Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier: KRryFdzt6lRoDQkIWDdm6HEOWRsW50MWrItLVvyraf0=
Subject key identifier: 5F:0E:54:12:AA:F7:43:CA:C9:C3:FF:38:66:DA:09:8B:8F:E2:13:C8
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 019A50E2E5A19D27BE70A6D169F8D78A0A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number: 04B3
Signing time: Tue 04 Nov 2025 22:00:38 +0000
Manifest this update: Tue 04 Nov 2025 22:00:38 +0000
Manifest next update: Wed 05 Nov 2025 22:00:38 +0000
Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: t2+/M90rBbNx5BI2H26YGC+roDhhLEApFiLy8z45wUs=)
2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:e5:a1:9d:27:be:70:a6:d1:69:f8:d7:8a:0a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Nov 4 22:00:38 2025 GMT
Not After : Nov 5 22:00:38 2025 GMT
Subject: CN=5f0e5412aaf743cac9c3ff3866da098b8fe213c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:95:5a:5b:33:89:e7:95:89:be:ca:35:1a:
7c:76:4c:b6:b7:cf:8d:5f:43:1e:2a:31:06:2d:d1:
8f:a6:f5:31:53:bc:45:85:5c:8e:09:fc:8f:c3:1b:
5d:a6:dd:8e:3a:73:f4:2b:d7:66:c2:af:fc:00:ca:
c8:82:d1:e3:4d:8d:ce:73:e4:48:6b:cc:79:8c:a0:
52:d8:ee:b0:b5:77:3d:de:52:35:e1:ae:e4:5b:24:
9e:c6:e4:ae:2a:f2:ce:07:ab:99:e9:94:41:06:47:
82:1c:31:87:37:90:69:f8:e6:34:33:28:1f:08:b9:
33:e4:a0:40:ec:26:7c:88:a5:d5:3a:b7:ca:1e:77:
56:7a:f4:06:fd:bc:2b:b0:a0:c5:5f:15:70:64:fa:
26:90:b4:a4:ee:9f:d2:43:f8:e9:49:73:e9:85:91:
4c:68:9f:56:a7:ba:15:3a:ed:4a:6f:e0:67:3b:4e:
18:e6:8f:f4:c2:0f:8b:89:31:6c:13:b2:ad:f9:e3:
98:78:2f:cb:40:75:9e:7d:f4:5d:b1:17:db:32:1b:
1a:f7:25:08:25:c8:71:b1:7a:af:e6:a6:52:42:bb:
b7:ba:ca:a6:fc:3b:25:7d:16:5c:23:48:d5:63:f0:
aa:c1:05:8d:13:fe:3a:73:f8:83:d4:2d:54:11:fc:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0E:54:12:AA:F7:43:CA:C9:C3:FF:38:66:DA:09:8B:8F:E2:13:C8
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:52:e2:87:d6:f2:7c:2c:49:8c:a6:f1:4d:2d:21:21:26:2d:
cc:7d:7b:d1:76:a6:70:97:51:4c:a8:90:ff:d7:ee:37:35:9c:
c6:4a:db:59:ed:41:e1:9c:f4:1d:7c:44:3f:ea:4b:df:5b:80:
00:aa:35:6e:83:6e:e5:90:78:9d:19:fe:46:37:25:8f:ee:a8:
07:fd:3c:d8:96:84:b8:51:68:44:6c:55:5d:ef:75:33:34:9c:
18:47:8c:cb:d1:db:e6:bd:d6:30:45:db:d3:ff:a2:ba:a4:73:
b4:af:a9:6f:b1:d4:bc:16:26:99:24:c0:8c:d3:62:3e:33:74:
16:9f:7b:d6:1a:ba:27:34:4a:50:64:bf:ab:1c:d6:3e:1b:58:
c0:bc:58:fa:01:e4:55:47:55:de:80:71:4b:d3:43:72:13:21:
f4:da:43:5c:67:14:8b:27:90:35:f3:d3:35:80:c8:e1:55:be:
ae:bf:b4:28:16:2f:ff:9d:a3:f2:66:ab:14:47:e7:f7:07:dc:
10:be:ea:f9:bb:55:81:08:fd:2c:ea:5a:dc:fd:a5:a6:29:d7:
bd:f9:40:0a:97:dd:75:e4:3c:90:40:3c:d6:93:7a:cb:a6:cf:
46:1b:e6:9d:86:33:8e:b1:83:15:e4:7f:21:54:7c:21:52:ea:
bf:ac:04:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4uWhnSe+cKbRafjXigpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzdkMmZjYmQ0M2E1MWU1MzFiYzk4YmZhYjVlYWY3MTkw
MDkwYWYwHhcNMjUxMTA0MjIwMDM4WhcNMjUxMTA1MjIwMDM4WjAzMTEwLwYDVQQD
Eyg1ZjBlNTQxMmFhZjc0M2NhYzljM2ZmMzg2NmRhMDk4YjhmZTIxM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1KVWlszieeVib7KNRp8dky2t8+N
X0MeKjEGLdGPpvUxU7xFhVyOCfyPwxtdpt2OOnP0K9dmwq/8AMrIgtHjTY3Oc+RI
a8x5jKBS2O6wtXc93lI14a7kWySexuSuKvLOB6uZ6ZRBBkeCHDGHN5Bp+OY0Mygf
CLkz5KBA7CZ8iKXVOrfKHndWevQG/bwrsKDFXxVwZPomkLSk7p/SQ/jpSXPphZFM
aJ9Wp7oVOu1Kb+BnO04Y5o/0wg+LiTFsE7Kt+eOYeC/LQHWeffRdsRfbMhsa9yUI
JchxsXqv5qZSQru3usqm/DslfRZcI0jVY/CqwQWNE/46c/iD1C1UEfy/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8OVBKq90PKycP/OGbaCYuP4hPIMB8GA1UdIwQY
MBaAFGE30vy9Q6UeUxvJi/q16vcZAJCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYt
NzMyNjUzYzRmZTJjLzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYtNzMyNjUzYzRmZTJj
LzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVLih9by
fCxJjKbxTS0hISYtzH170XamcJdRTKiQ/9fuNzWcxkrbWe1B4Zz0HXxEP+pL31uA
AKo1boNu5ZB4nRn+Rjclj+6oB/082JaEuFFoRGxVXe91MzScGEeMy9Hb5r3WMEXb
0/+iuqRztK+pb7HUvBYmmSTAjNNiPjN0Fp971hq6JzRKUGS/qxzWPhtYwLxY+gHk
VUdV3oBxS9NDchMh9NpDXGcUiyeQNfPTNYDI4VW+rr+0KBYv/52j8marFEfn9wfc
EL7q+btVgQj9LOpa3P2lpinXvflACpfddeQ8kEA81pN6y6bPRhvmnYYzjrGDFeR/
IVR8IVLqv6wEYg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:46 2025 by rpki-client