Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: rLJr+czl5EThFpI6l360zmuOLuhIACYSN/AWQsV5SGk=
Subject key identifier: 20:62:51:69:EA:A5:CC:BB:B0:19:29:07:EA:BA:5F:C8:6D:26:51:96
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019A515088F1958B9D65C5FB0E5806AB5276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1438
Signing time: Wed 05 Nov 2025 00:00:23 +0000
Manifest this update: Wed 05 Nov 2025 00:00:23 +0000
Manifest next update: Thu 06 Nov 2025 00:00:23 +0000
Files and hashes: 1: PPDcjsjoszwTm8EI4XbGMJZozgI.roa (hash: 7Lx0Qx1q5+o5Xi1eI3iJhMLtFTgxseeHLhiTQPfBYeo=)
2: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: Ecvd+LSWxZ1+88K/RGxQkZxfSOXq5CVrmYU9l1VsdNg=)
3: tedYlf87S78MkPQe8A70plM_Ngw.roa (hash: R2UtbWccTfdmsOnpPUNeRj+D5AnPyUqgeXRoHV5PeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:88:f1:95:8b:9d:65:c5:fb:0e:58:06:ab:52:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Nov 5 00:00:23 2025 GMT
Not After : Nov 6 00:00:23 2025 GMT
Subject: CN=20625169eaa5ccbbb0192907eaba5fc86d265196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:50:b2:58:7c:f8:8a:44:a1:68:9a:b3:1e:
f9:33:9f:03:7f:69:f3:e3:3b:20:30:d4:85:f7:3e:
f5:1d:bc:51:e6:c0:48:18:ec:37:7b:eb:38:6f:f5:
b9:3c:bb:b7:9f:4b:ed:1b:4e:a0:a3:53:af:d7:4d:
ba:34:8a:52:07:62:49:99:39:b1:37:94:09:5d:97:
9d:43:35:c0:f2:48:3d:34:a9:d3:28:f2:79:8d:3b:
c5:0b:49:40:7a:3f:78:0e:5f:0e:dc:ae:db:90:19:
7a:42:d6:7a:2c:db:63:1c:ee:a5:2e:d4:58:97:1c:
a2:31:88:96:4c:b7:f5:ef:f2:74:ac:b5:e9:38:9d:
01:b8:80:20:89:92:d6:b4:06:26:9e:7c:e9:3d:27:
aa:4c:b1:60:5e:ac:9e:36:df:28:21:eb:80:c5:0a:
fc:1e:92:63:0f:3d:e1:d4:bc:f8:4c:64:b6:d9:c4:
23:33:f6:18:43:c4:df:07:08:47:72:42:be:19:7e:
23:40:49:68:e3:76:1c:b7:2b:fd:b1:b2:bb:c7:55:
bc:f1:28:bf:73:3d:c3:e6:09:d1:0d:56:0b:3a:07:
78:1f:84:9b:7b:80:6f:da:91:bc:96:af:75:ff:95:
c3:dd:2a:2e:6f:46:78:cf:62:61:2c:b7:ae:66:d2:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:62:51:69:EA:A5:CC:BB:B0:19:29:07:EA:BA:5F:C8:6D:26:51:96
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5d:a1:c0:75:c5:da:db:c5:45:cb:01:26:f0:6e:f5:77:94:
65:ce:4c:78:52:48:55:6e:ae:dd:d4:91:0d:f0:8a:bc:54:4a:
a2:13:2a:10:5c:67:28:1f:fb:78:c2:a1:bf:3a:3b:00:ab:26:
6c:d4:66:9d:f4:c1:53:10:45:6e:4a:01:23:5d:67:fc:c0:ee:
35:9c:7b:f3:ee:c1:93:8c:dd:d1:3d:d8:5d:20:a2:c1:0c:c0:
d8:3f:ac:63:35:52:88:45:bf:f8:8c:10:85:34:06:3f:b3:a0:
4a:ba:2c:8e:84:b4:3c:ed:d1:88:40:be:71:90:07:56:b7:e3:
03:04:f1:51:d6:1e:d3:a2:ae:9b:d7:c2:0f:f7:69:05:e0:f7:
1d:d5:2e:b4:c7:95:32:90:38:c2:c6:4a:d2:a8:ff:88:49:e0:
94:54:ba:d6:59:1b:1e:a7:3f:01:39:b6:84:93:1b:15:a7:f4:
db:d4:7d:e7:0c:3e:b2:13:ab:fb:66:3e:c2:86:61:1c:25:b8:
ae:d6:57:6e:26:1d:80:7f:99:2b:c9:84:f2:b0:79:97:19:81:
c1:f5:d9:30:9e:e2:9d:53:c5:c7:1d:d6:c4:e5:d8:00:3a:58:
4a:64:10:98:53:5b:d2:19:a4:45:e7:79:56:6f:cd:ce:b8:e8:
5c:5c:a7:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUIjxlYudZcX7DlgGq1J2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGM0OTRmNTYxOTNiNGU5YWRmM2RiNzJlNGYwMTk3OGM1
ODdmMTgwHhcNMjUxMTA1MDAwMDIzWhcNMjUxMTA2MDAwMDIzWjAzMTEwLwYDVQQD
EygyMDYyNTE2OWVhYTVjY2JiYjAxOTI5MDdlYWJhNWZjODZkMjY1MTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy9Qslh8+IpEoWiasx75M58Df2nz
4zsgMNSF9z71HbxR5sBIGOw3e+s4b/W5PLu3n0vtG06go1Ov1026NIpSB2JJmTmx
N5QJXZedQzXA8kg9NKnTKPJ5jTvFC0lAej94Dl8O3K7bkBl6QtZ6LNtjHO6lLtRY
lxyiMYiWTLf17/J0rLXpOJ0BuIAgiZLWtAYmnnzpPSeqTLFgXqyeNt8oIeuAxQr8
HpJjDz3h1Lz4TGS22cQjM/YYQ8TfBwhHckK+GX4jQElo43Yctyv9sbK7x1W88Si/
cz3D5gnRDVYLOgd4H4Sbe4Bv2pG8lq91/5XD3Soub0Z4z2JhLLeuZtLBMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBiUWnqpcy7sBkpB+q6X8htJlGWMB8GA1UdIwQY
MBaAFGJMSU9WGTtOmt89ty5PAZeMWH8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2Mt
N2FhYjZlZjk1NWExLzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2MtN2FhYjZlZjk1NWEx
LzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACV2hwHXF
2tvFRcsBJvBu9XeUZc5MeFJIVW6u3dSRDfCKvFRKohMqEFxnKB/7eMKhvzo7AKsm
bNRmnfTBUxBFbkoBI11n/MDuNZx78+7Bk4zd0T3YXSCiwQzA2D+sYzVSiEW/+IwQ
hTQGP7OgSrosjoS0PO3RiEC+cZAHVrfjAwTxUdYe06Kum9fCD/dpBeD3HdUutMeV
MpA4wsZK0qj/iEnglFS61lkbHqc/ATm2hJMbFaf029R95ww+shOr+2Y+woZhHCW4
rtZXbiYdgH+ZK8mE8rB5lxmBwfXZMJ7inVPFxx3WxOXYADpYSmQQmFNb0hmkRed5
Vm/NzrjoXFynCw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:53 2025 by rpki-client