Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier: G/orvpmvmwMF3XE7tocBlOhz5wvP2NPVriMv1rPcFEQ=
Subject key identifier: E1:7D:5C:4E:E6:BD:8A:B5:63:DC:C5:21:86:A9:83:DD:9A:2B:CC:FE
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial: 019A4F98C9DDCB445B864973B2D78C197C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number: 0677
Signing time: Tue 04 Nov 2025 16:00:04 +0000
Manifest this update: Tue 04 Nov 2025 16:00:04 +0000
Manifest next update: Wed 05 Nov 2025 16:00:04 +0000
Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: nvsGUq5+P9FbuoN8++v5g87mAlBI3rjXpT3N9OYdXqU=)
2: b8AVOGW_uWiltgqsOrfUVPuVbhk.roa (hash: g14bBKv/Ezpz+JlzQJs8s4kzh2JITmna3X17wkbp61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:c9:dd:cb:44:5b:86:49:73:b2:d7:8c:19:7c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Validity
Not Before: Nov 4 16:00:04 2025 GMT
Not After : Nov 5 16:00:04 2025 GMT
Subject: CN=e17d5c4ee6bd8ab563dcc52186a983dd9a2bccfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:a4:f1:9e:56:2f:29:a5:86:b8:c7:cf:39:
db:14:e3:dc:86:9e:2e:da:ae:f9:a0:6f:b3:92:b4:
ad:b5:8f:d7:fc:e5:8e:98:74:95:08:23:95:bd:68:
30:36:90:1e:47:05:12:e7:96:33:6c:bc:e1:28:e9:
57:f2:76:63:07:8f:4b:e3:74:91:ee:5d:1a:7b:c8:
36:22:06:3b:de:9e:fd:34:ee:e9:d6:75:1a:ed:65:
45:5d:cd:59:75:b7:f3:db:91:89:90:cc:b4:64:07:
a6:3b:ed:e2:91:06:be:7a:a0:86:53:57:ac:0a:3b:
42:d2:f7:48:77:41:b2:96:4c:a7:8c:34:31:fa:4c:
30:b5:02:5f:35:22:22:1b:32:58:45:cd:c9:eb:92:
5a:55:5a:09:f4:41:e7:14:93:34:b8:98:05:5f:bb:
27:85:d1:60:8b:cd:e5:c9:6a:69:ab:f0:b6:a2:f1:
ba:8f:e5:84:17:b2:6e:a4:1c:8a:7d:a2:fe:ad:a1:
41:e4:3f:87:f8:2c:ac:d9:e3:5e:ec:38:45:7c:60:
4d:42:72:ae:ae:ed:ee:74:b5:14:30:f5:41:0a:fa:
19:34:1a:bd:f3:69:57:ff:72:a2:a6:63:25:60:3d:
21:6f:ea:a2:16:69:ac:ee:2e:03:8f:5d:ca:32:55:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7D:5C:4E:E6:BD:8A:B5:63:DC:C5:21:86:A9:83:DD:9A:2B:CC:FE
X509v3 Authority Key Identifier:
keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e1:19:ca:89:6c:fa:59:4b:7f:c9:a7:47:5d:58:78:b1:ba:
ef:ef:99:f8:88:6b:73:18:63:3a:fc:2b:be:99:ad:53:54:4e:
e8:52:dd:0e:74:34:ed:30:2a:da:73:bb:8a:59:35:ae:4b:71:
b1:49:9f:e6:3c:66:ef:4a:3d:59:9a:d4:e9:ff:5e:4e:88:7a:
55:9d:17:e0:56:b9:98:e9:61:c1:d2:f0:8c:e7:57:d6:86:65:
28:4a:d5:78:d5:db:ec:7b:0e:92:76:8b:13:c1:a5:af:02:79:
e1:f8:da:05:90:78:29:e6:a9:a6:f6:a1:a0:15:0e:46:e4:dc:
2c:ff:cc:7a:d8:b9:5f:d3:6f:0f:c4:ee:b2:a7:48:b0:ae:e6:
f1:c7:6f:18:0d:2b:bb:6f:38:9f:1b:71:ea:d9:f1:dd:60:e6:
a2:9c:1d:23:f5:cb:2e:c3:b6:e5:fa:be:a4:ae:ab:eb:34:d9:
64:a1:b2:d4:d9:73:2f:a7:6b:a3:68:d8:04:66:96:e7:45:52:
90:1a:77:c1:16:c3:0e:7e:99:04:54:2d:d2:71:15:4c:b0:a8:
e2:cf:78:99:37:c4:d2:3d:e1:37:1a:da:7a:ca:16:30:4a:8f:
ac:11:dc:78:36:3e:ee:f2:e4:56:a0:b8:27:e2:20:91:f6:44:
1c:e4:d0:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmMndy0RbhklzsteMGXw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYWE3ZDYzMTNhYmRjMjdjOTJkMGJhNTQ5ZTg2ODNmOWE4
ZjE1MGYwHhcNMjUxMTA0MTYwMDA0WhcNMjUxMTA1MTYwMDA0WjAzMTEwLwYDVQQD
EyhlMTdkNWM0ZWU2YmQ4YWI1NjNkY2M1MjE4NmE5ODNkZDlhMmJjY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ik8Z5WLymlhrjHzznbFOPchp4u
2q75oG+zkrSttY/X/OWOmHSVCCOVvWgwNpAeRwUS55YzbLzhKOlX8nZjB49L43SR
7l0ae8g2IgY73p79NO7p1nUa7WVFXc1Zdbfz25GJkMy0ZAemO+3ikQa+eqCGU1es
CjtC0vdId0GylkynjDQx+kwwtQJfNSIiGzJYRc3J65JaVVoJ9EHnFJM0uJgFX7sn
hdFgi83lyWppq/C2ovG6j+WEF7JupByKfaL+raFB5D+H+Cys2eNe7DhFfGBNQnKu
ru3udLUUMPVBCvoZNBq982lX/3KipmMlYD0hb+qiFmms7i4Dj13KMlX0KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF9XE7mvYq1Y9zFIYapg92aK8z+MB8GA1UdIwQY
MBaAFGGqfWMTq9wnyS0LpUnoaD+ajxUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kMjMwY2YtODUzZi00M2I3LTk3NDEt
ZGNhOGRhODc2ZmU2LzEvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kMjMwY2YtODUzZi00M2I3LTk3NDEtZGNhOGRhODc2ZmU2
LzEvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+EZyols
+llLf8mnR11YeLG67++Z+IhrcxhjOvwrvpmtU1RO6FLdDnQ07TAq2nO7ilk1rktx
sUmf5jxm70o9WZrU6f9eToh6VZ0X4Fa5mOlhwdLwjOdX1oZlKErVeNXb7HsOknaL
E8GlrwJ54fjaBZB4KeappvahoBUORuTcLP/Meti5X9NvD8TusqdIsK7m8cdvGA0r
u284nxtx6tnx3WDmopwdI/XLLsO25fq+pK6r6zTZZKGy1NlzL6dro2jYBGaW50VS
kBp3wRbDDn6ZBFQt0nEVTLCo4s94mTfE0j3hNxraesoWMEqPrBHceDY+7vLkVqC4
J+IgkfZEHOTQ8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:27 2025 by rpki-client