Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: uku/J+pFBjZ0qahfOuKTkBJ2x3/kyDmACA4lopZJ4Ug=
Subject key identifier: B0:AF:95:E8:85:A4:EE:5B:16:61:EA:B6:95:36:A4:7A:25:9D:BF:D1
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 019A4E18ECB70249A6145E4136600864486A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: dc2Txy7Sa3F5jb3sPdQaS+2dlzJ0qIQYaDYkxSJGwNc=)
2: qHh2dMf6gzsBLZi2QJoOFRMxXUE.roa (hash: +vCZjhtO1NUwTGmpJoWATWE7GuZBiydhqPS4mtxNcUM=)
3: xEEfHzO6g6rZeT9FwkUuiWjw_Xw.roa (hash: 0+Wkhje+So8WuPHD5PcbqywDfHJV+b9Sf51efUGfd24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ec:b7:02:49:a6:14:5e:41:36:60:08:64:48:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=b0af95e885a4ee5b1661eab69536a47a259dbfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:c0:9d:1e:63:36:47:b0:7b:f9:65:42:65:
50:8b:26:15:d6:54:c3:25:dc:50:d1:56:37:82:f0:
5c:77:5f:ce:a7:88:fd:1d:9b:9b:84:55:f3:e9:c0:
c1:2f:28:de:71:ca:d6:1f:53:9f:0a:9e:c7:91:e7:
7e:11:36:b9:48:fd:24:e9:46:68:b2:b8:a0:4e:53:
0c:6e:bf:fc:1e:2d:3f:42:c0:1a:4b:10:f1:75:8d:
2a:80:93:c1:b1:ba:df:52:ca:67:12:32:89:27:80:
16:44:8a:26:99:b3:3d:67:30:f3:2e:ef:be:77:68:
9b:98:ed:8f:ad:c3:f4:a7:d3:b4:9e:67:9a:14:bb:
52:5c:6a:5c:6e:98:0d:fc:7a:0a:97:f8:aa:e2:44:
55:ff:ff:e7:61:e1:80:c5:5f:d5:7e:6c:0f:20:eb:
d5:c4:d5:04:80:7c:08:b0:44:82:a0:a4:6f:26:4d:
3c:66:c8:12:52:5c:2a:5f:fd:0e:58:6c:9a:05:3d:
ea:1a:10:11:98:fa:71:d6:de:f2:3c:c8:13:a5:71:
bd:03:8e:5a:f6:a2:40:2a:2f:d6:15:97:d8:ee:53:
ed:c3:3a:7c:a0:3d:61:d8:7c:aa:88:7a:91:5e:10:
70:0c:62:ac:50:aa:63:e1:fe:fd:0d:ae:46:2b:c0:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AF:95:E8:85:A4:EE:5B:16:61:EA:B6:95:36:A4:7A:25:9D:BF:D1
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e8:31:42:a1:2e:6a:8e:b2:ca:20:5f:6f:bc:4d:9b:24:fe:
fa:a2:ca:f1:68:1a:1f:7d:6e:fe:b7:13:e4:2d:9b:ec:10:48:
11:89:ca:15:a8:07:33:1c:ec:bd:05:fb:c3:cb:56:87:72:3e:
54:c8:a0:da:2c:d2:86:e1:8d:a9:cf:2d:0a:0e:4f:e8:87:16:
40:f7:5a:d3:f4:01:b3:87:f0:62:67:a7:d3:a3:2a:d6:cd:b7:
db:f9:f3:3c:05:27:fd:68:1b:17:66:d3:ac:a8:7d:f2:30:56:
49:fd:2f:7f:a7:7c:1f:65:70:56:35:b3:56:8e:2b:4a:6a:f4:
c8:47:82:15:1a:91:89:5e:6c:db:c1:4e:7e:03:98:21:d6:42:
11:82:b8:ad:6e:a9:93:f7:23:1d:3f:5b:7c:0b:6f:c7:2b:7e:
6b:88:cc:7e:e4:37:24:bc:86:1e:9e:29:36:59:a0:df:df:34:
ef:45:f6:b7:66:ff:db:23:fc:45:50:f9:aa:60:c2:70:fb:72:
7c:90:52:f1:d4:22:da:f0:6b:f5:79:6a:ca:ec:8e:c9:0b:18:
85:96:c0:f3:69:14:8a:c6:ae:d8:b6:12:a6:19:66:1e:30:b7:
1b:fc:b5:fc:ca:dd:79:d2:00:9d:f5:dc:0d:13:6c:64:03:71:
89:72:88:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGOy3AkmmFF5BNmAIZEhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZTEwZGFjMWY3NzNjNTVhMjQ0NzUzMzQ2NzE5ZTg5OWY0
ZDQ0MzIwHhcNMjUxMTA0MDkwMDQ3WhcNMjUxMTA1MDkwMDQ3WjAzMTEwLwYDVQQD
EyhiMGFmOTVlODg1YTRlZTViMTY2MWVhYjY5NTM2YTQ3YTI1OWRiZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/fAnR5jNkewe/llQmVQiyYV1lTD
JdxQ0VY3gvBcd1/Op4j9HZubhFXz6cDBLyjeccrWH1OfCp7Hked+ETa5SP0k6UZo
srigTlMMbr/8Hi0/QsAaSxDxdY0qgJPBsbrfUspnEjKJJ4AWRIommbM9ZzDzLu++
d2ibmO2PrcP0p9O0nmeaFLtSXGpcbpgN/HoKl/iq4kRV///nYeGAxV/VfmwPIOvV
xNUEgHwIsESCoKRvJk08ZsgSUlwqX/0OWGyaBT3qGhARmPpx1t7yPMgTpXG9A45a
9qJAKi/WFZfY7lPtwzp8oD1h2HyqiHqRXhBwDGKsUKpj4f79Da5GK8DDgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCvleiFpO5bFmHqtpU2pHolnb/RMB8GA1UdIwQY
MBaAFGHhDawfdzxVokR1M0ZxnomfTUQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQt
NmRiM2NhZWY3M2Q5LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84NWVmMzUtNjQ3YS00MTcyLThjNjQtNmRiM2NhZWY3M2Q5
LzEvWWVFTnJCOTNQRldpUkhVelJuR2VpWjlOUkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOgxQqEu
ao6yyiBfb7xNmyT++qLK8WgaH31u/rcT5C2b7BBIEYnKFagHMxzsvQX7w8tWh3I+
VMig2izShuGNqc8tCg5P6IcWQPda0/QBs4fwYmen06Mq1s232/nzPAUn/WgbF2bT
rKh98jBWSf0vf6d8H2VwVjWzVo4rSmr0yEeCFRqRiV5s28FOfgOYIdZCEYK4rW6p
k/cjHT9bfAtvxyt+a4jMfuQ3JLyGHp4pNlmg398070X2t2b/2yP8RVD5qmDCcPty
fJBS8dQi2vBr9XlqyuyOyQsYhZbA82kUisau2LYSphlmHjC3G/y1/MrdedIAnfXc
DRNsZANxiXKIUg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:50 2025 by rpki-client