Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: p22xv3KfUXWARg6SGE1YAFRkTMxWPuKmfiBIMn0OcSI=
Subject key identifier: E3:27:56:F4:EF:01:4E:22:E6:59:D5:D9:DA:3D:90:3E:65:48:0C:FA
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 019A4E4F7C0705236077FE894013022C1988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 11B0
Signing time: Tue 04 Nov 2025 10:00:23 +0000
Manifest this update: Tue 04 Nov 2025 10:00:23 +0000
Manifest next update: Wed 05 Nov 2025 10:00:23 +0000
Files and hashes: 1: TUukLx44kjF0H_lfWyE2v7MimXs.roa (hash: hh6d1KEKUecIQgdhGgz8Bqi6uh15mWOy43tdVfLxrHg=)
2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: ZXqVXsBA4zWUJR/489Ro+dK54ovRJ7eGziRf5wQ8mLw=)
3: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7c:07:05:23:60:77:fe:89:40:13:02:2c:19:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Nov 4 10:00:23 2025 GMT
Not After : Nov 5 10:00:23 2025 GMT
Subject: CN=e32756f4ef014e22e659d5d9da3d903e65480cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:50:c6:6e:07:07:b8:69:8a:3a:e8:39:5a:
9c:30:59:1e:6e:64:67:18:0c:a9:41:40:15:9d:de:
37:a3:30:bf:fa:0b:c7:93:91:3f:14:ae:50:77:e8:
d1:ee:de:19:a4:5d:2d:19:2e:a3:ca:c5:53:a0:bc:
28:15:c1:8e:54:e9:2c:5b:3f:7c:25:40:74:d8:63:
05:2c:09:03:4c:dd:79:9f:56:43:9b:0f:a7:66:81:
6f:79:0b:c7:7f:16:01:80:82:8c:cc:62:f8:d0:28:
36:d0:30:ab:7f:fc:07:35:1a:a2:1c:be:d0:e9:62:
48:d6:5d:51:32:d4:59:55:60:b2:81:f7:48:07:90:
07:c5:21:e8:e8:58:70:4c:fb:de:45:87:6f:bd:4c:
6f:20:31:bd:a8:59:b7:4f:2f:f0:fc:69:25:57:28:
91:14:ed:89:77:97:10:dd:73:bb:dd:53:2a:9d:2f:
f6:2a:97:7a:f7:32:13:48:1e:07:17:e8:62:bc:bd:
43:53:72:9b:a9:0f:b1:4e:be:60:df:3c:58:5f:c1:
54:ac:28:de:9c:f3:0b:32:fa:d2:bb:9b:7c:5f:1d:
2a:73:a9:1a:3d:9f:11:0e:44:91:48:0a:a5:4d:74:
e4:34:6c:52:1f:9b:d1:41:dd:fb:f9:d3:41:d8:02:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:27:56:F4:EF:01:4E:22:E6:59:D5:D9:DA:3D:90:3E:65:48:0C:FA
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a7:66:59:37:20:aa:f5:40:67:a6:03:37:09:18:b1:9c:34:
c7:40:57:32:a8:00:85:d3:fb:9b:8b:a1:24:84:39:a2:74:7b:
43:a9:fc:61:15:18:f8:44:01:d3:19:d6:12:3e:41:05:7a:c1:
6f:76:ad:a8:05:24:a8:68:e6:1a:4c:a2:f0:e4:d4:d5:00:17:
51:c2:8e:9e:fd:aa:8e:29:68:a8:82:c9:86:c1:53:67:51:8e:
24:18:fb:c5:e6:72:21:3d:bc:76:10:f5:8f:59:95:8e:13:41:
f1:ee:0e:2f:5b:59:dc:bf:ad:6d:ed:0f:6e:00:c3:06:d5:13:
81:10:d4:53:f3:3a:6d:d5:47:c6:cf:52:51:b3:6d:6a:a2:09:
5e:06:0d:a4:46:52:68:d7:45:96:f7:3c:59:b5:07:3c:92:d5:
9f:65:20:2c:7b:7d:22:43:1b:0e:8b:bf:7d:26:64:10:18:e8:
b9:d2:4e:dc:a5:60:8f:e2:dc:cc:9d:e5:a3:23:ea:c6:4c:d6:
1c:67:3c:21:5b:b5:14:d3:8a:b1:f7:bc:4b:a5:f8:55:2f:cd:
ba:a3:9b:53:f9:39:83:0a:d4:80:ed:ae:a4:fd:2d:77:c7:95:
75:49:e4:e6:d9:ff:43:e9:52:60:03:50:e7:3d:71:c5:2f:03:
e8:ac:d1:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT3wHBSNgd/6JQBMCLBmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDE4YjMxMmUzNTNlNzhmYThlZTVmODBkMzZmNzQxY2Rj
ZGUzYWEwHhcNMjUxMTA0MTAwMDIzWhcNMjUxMTA1MTAwMDIzWjAzMTEwLwYDVQQD
EyhlMzI3NTZmNGVmMDE0ZTIyZTY1OWQ1ZDlkYTNkOTAzZTY1NDgwY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw89Qxm4HB7hpijroOVqcMFkebmRn
GAypQUAVnd43ozC/+gvHk5E/FK5Qd+jR7t4ZpF0tGS6jysVToLwoFcGOVOksWz98
JUB02GMFLAkDTN15n1ZDmw+nZoFveQvHfxYBgIKMzGL40Cg20DCrf/wHNRqiHL7Q
6WJI1l1RMtRZVWCygfdIB5AHxSHo6FhwTPveRYdvvUxvIDG9qFm3Ty/w/GklVyiR
FO2Jd5cQ3XO73VMqnS/2Kpd69zITSB4HF+hivL1DU3KbqQ+xTr5g3zxYX8FUrCje
nPMLMvrSu5t8Xx0qc6kaPZ8RDkSRSAqlTXTkNGxSH5vRQd37+dNB2AJI7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMnVvTvAU4i5lnV2do9kD5lSAz6MB8GA1UdIwQY
MBaAFGLRizEuNT54+o7l+A0290HNzeOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUt
NzMyMjcyMDIzZWMyLzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUtNzMyMjcyMDIzZWMy
LzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKdmWTcg
qvVAZ6YDNwkYsZw0x0BXMqgAhdP7m4uhJIQ5onR7Q6n8YRUY+EQB0xnWEj5BBXrB
b3atqAUkqGjmGkyi8OTU1QAXUcKOnv2qjiloqILJhsFTZ1GOJBj7xeZyIT28dhD1
j1mVjhNB8e4OL1tZ3L+tbe0PbgDDBtUTgRDUU/M6bdVHxs9SUbNtaqIJXgYNpEZS
aNdFlvc8WbUHPJLVn2UgLHt9IkMbDou/fSZkEBjoudJO3KVgj+LczJ3loyPqxkzW
HGc8IVu1FNOKsfe8S6X4VS/NuqObU/k5gwrUgO2upP0td8eVdUnk5tn/Q+lSYANQ
5z1xxS8D6KzRAA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:21 2025 by rpki-client