:bc:17:06:35:85:b1:2f:de:4d:
cd:80:5c:77:2b:c3:06:db:0e:d6:22:a3:60:45:c4:f4:99:43:
ab:f3:2e:57:90:e9:b1:b0:3c:29:d3:81:0b:c9:2e:93:f6:a1:
34:e2:fe:26:92:f1:19:4c:e7:8b:2c:43:a4:ff:1d:2f:f7:a5:
60:13:51:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYiM6S7jv7ZziPBsmD1YWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz
NWJlNGEwHhcNMjUxMTA0MTUwMDIyWhcNMjUxMTA1MTUwMDIyWjAzMTEwLwYDVQQD
Eyg4MGZlNDdjZTEyZDRhMTIzNTEzMzhhYzJjNmNiMzZkNmVkMDc5ZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5T7HR1fuufshXU84qngel3BIUJU
zFF4AvmPus5i0FWtQ2kiMULzEpdgbl2RpbahCgkMrB4sWSBdgjFsWUXPs9GC0af4
IzT5jmHam8wtIJIBUF+JTV1VRYLtNr/lOfHKfQyTVCOkEZtYCZvDM4RDnm7hOslx
sp4lJ+8XZXdC41Xfrp6CU+N1R2QehXCcHhYfoOJAZo/tllHIxQIFuH++EG/uw3Id
xrGPu7RpIbkHarjb58DNna2Tg8HgSK/YXmFbQpycXkuIrUf3DpMwXEFbxHzkPM7r
TQScpBOwWx9sgsTleX68EiXHbjgcQ3IBQYWtac5jyEZM1WJINzsHtVINewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID+R84S1KEjUTOKwsbLNtbtB562MB8GA1UdIwQY
MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt
MzlhZmQ5MzE2NTk4LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4
LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTiNH4Od
JyUJMrnOZ1R5jgsOrxZqB01tUbpfXTd/Y0Zu+gN7GGP9gPkz2zZiGRtgJRZv4JDd
6aJDCNDuHL6mWNAVZIYxFE3C39wz83SPAfEmFPk55DKNjfC8tllVy+7psaIgGMBx
n3EEJ0l9Cie/mp7YtGlCCmQdQCOpUiXm5Fm5gP4aXF7Zgd34pPv022LZM2kC5H8+
CN9Zk8V+QxJvKxUz9JwM6QJzcZRTipESkOIsq0oO3Vd2rqmskAMCvBcGNYWxL95N
zYBcdyvDBtsO1iKjYEXE9JlDq/MuV5DpsbA8KdOBC8kuk/ahNOL+JpLxGUzniyxD
pP8dL/elYBNR8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:18 2025 by rpki-client