Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
File: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft (raw, json)
Hash identifier: OUv/Ux+ZqJ+3j/piFKMQycv8WwDqyPg6iUlYcjnplZY=
Subject key identifier: 04:CE:02:D9:CB:84:94:2B:8A:E7:D9:AE:82:DF:D0:4D:86:9C:2C:1B
Authority key identifier: 60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
Certificate issuer: /CN=600b113e062d17ea230806b34a21deb5627b6774
Certificate serial: 019A50E3F2596D9D9ADE7F22E8044B51E107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
Manifest number: 138B
Signing time: Tue 04 Nov 2025 22:01:47 +0000
Manifest this update: Tue 04 Nov 2025 22:01:47 +0000
Manifest next update: Wed 05 Nov 2025 22:01:47 +0000
Files and hashes: 1: YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl (hash: eofA8wkYcJP/cd4PaXw5MCOrA/nnBiZl54Ui56ZqPIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:f2:59:6d:9d:9a:de:7f:22:e8:04:4b:51:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600b113e062d17ea230806b34a21deb5627b6774
Validity
Not Before: Nov 4 22:01:47 2025 GMT
Not After : Nov 5 22:01:47 2025 GMT
Subject: CN=04ce02d9cb84942b8ae7d9ae82dfd04d869c2c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:f3:02:b3:3e:af:42:f8:b2:d2:d1:54:a1:
7a:a3:a5:54:80:56:8a:8d:39:f5:59:58:03:8d:43:
ce:7b:6b:fc:70:0f:a5:3a:81:c3:9b:b4:62:23:36:
a7:62:a8:9f:59:2f:04:1d:c5:6e:46:6f:b2:84:c8:
15:8c:9a:fb:6d:9b:4f:f7:4b:6c:9a:f1:4b:5c:2c:
c3:07:ce:06:c2:c0:b7:f2:8f:ba:78:20:1d:53:ce:
58:dd:fa:01:18:b6:35:47:25:78:41:ae:5f:a5:9c:
fc:5e:d0:1b:88:d0:48:39:04:0c:9f:64:04:86:99:
db:0d:ca:1c:fc:30:f7:5c:7e:63:44:b5:9a:0d:5f:
9f:83:b3:3e:ac:40:3d:1c:da:a8:ca:5e:b8:6d:fb:
86:4b:dd:e1:14:5e:36:fb:be:94:3b:29:b1:90:6e:
74:ed:b1:d0:26:0a:a6:5e:d4:69:d2:1a:5b:09:77:
0d:9a:bb:9d:d5:2f:c5:53:15:33:8c:84:65:d6:29:
80:e7:1a:6a:a7:6f:6c:78:ea:0c:bf:ed:38:8b:85:
b2:7e:61:bb:53:ac:c6:24:53:45:89:a7:b9:f9:c8:
86:71:05:0f:3b:da:d4:48:3d:de:e3:03:c9:b7:27:
0d:9f:1d:de:8b:9e:7a:bf:cc:5d:2c:dd:a2:e1:3f:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CE:02:D9:CB:84:94:2B:8A:E7:D9:AE:82:DF:D0:4D:86:9C:2C:1B
X509v3 Authority Key Identifier:
keyid:60:0B:11:3E:06:2D:17:EA:23:08:06:B3:4A:21:DE:B5:62:7B:67:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/14c8c5-9af5-41b0-9917-a0da45299c6e/1/YAsRPgYtF-ojCAazSiHetWJ7Z3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cd:f6:dc:9a:1d:9c:26:44:fc:7f:5b:c7:d7:e8:1d:85:e3:
b5:0c:41:df:54:87:72:e1:0c:03:ab:67:99:46:05:eb:92:61:
f7:50:3f:cf:5f:75:4e:32:f8:cc:d2:55:b4:34:40:3f:7f:7b:
21:87:d0:d0:14:63:27:9c:0f:f9:15:93:f8:20:05:47:b8:f1:
c5:45:e0:d8:cb:3d:09:81:a4:bd:90:21:f8:af:a8:97:a2:08:
97:c5:b2:49:56:22:66:30:e7:98:ad:8a:9a:b6:34:f4:84:c5:
ab:e4:74:93:06:fb:90:0f:c7:d9:6c:89:3d:6f:58:b1:52:d7:
c2:d1:70:ea:35:a8:d6:7b:4e:9d:fc:f1:fd:f5:24:3a:cf:a4:
f4:76:64:85:b9:94:d6:11:60:71:74:7a:26:05:7a:6d:58:77:
08:aa:e5:d4:cb:ab:b4:01:4c:85:c1:b9:f4:02:d3:f2:7f:64:
e7:7e:a8:ee:fb:cc:0f:98:ba:83:15:8b:08:42:dc:31:db:22:
56:2c:a6:fc:10:24:47:89:2d:b3:55:74:d1:18:40:28:5f:aa:
14:86:9a:15:16:14:cb:51:d5:2d:1b:1d:68:a6:ac:9e:38:6c:
ce:cb:3e:85:0d:55:64:61:82:47:12:bd:d0:cd:70:3a:83:7b:
0e:35:d0:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4/JZbZ2a3n8i6ARLUeEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGIxMTNlMDYyZDE3ZWEyMzA4MDZiMzRhMjFkZWI1NjI3
YjY3NzQwHhcNMjUxMTA0MjIwMTQ3WhcNMjUxMTA1MjIwMTQ3WjAzMTEwLwYDVQQD
EygwNGNlMDJkOWNiODQ5NDJiOGFlN2Q5YWU4MmRmZDA0ZDg2OWMyYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaTzArM+r0L4stLRVKF6o6VUgFaK
jTn1WVgDjUPOe2v8cA+lOoHDm7RiIzanYqifWS8EHcVuRm+yhMgVjJr7bZtP90ts
mvFLXCzDB84GwsC38o+6eCAdU85Y3foBGLY1RyV4Qa5fpZz8XtAbiNBIOQQMn2QE
hpnbDcoc/DD3XH5jRLWaDV+fg7M+rEA9HNqoyl64bfuGS93hFF42+76UOymxkG50
7bHQJgqmXtRp0hpbCXcNmrud1S/FUxUzjIRl1imA5xpqp29seOoMv+04i4WyfmG7
U6zGJFNFiae5+ciGcQUPO9rUSD3e4wPJtycNnx3ei556v8xdLN2i4T/8fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATOAtnLhJQriufZroLf0E2GnCwbMB8GA1UdIwQY
MBaAFGALET4GLRfqIwgGs0oh3rVie2d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xNGM4YzUtOWFmNS00MWIwLTk5MTct
YTBkYTQ1Mjk5YzZlLzEvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xNGM4YzUtOWFmNS00MWIwLTk5MTctYTBkYTQ1Mjk5YzZl
LzEvWUFzUlBnWXRGLW9qQ0FhelNpSGV0V0o3WjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8323Jod
nCZE/H9bx9foHYXjtQxB31SHcuEMA6tnmUYF65Jh91A/z191TjL4zNJVtDRAP397
IYfQ0BRjJ5wP+RWT+CAFR7jxxUXg2Ms9CYGkvZAh+K+ol6IIl8WySVYiZjDnmK2K
mrY09ITFq+R0kwb7kA/H2WyJPW9YsVLXwtFw6jWo1ntOnfzx/fUkOs+k9HZkhbmU
1hFgcXR6JgV6bVh3CKrl1MurtAFMhcG59ALT8n9k536o7vvMD5i6gxWLCELcMdsi
Viym/BAkR4kts1V00RhAKF+qFIaaFRYUy1HVLRsdaKasnjhszss+hQ1VZGGCRxK9
0M1wOoN7DjXQ3g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:26 2025 by rpki-client