Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
File: Yf61N-NjXsgAFRDDGSt36xeXwKo.mft (raw, json)
Hash identifier: MWhhQf0A2ZqlUNqfDVJmlkZPp40jnnIW3PR3y/5h8qI=
Subject key identifier: DC:F5:90:C0:73:FB:6D:0E:C7:2C:F6:1D:70:80:1B:30:8A:88:94:57
Authority key identifier: 61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
Certificate issuer: /CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Certificate serial: 019A4C617ED62387E05B8B037F478F951C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
Manifest number: 0D09
Signing time: Tue 04 Nov 2025 01:00:49 +0000
Manifest this update: Tue 04 Nov 2025 01:00:49 +0000
Manifest next update: Wed 05 Nov 2025 01:00:49 +0000
Files and hashes: 1: Yf61N-NjXsgAFRDDGSt36xeXwKo.crl (hash: Cv5DwjbX0Bdg0MmZJbU7OmW8XPiUQci5SdU/oEN703s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:7e:d6:23:87:e0:5b:8b:03:7f:47:8f:95:1c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Validity
Not Before: Nov 4 01:00:49 2025 GMT
Not After : Nov 5 01:00:49 2025 GMT
Subject: CN=dcf590c073fb6d0ec72cf61d70801b308a889457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:6e:98:8d:fb:35:e5:96:b7:36:80:11:f5:
6a:6d:02:26:c3:a3:5c:ba:98:fc:51:3e:e7:ef:df:
c9:cd:c9:5c:5e:8b:8e:cf:52:43:56:b1:7d:fa:71:
67:a3:ea:89:fd:bd:43:3e:ab:e2:74:6e:a7:44:2a:
b9:04:f3:fa:5e:c6:14:85:ca:a0:25:7c:b5:97:5c:
2b:b0:d3:9f:de:60:59:0b:2a:23:9e:c2:77:64:52:
4d:59:9a:d6:9c:e9:9c:7e:73:6b:51:03:09:5c:b4:
61:07:07:71:ee:92:eb:18:07:78:11:cb:fc:93:a8:
e9:29:35:66:5d:8f:68:2c:c5:e3:cc:37:82:08:f6:
bf:1f:21:e1:da:f4:78:c1:d7:0d:39:32:a8:a6:71:
af:81:d8:8f:e5:06:3b:e0:fb:55:19:62:79:04:6c:
15:39:90:99:74:b0:9c:5e:aa:84:30:2f:8c:55:de:
25:7e:a0:60:5b:d8:fb:95:8f:1d:b4:54:84:cd:61:
82:50:c6:63:f3:02:ed:1a:3c:b6:70:b3:76:88:44:
3f:90:42:ad:a4:a2:9b:47:83:1c:a1:86:40:e7:c0:
8b:29:6a:2a:4b:09:c0:5f:ea:44:dd:84:4e:34:ff:
e1:f9:ad:51:2b:fe:15:bb:2c:ef:35:cf:af:9c:38:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F5:90:C0:73:FB:6D:0E:C7:2C:F6:1D:70:80:1B:30:8A:88:94:57
X509v3 Authority Key Identifier:
keyid:61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:62:e9:5c:b6:54:98:4a:71:ad:2a:22:d1:74:b8:10:88:00:
1a:f2:8a:e5:73:fe:8b:1b:c6:06:be:ea:fd:cb:20:48:45:bd:
42:52:82:a1:47:7c:4b:25:62:98:9f:23:ed:17:23:7a:2b:fd:
ee:fa:6f:fb:b1:e0:be:c6:56:71:c1:ef:40:17:7f:00:72:20:
ba:82:8d:f2:9e:ec:fe:40:52:8a:41:5c:2a:2f:8e:6a:4f:63:
99:23:86:35:12:87:d0:ec:74:35:ab:09:02:35:31:2d:c9:24:
32:dc:61:6a:e5:c7:b6:7e:4d:04:40:55:9e:f5:4c:6d:0d:71:
64:fa:45:7b:e1:c2:12:76:57:ae:30:77:f4:d5:21:6c:65:a8:
a4:1a:dc:d7:f8:38:e6:45:00:57:c5:de:c0:49:fe:e1:87:9c:
40:a7:b7:cd:cb:68:ca:f7:62:07:5d:06:1f:d3:11:bf:94:93:
4c:2e:69:07:f8:fe:f9:c7:f3:28:b5:f9:2b:bd:5e:34:e8:d3:
57:63:df:77:1f:ff:b4:9a:ba:d6:26:4f:ec:8e:3b:ad:d6:c7:
e5:48:ee:4d:8a:aa:91:c0:e6:e0:ca:4d:27:03:49:e8:7e:4d:
76:06:1b:ee:5c:a8:8c:05:df:5d:e1:c5:c4:72:7e:e9:8d:41:
96:fa:04:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYX7WI4fgW4sDf0ePlRxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmViNTM3ZTM2MzVlYzgwMDE1MTBjMzE5MmI3N2ViMTc5
N2MwYWEwHhcNMjUxMTA0MDEwMDQ5WhcNMjUxMTA1MDEwMDQ5WjAzMTEwLwYDVQQD
EyhkY2Y1OTBjMDczZmI2ZDBlYzcyY2Y2MWQ3MDgwMWIzMDhhODg5NDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aNumI37NeWWtzaAEfVqbQImw6Nc
upj8UT7n79/JzclcXouOz1JDVrF9+nFno+qJ/b1DPqvidG6nRCq5BPP6XsYUhcqg
JXy1l1wrsNOf3mBZCyojnsJ3ZFJNWZrWnOmcfnNrUQMJXLRhBwdx7pLrGAd4Ecv8
k6jpKTVmXY9oLMXjzDeCCPa/HyHh2vR4wdcNOTKopnGvgdiP5QY74PtVGWJ5BGwV
OZCZdLCcXqqEMC+MVd4lfqBgW9j7lY8dtFSEzWGCUMZj8wLtGjy2cLN2iEQ/kEKt
pKKbR4McoYZA58CLKWoqSwnAX+pE3YRONP/h+a1RK/4VuyzvNc+vnDjrtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz1kMBz+20Oxyz2HXCAGzCKiJRXMB8GA1UdIwQY
MBaAFGH+tTfjY17IABUQwxkrd+sXl8CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xODIwNDQtOWNiZi00NTc5LWIzYjQt
Nzg1Njc4N2EyZTYzLzEvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xODIwNDQtOWNiZi00NTc5LWIzYjQtNzg1Njc4N2EyZTYz
LzEvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2LpXLZU
mEpxrSoi0XS4EIgAGvKK5XP+ixvGBr7q/csgSEW9QlKCoUd8SyVimJ8j7Rcjeiv9
7vpv+7HgvsZWccHvQBd/AHIguoKN8p7s/kBSikFcKi+Oak9jmSOGNRKH0Ox0NasJ
AjUxLckkMtxhauXHtn5NBEBVnvVMbQ1xZPpFe+HCEnZXrjB39NUhbGWopBrc1/g4
5kUAV8XewEn+4YecQKe3zctoyvdiB10GH9MRv5STTC5pB/j++cfzKLX5K71eNOjT
V2Pfdx//tJq61iZP7I47rdbH5UjuTYqqkcDm4MpNJwNJ6H5NdgYb7lyojAXfXeHF
xHJ+6Y1BlvoEpA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:35 2025 by rpki-client