Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
File: yBi-GcEJgPFbze4HZpAHhJGoqiE.mft (raw, json)
Hash identifier: lAhAuksdFIot7roxEnH6v7qvIyrA1BaYcq79DrIi61Y=
Subject key identifier: CF:45:52:8F:76:E2:64:FE:CC:37:22:6D:63:9A:05:FE:DB:D6:05:2C
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Certificate issuer: /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial: 019A4DAA691D1167A7345F33F4E5123E691D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
Manifest number: 0D3A
Signing time: Tue 04 Nov 2025 07:00:04 +0000
Manifest this update: Tue 04 Nov 2025 07:00:04 +0000
Manifest next update: Wed 05 Nov 2025 07:00:04 +0000
Files and hashes: 1: gZMQxr61w0P4Si-B6lBsVj_b8vM.roa (hash: 3Vc/pW8ygtdQIimX5iqQ/MSW6PLhJ2nbGCIzRJsZshI=)
2: yBi-GcEJgPFbze4HZpAHhJGoqiE.crl (hash: iK/ayfv8giqDjt/G3R3lVYhzAVOanEfGrOsVvWi7UVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:69:1d:11:67:a7:34:5f:33:f4:e5:12:3e:69:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
Validity
Not Before: Nov 4 07:00:04 2025 GMT
Not After : Nov 5 07:00:04 2025 GMT
Subject: CN=cf45528f76e264fecc37226d639a05fedbd6052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:3f:15:fa:89:f1:c8:af:05:08:bc:50:07:
17:b6:97:a1:0f:d6:7d:61:ec:c0:be:c9:5c:a9:e2:
87:06:64:57:dc:93:5c:8c:9f:79:43:fd:6d:95:ff:
78:1f:ce:14:af:37:16:1a:6a:6e:e9:8d:f0:e7:f4:
b4:d4:60:21:dd:67:50:24:13:9e:46:69:01:93:70:
7f:f6:c5:91:2f:02:f3:10:df:df:2d:4c:bb:3b:12:
07:e3:53:64:29:78:93:f1:ca:16:e9:da:8b:9f:f6:
bb:3d:64:f2:96:70:1a:e6:83:17:94:7e:50:48:b2:
f9:9a:61:fe:14:41:fc:6f:fc:0b:6f:e4:9d:3c:cd:
a4:67:2d:76:1f:7d:38:db:85:48:8c:e7:eb:9f:0c:
dc:44:86:bb:14:37:b6:bc:ce:86:6a:62:9a:27:75:
b7:6f:59:af:c9:28:f3:6b:31:5c:5e:f8:40:fa:dc:
03:c4:b0:93:f0:7b:03:ab:91:b0:33:55:e6:3e:f4:
27:70:1d:c8:cd:29:bc:1b:26:50:14:0f:6e:f6:f0:
a9:35:73:ac:68:a6:b7:6b:48:ad:b1:bb:b3:bb:06:
fe:8b:59:7a:cd:1f:07:8a:3e:50:a4:57:90:8f:0e:
0d:e5:ae:69:97:94:b2:86:e4:93:1d:bb:7d:b9:85:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:45:52:8F:76:E2:64:FE:CC:37:22:6D:63:9A:05:FE:DB:D6:05:2C
X509v3 Authority Key Identifier:
keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:41:ea:3c:53:87:d1:4e:42:f3:3d:d9:9a:b2:4a:55:1d:8f:
12:ea:4e:6e:82:bb:47:50:98:17:e4:74:75:88:b3:32:16:7c:
ac:63:2d:64:51:01:df:94:21:50:8c:bc:1a:16:f3:7f:89:ba:
97:46:46:ec:79:e7:84:95:14:8e:7e:7d:b1:0c:f3:9c:61:55:
41:0b:ef:af:c4:8a:9e:3a:c7:e3:0c:77:d1:81:b5:0b:cb:e7:
1a:42:5d:b7:b7:da:5c:ec:db:e1:50:4d:7d:0f:f8:20:7e:bd:
29:81:8f:5e:2e:14:96:41:f5:c5:ca:cd:7f:2a:99:32:f8:48:
c8:2b:b0:79:d6:b2:63:e2:95:62:cf:22:d3:e5:b3:e7:10:6e:
3c:34:ca:94:e7:a4:3e:50:b1:62:64:98:0a:ec:a5:3b:b5:1e:
b1:bf:90:ee:d9:0f:f4:65:e5:16:c7:b6:bc:4f:b2:92:0d:29:
cd:e9:87:a1:cd:d4:45:5d:ab:83:c8:7c:ca:21:ed:66:fa:1f:
db:03:51:ed:cc:1a:7c:1d:3e:d5:33:87:fc:68:92:8d:e0:9f:
63:33:9d:58:27:ed:b5:6c:8a:97:4c:ed:05:9e:b9:08:e7:02:
b2:43:33:d7:1f:20:8c:1f:6b:21:6d:e9:49:cb:b8:d5:72:b6:
5f:20:f0:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqmkdEWenNF8z9OUSPmkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MThiZTE5YzEwOTgwZjE1YmNkZWUwNzY2OTAwNzg0OTFh
OGFhMjEwHhcNMjUxMTA0MDcwMDA0WhcNMjUxMTA1MDcwMDA0WjAzMTEwLwYDVQQD
EyhjZjQ1NTI4Zjc2ZTI2NGZlY2MzNzIyNmQ2MzlhMDVmZWRiZDYwNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugY/FfqJ8civBQi8UAcXtpehD9Z9
YezAvslcqeKHBmRX3JNcjJ95Q/1tlf94H84UrzcWGmpu6Y3w5/S01GAh3WdQJBOe
RmkBk3B/9sWRLwLzEN/fLUy7OxIH41NkKXiT8coW6dqLn/a7PWTylnAa5oMXlH5Q
SLL5mmH+FEH8b/wLb+SdPM2kZy12H30424VIjOfrnwzcRIa7FDe2vM6GamKaJ3W3
b1mvySjzazFcXvhA+twDxLCT8HsDq5GwM1XmPvQncB3IzSm8GyZQFA9u9vCpNXOs
aKa3a0itsbuzuwb+i1l6zR8Hij5QpFeQjw4N5a5pl5SyhuSTHbt9uYWArwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9FUo924mT+zDcibWOaBf7b1gUsMB8GA1UdIwQY
MBaAFMgYvhnBCYDxW83uB2aQB4SRqKohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMt
NmM0NzE5YmNmOWVlLzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMtNmM0NzE5YmNmOWVl
LzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEHqPFOH
0U5C8z3ZmrJKVR2PEupOboK7R1CYF+R0dYizMhZ8rGMtZFEB35QhUIy8Ghbzf4m6
l0ZG7HnnhJUUjn59sQzznGFVQQvvr8SKnjrH4wx30YG1C8vnGkJdt7faXOzb4VBN
fQ/4IH69KYGPXi4UlkH1xcrNfyqZMvhIyCuwedayY+KVYs8i0+Wz5xBuPDTKlOek
PlCxYmSYCuylO7Uesb+Q7tkP9GXlFse2vE+ykg0pzemHoc3URV2rg8h8yiHtZvof
2wNR7cwafB0+1TOH/GiSjeCfYzOdWCfttWyKl0ztBZ65COcCskMz1x8gjB9rIW3p
Scu41XK2XyDw0w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:20 2025 by rpki-client