Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json)
Hash identifier: AZ/NiFpmKjQ9W3RCoQ9OkKUuOe31RalQbIg9rujyQX4=
Subject key identifier: 4A:01:1D:86:05:23:56:DF:72:C1:4A:61:FD:5C:43:33:2D:28:95:1D
Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Certificate serial: 019A4F993D119001E94047FB410A6274287F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
Manifest number: 139F
Signing time: Tue 04 Nov 2025 16:00:33 +0000
Manifest this update: Tue 04 Nov 2025 16:00:33 +0000
Manifest next update: Wed 05 Nov 2025 16:00:33 +0000
Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: nugorcpL4PKbx8qTAnjGALnfEg7XumqiyQH1NRXBA2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3d:11:90:01:e9:40:47:fb:41:0a:62:74:28:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956
Validity
Not Before: Nov 4 16:00:33 2025 GMT
Not After : Nov 5 16:00:33 2025 GMT
Subject: CN=4a011d86052356df72c14a61fd5c43332d28951d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:ed:fc:6d:19:bb:e7:47:2a:a1:87:f5:96:
87:bc:0a:1a:a5:cb:bf:a5:e7:74:3d:1c:41:60:f8:
16:ad:9b:1c:cc:cf:b2:36:c7:03:bd:09:d9:a9:a2:
34:7c:db:f2:12:0e:58:53:1e:90:87:46:54:cc:9c:
59:8a:64:f8:70:74:1e:af:b9:8b:51:06:ed:e2:ba:
e3:75:62:8c:b2:0a:ac:34:46:f0:36:6e:a6:a9:6d:
21:53:78:76:0f:48:10:6a:84:03:b9:42:80:3e:bd:
60:f0:27:32:17:ce:70:b4:6e:30:d1:7b:06:73:47:
41:4b:8a:fb:1e:73:5f:1c:96:ad:c5:ca:2d:bb:0d:
2a:2e:9c:5b:98:07:72:64:62:b2:eb:f4:08:4c:92:
5a:a6:76:34:93:57:47:67:10:d5:42:fc:b7:fc:11:
c1:a1:76:60:d9:5e:f0:a6:b1:19:06:de:e2:c1:80:
85:4d:70:85:0f:0e:49:75:8a:e6:21:bd:7a:5d:a9:
72:f5:b6:fe:fe:f3:02:de:93:8d:65:9f:ec:b7:9b:
2b:82:99:7b:b9:2d:5d:93:c3:65:fd:43:30:c9:f2:
d1:3f:3a:43:94:ce:18:df:88:70:5b:f6:6c:13:a7:
01:4d:01:15:3d:3e:26:ae:6f:c3:02:b8:51:3a:a0:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:01:1D:86:05:23:56:DF:72:C1:4A:61:FD:5C:43:33:2D:28:95:1D
X509v3 Authority Key Identifier:
keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e8:fd:15:c1:d9:51:ea:f1:5b:5d:52:83:41:18:9d:5e:52:
d5:ee:36:48:24:ee:45:3a:e4:9f:e0:ed:42:42:6f:e7:76:56:
88:22:dd:d4:3d:2d:9c:59:fa:ad:cd:48:f4:0f:e9:22:3d:a6:
97:26:87:d9:10:31:b3:b4:6e:2d:ae:cf:99:62:c3:fc:ec:9f:
54:1e:5d:11:6a:77:f2:f0:68:56:6e:d5:2d:14:14:5f:e5:57:
44:5c:5e:c1:89:c8:64:b1:fd:97:bc:e0:06:9b:09:85:38:f2:
d5:e2:1d:55:35:bb:51:62:36:af:db:e5:c7:43:7a:ad:f4:2a:
cf:df:35:b4:48:c8:c4:3b:82:1f:e8:84:8f:ff:4b:3f:05:2f:
08:4a:69:d4:bf:85:aa:87:45:b5:fd:98:bf:9f:71:0a:54:32:
e8:e8:7f:20:99:71:ed:25:3c:54:36:f5:b2:f4:cb:47:f3:5c:
86:3c:73:68:cb:b7:12:c6:2a:20:ea:be:42:28:13:28:b4:82:
73:ba:11:7f:8a:d4:da:79:57:81:79:95:40:84:00:b2:70:f2:
b4:3c:6d:69:1e:b3:48:1b:d6:42:1e:7a:dc:a5:e9:cc:01:73:
6b:4a:f7:69:39:1b:70:14:e8:dd:ce:8e:9a:86:e9:1b:d8:a4:
69:22:bc:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmT0RkAHpQEf7QQpidCh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMDE2NWZiZmE4ZTI0NDg5YzU1NTNkMWI4NWVjNTAxN2Vm
ZGY5NTYwHhcNMjUxMTA0MTYwMDMzWhcNMjUxMTA1MTYwMDMzWjAzMTEwLwYDVQQD
Eyg0YTAxMWQ4NjA1MjM1NmRmNzJjMTRhNjFmZDVjNDMzMzJkMjg5NTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAbt/G0Zu+dHKqGH9ZaHvAoapcu/
ped0PRxBYPgWrZsczM+yNscDvQnZqaI0fNvyEg5YUx6Qh0ZUzJxZimT4cHQer7mL
UQbt4rrjdWKMsgqsNEbwNm6mqW0hU3h2D0gQaoQDuUKAPr1g8CcyF85wtG4w0XsG
c0dBS4r7HnNfHJatxcotuw0qLpxbmAdyZGKy6/QITJJapnY0k1dHZxDVQvy3/BHB
oXZg2V7wprEZBt7iwYCFTXCFDw5JdYrmIb16Xaly9bb+/vMC3pONZZ/st5srgpl7
uS1dk8Nl/UMwyfLRPzpDlM4Y34hwW/ZsE6cBTQEVPT4mrm/DArhROqAxdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoBHYYFI1bfcsFKYf1cQzMtKJUdMB8GA1UdIwQY
MBaAFGIBZfv6jiRInFVT0bhexQF+/flWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81YjI4ZWUtMDQ5Mi00ODZmLTk0MmEt
OTJjMWIyZDEzNTkyLzEvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi81YjI4ZWUtMDQ5Mi00ODZmLTk0MmEtOTJjMWIyZDEzNTky
LzEvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOj9FcHZ
UerxW11Sg0EYnV5S1e42SCTuRTrkn+DtQkJv53ZWiCLd1D0tnFn6rc1I9A/pIj2m
lyaH2RAxs7RuLa7PmWLD/OyfVB5dEWp38vBoVm7VLRQUX+VXRFxewYnIZLH9l7zg
BpsJhTjy1eIdVTW7UWI2r9vlx0N6rfQqz981tEjIxDuCH+iEj/9LPwUvCEpp1L+F
qodFtf2Yv59xClQy6Oh/IJlx7SU8VDb1svTLR/NchjxzaMu3EsYqIOq+QigTKLSC
c7oRf4rU2nlXgXmVQIQAsnDytDxtaR6zSBvWQh563KXpzAFza0r3aTkbcBTo3c6O
mobpG9ikaSK8Rg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:54 2025 by rpki-client