Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
File: YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json)
Hash identifier: zjUcBAYfgXL6TWw7vSyPeXc5P6lagsr52YL024YGHVs=
Subject key identifier: 0A:47:17:D5:0C:08:60:EB:BC:69:82:BB:B9:59:5E:75:6A:FB:77:A4
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 019A4F620460C4DC235167E00DBA23A11BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
Manifest number: 08B9
Signing time: Tue 04 Nov 2025 15:00:14 +0000
Manifest this update: Tue 04 Nov 2025 15:00:14 +0000
Manifest next update: Wed 05 Nov 2025 15:00:14 +0000
Files and hashes: 1: 2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa (hash: XnJT5JSjqE4Adj+ylm025sl/JK+1c1iwTV7Ra2tEO8w=)
2: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: +ZrG9oGEkPjdX9sfJ1XitRdux6jqMD/yo8NCMDEZwAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:04:60:c4:dc:23:51:67:e0:0d:ba:23:a1:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Nov 4 15:00:14 2025 GMT
Not After : Nov 5 15:00:14 2025 GMT
Subject: CN=0a4717d50c0860ebbc6982bbb9595e756afb77a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:08:d5:bc:41:6e:a0:e4:e0:c2:d0:c1:d5:b0:
aa:59:7d:32:1b:0d:b8:35:05:60:71:e1:f5:96:33:
0c:92:58:48:f6:d4:a4:71:80:a2:45:e5:22:e5:93:
90:7b:e1:cc:21:e8:07:20:ce:5e:3d:72:53:e7:de:
8f:68:9c:76:81:9a:64:12:29:c6:55:39:4e:d5:9f:
da:85:41:c4:74:b9:a8:53:48:12:a0:2a:b0:7c:ae:
52:c2:31:60:b3:fc:95:89:10:06:40:cb:a5:f0:58:
9b:d0:a3:49:f1:2d:93:55:00:28:c4:34:e2:e9:12:
06:02:87:15:16:61:28:9a:a1:bd:b9:ce:fe:90:dc:
20:18:8b:cf:46:58:7e:62:34:d9:64:bc:62:b6:d8:
a8:20:d2:1a:13:a9:b2:44:b6:c2:57:37:ae:03:f8:
36:c7:f9:d0:60:5f:a0:91:ab:3d:60:a4:b4:32:63:
5b:df:17:19:1e:11:7e:f7:98:c0:4a:be:ae:36:93:
1d:f7:68:2e:4b:39:b7:a4:33:68:90:d2:24:48:f8:
2c:31:20:20:a4:20:a3:23:b5:29:98:35:11:67:4e:
ea:47:fc:a2:d7:96:38:cf:d3:cf:8c:64:c3:fc:b6:
34:e2:d2:84:6d:27:37:02:da:68:6d:98:ab:36:c2:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:47:17:D5:0C:08:60:EB:BC:69:82:BB:B9:59:5E:75:6A:FB:77:A4
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9b:0d:27:f0:1f:85:58:1e:dd:6e:9f:3d:68:83:45:88:ec:
3b:01:bb:b7:30:87:9c:b9:70:5f:4e:9e:03:7a:f0:e3:60:ab:
13:34:e6:ea:72:3a:b6:88:56:f3:d1:6d:21:18:b2:3f:a0:00:
5d:ed:a2:d4:02:8f:aa:c7:0b:26:40:59:49:c9:c9:3f:6c:49:
ed:47:b1:0a:ad:43:72:a1:dd:ed:92:1e:98:0b:d1:1a:28:2a:
27:aa:24:4e:1d:f2:bc:1e:02:4c:f2:3c:ae:e6:bb:29:64:74:
56:aa:bb:6a:02:16:74:df:28:78:50:b8:8c:d1:1e:20:a8:c3:
7c:d9:32:b9:80:c7:6c:b9:e3:56:00:22:a5:de:b4:17:72:12:
60:a0:62:af:46:13:da:b1:60:18:7d:aa:aa:5d:2d:1c:f0:cc:
4e:49:4e:fb:04:dd:30:bb:6d:e1:0c:2e:ed:91:11:ab:a4:4f:
0f:4c:a5:bf:b9:f3:da:12:0c:3f:c2:0c:a3:60:f4:3a:34:bc:
87:bb:a9:0b:ce:08:5e:28:22:32:c7:1f:ed:b2:a6:33:03:1e:
dc:f4:65:1b:1a:ab:4a:96:23:17:83:b0:35:70:de:4a:ad:42:
9b:db:33:27:16:d6:96:d6:d2:15:aa:a4:11:a1:bb:f1:5f:ad:
33:2c:a5:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYgRgxNwjUWfgDbojoRvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZGM1YTAwMzY4ZDhhZTFmYmE5OTU0MzFmMDNhNDEzMWFk
ZDhhOWEwHhcNMjUxMTA0MTUwMDE0WhcNMjUxMTA1MTUwMDE0WjAzMTEwLwYDVQQD
EygwYTQ3MTdkNTBjMDg2MGViYmM2OTgyYmJiOTU5NWU3NTZhZmI3N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wjVvEFuoOTgwtDB1bCqWX0yGw24
NQVgceH1ljMMklhI9tSkcYCiReUi5ZOQe+HMIegHIM5ePXJT596PaJx2gZpkEinG
VTlO1Z/ahUHEdLmoU0gSoCqwfK5SwjFgs/yViRAGQMul8Fib0KNJ8S2TVQAoxDTi
6RIGAocVFmEomqG9uc7+kNwgGIvPRlh+YjTZZLxittioINIaE6myRLbCVzeuA/g2
x/nQYF+gkas9YKS0MmNb3xcZHhF+95jASr6uNpMd92guSzm3pDNokNIkSPgsMSAg
pCCjI7UpmDURZ07qR/yi15Y4z9PPjGTD/LY04tKEbSc3AtpobZirNsKjBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApHF9UMCGDrvGmCu7lZXnVq+3ekMB8GA1UdIwQY
MBaAFGDcWgA2jYrh+6mVQx8DpBMa3YqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80M2Q2M2EtYTkzNi00NTkzLTg4MjYt
ZWJiMzk4MmMyZWIwLzEvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80M2Q2M2EtYTkzNi00NTkzLTg4MjYtZWJiMzk4MmMyZWIw
LzEvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJsNJ/Af
hVge3W6fPWiDRYjsOwG7tzCHnLlwX06eA3rw42CrEzTm6nI6tohW89FtIRiyP6AA
Xe2i1AKPqscLJkBZScnJP2xJ7UexCq1DcqHd7ZIemAvRGigqJ6okTh3yvB4CTPI8
rua7KWR0Vqq7agIWdN8oeFC4jNEeIKjDfNkyuYDHbLnjVgAipd60F3ISYKBir0YT
2rFgGH2qql0tHPDMTklO+wTdMLtt4Qwu7ZERq6RPD0ylv7nz2hIMP8IMo2D0OjS8
h7upC84IXigiMscf7bKmMwMe3PRlGxqrSpYjF4OwNXDeSq1Cm9szJxbWltbSFaqk
EaG78V+tMyylDA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:32 2025 by rpki-client