Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File: Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier: NEFhrXdTb5lyORhABCpzQd6RWnGtYmhh17zKuL/X+kg=
Subject key identifier: B9:E9:54:78:F5:75:69:97:02:C0:88:7E:78:BC:80:D9:86:6C:CD:83
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 019A4DE1BD474094499AA2D01C7BC264B0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 08:00:30 +0000
Manifest this update: Tue 04 Nov 2025 08:00:30 +0000
Manifest next update: Wed 05 Nov 2025 08:00:30 +0000
Files and hashes: 1: 7B14ZplVrco99CgQhNCv1xGbSkc.roa (hash: OmdwbZQIFrQFIJiZl5h04SvPsC9q6wGpd1O2lXSQCno=)
2: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: KG5u2hpYkG1Tm+lbYtu6Ak9OCXzcksfX2w8/nczuk0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:bd:47:40:94:49:9a:a2:d0:1c:7b:c2:64:b0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Nov 4 08:00:30 2025 GMT
Not After : Nov 5 08:00:30 2025 GMT
Subject: CN=b9e95478f575699702c0887e78bc80d9866ccd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:a5:31:80:08:e0:6f:22:e1:7b:47:0f:4e:
31:5b:9e:96:1f:d0:19:96:e7:fc:3a:d1:ef:c8:76:
22:00:cd:16:1f:90:50:ba:e5:04:de:97:7e:cb:e0:
22:58:53:c2:cd:85:3a:d7:95:42:1e:23:fb:c6:58:
c7:c2:9b:28:7e:ad:22:74:38:a2:c3:87:8a:5e:f3:
8d:b1:36:9a:5d:2e:9f:62:39:ec:b4:d0:f7:2d:57:
96:04:c4:27:f1:a2:9e:0f:2c:4f:68:29:13:11:57:
98:61:b4:d4:7c:93:1a:d7:f1:85:50:68:3b:04:75:
6c:d0:6b:9a:d4:1b:99:e3:a7:24:a0:2f:2d:6c:03:
17:bc:e8:7d:42:b4:b6:92:6f:02:da:01:45:3c:da:
47:94:71:b7:b6:f5:51:d4:57:de:cd:1a:b8:a2:fb:
98:67:66:03:2f:96:e6:21:e7:48:14:ee:5c:90:4a:
c8:77:aa:dd:d1:42:e3:bf:c2:4d:7c:15:fa:4f:bb:
a6:64:22:da:6a:52:c7:24:c1:66:ec:0f:b0:d5:15:
99:af:d8:c2:17:e3:6b:75:70:b3:04:e2:f4:7d:34:
f7:93:33:7d:ff:b7:31:9b:89:e3:01:98:d1:0c:82:
ae:ae:78:5d:ad:51:0d:b0:20:c1:9a:65:bc:5f:f5:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E9:54:78:F5:75:69:97:02:C0:88:7E:78:BC:80:D9:86:6C:CD:83
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bb:d0:8c:7c:66:64:6b:f7:39:64:0d:3b:61:5f:9c:4b:92:
ab:15:c3:d8:1d:f4:5a:aa:9c:71:5e:39:53:30:aa:1f:d8:ab:
20:c2:f2:f0:a8:b8:5b:1c:04:93:01:41:e4:1a:95:bd:d1:dd:
31:70:17:3b:fa:fa:9e:25:ec:da:f5:ed:de:dc:1a:af:2a:92:
ed:09:98:b6:c5:84:19:2d:57:83:15:38:84:1f:a4:dc:0b:c1:
5d:3f:37:ec:a5:a2:e1:b8:45:21:41:61:08:a1:e9:9d:e1:39:
f5:dc:13:85:bf:7f:05:70:5a:fe:b0:cd:69:27:3b:72:2c:0b:
9c:66:f8:7c:05:70:b1:4a:c5:9f:a0:4b:5d:da:10:8e:69:09:
b5:06:a7:f4:36:53:b9:06:eb:f7:04:b1:af:02:22:1a:4c:83:
66:53:38:c4:8a:ca:df:b6:2a:3a:9a:02:10:f2:8d:58:3a:87:
07:61:12:f5:b0:1d:f2:4e:d9:f4:60:16:e3:4c:60:b9:a7:1b:
82:10:f7:b9:7c:dc:0e:e9:fd:9b:f3:ef:20:74:7c:d5:28:fc:
4d:e7:1d:5b:91:63:08:a8:19:ad:59:33:16:5a:08:47:36:50:
45:b3:49:41:96:60:95:98:10:82:b4:16:95:4d:40:e3:4f:99:
b6:71:b3:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4b1HQJRJmqLQHHvCZLDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZTZlYTgzOTI2YmM0NzhjNzg1NDcxZDgwNWE1YzEyMTBh
OGM5OTMwHhcNMjUxMTA0MDgwMDMwWhcNMjUxMTA1MDgwMDMwWjAzMTEwLwYDVQQD
EyhiOWU5NTQ3OGY1NzU2OTk3MDJjMDg4N2U3OGJjODBkOTg2NmNjZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tOlMYAI4G8i4XtHD04xW56WH9AZ
luf8OtHvyHYiAM0WH5BQuuUE3pd+y+AiWFPCzYU615VCHiP7xljHwpsofq0idDii
w4eKXvONsTaaXS6fYjnstND3LVeWBMQn8aKeDyxPaCkTEVeYYbTUfJMa1/GFUGg7
BHVs0Gua1BuZ46ckoC8tbAMXvOh9QrS2km8C2gFFPNpHlHG3tvVR1FfezRq4ovuY
Z2YDL5bmIedIFO5ckErId6rd0ULjv8JNfBX6T7umZCLaalLHJMFm7A+w1RWZr9jC
F+NrdXCzBOL0fTT3kzN9/7cxm4njAZjRDIKurnhdrVENsCDBmmW8X/XVoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnpVHj1dWmXAsCIfni8gNmGbM2DMB8GA1UdIwQY
MBaAFGHm6oOSa8R4x4VHHYBaXBIQqMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMt
MzNjYzNhZGIxZTc4LzEvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMtMzNjYzNhZGIxZTc4
LzEvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7vQjHxm
ZGv3OWQNO2FfnEuSqxXD2B30WqqccV45UzCqH9irIMLy8Ki4WxwEkwFB5BqVvdHd
MXAXO/r6niXs2vXt3twaryqS7QmYtsWEGS1XgxU4hB+k3AvBXT837KWi4bhFIUFh
CKHpneE59dwThb9/BXBa/rDNaSc7ciwLnGb4fAVwsUrFn6BLXdoQjmkJtQan9DZT
uQbr9wSxrwIiGkyDZlM4xIrK37YqOpoCEPKNWDqHB2ES9bAd8k7Z9GAW40xguacb
ghD3uXzcDun9m/PvIHR81Sj8TecdW5FjCKgZrVkzFloIRzZQRbNJQZZglZgQgrQW
lU1A40+ZtnGzwQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:51 2025 by rpki-client