Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
File: YoO20dhhAunt8qvdqnyTR6rHF8c.mft (raw, json)
Hash identifier: 7kOtjToZIFNdd8QCtyjoHsk0tEnP6SpX69/coj6xydM=
Subject key identifier: FC:B5:2B:43:85:C9:8A:11:0C:A1:0C:FF:40:35:B5:7B:CE:7B:33:5F
Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
Certificate issuer: /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Certificate serial: 019A4FD003694DA7975E6A5A491DDB5D53CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:23 +0000
Manifest this update: Tue 04 Nov 2025 17:00:23 +0000
Manifest next update: Wed 05 Nov 2025 17:00:23 +0000
Files and hashes: 1: FKwES05QXgv7GDIVYOX1rJUnQN0.roa (hash: q8y+Z4GqNRIr+efHEWQCbzvWoFlZ2bwXtIGJIqiojdY=)
2: IqcwUeOGcAnS-tBgjkUM-XNO3is.roa (hash: wn0T7F5N0/+0KEuMUe6YilItigsuYUK7JvlaTh+yZLw=)
3: YoO20dhhAunt8qvdqnyTR6rHF8c.crl (hash: sZwDAl125hXgy+J5PJUQJ5SfVqaO0YVbVSQYoaJ9Hbk=)
4: h-kICo84mpPHXctcS-vW02QdJxQ.roa (hash: YChUhS+6HZvQd+Isg9GWQNzRMqXToTsR0vsksCA2uaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:03:69:4d:a7:97:5e:6a:5a:49:1d:db:5d:53:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Validity
Not Before: Nov 4 17:00:23 2025 GMT
Not After : Nov 5 17:00:23 2025 GMT
Subject: CN=fcb52b4385c98a110ca10cff4035b57bce7b335f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:7f:61:fb:78:af:2f:dc:0c:aa:f9:22:e1:
09:9f:27:c6:0a:72:73:a2:4f:16:49:a4:b3:95:99:
54:04:5a:1a:c7:94:12:1b:7d:b3:06:bc:9e:79:ff:
5e:34:11:ed:00:e4:df:37:28:ce:00:05:50:ab:b2:
cd:a1:e6:ac:e5:c0:3a:ab:da:c3:7b:d9:be:93:8d:
54:af:69:ff:aa:fa:1b:77:8f:a4:f0:66:22:1f:0a:
7a:7e:28:2b:fe:6d:85:4f:b8:81:19:3c:2f:72:7e:
7f:98:2b:69:e1:c9:a5:5c:78:92:d1:a7:98:94:56:
23:0f:c4:c7:8c:e3:75:ae:e6:8c:1a:83:5b:c5:a2:
a6:e7:08:e5:43:ec:54:c6:bf:e7:90:2f:18:82:20:
7c:91:e8:40:e8:a5:dc:c0:64:61:e9:76:cf:6e:76:
77:18:39:cc:98:f5:f2:6c:3e:7b:6d:6a:43:cc:96:
2a:e4:b2:ef:00:94:ca:b4:07:53:7d:85:8d:3f:41:
c4:b1:8c:9a:87:89:af:de:79:ce:5e:5d:ea:bf:84:
5f:55:38:d8:43:69:0d:e6:81:e4:18:bc:c7:8a:ea:
69:85:f6:78:33:1b:8c:96:df:13:aa:26:50:81:7f:
53:e1:08:ad:28:06:8d:5e:d3:b6:86:2e:e5:c2:8d:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:2B:43:85:C9:8A:11:0C:A1:0C:FF:40:35:B5:7B:CE:7B:33:5F
X509v3 Authority Key Identifier:
keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:83:e8:c6:92:57:16:28:62:82:d8:95:37:e3:5d:27:08:bd:
20:a0:59:b4:30:66:e6:3b:01:15:5b:07:44:ab:d0:b1:dd:85:
dd:6f:c0:46:81:6b:6e:a6:9b:3d:a5:2b:d3:ce:62:b7:8d:35:
65:d7:f9:be:66:57:59:b9:e4:aa:09:92:19:05:6c:e2:82:77:
69:45:d1:66:d4:1d:e4:d0:73:47:6d:c1:80:6d:8e:1f:66:eb:
6a:65:b9:f7:9d:d6:01:ea:69:1b:0a:73:78:89:7d:2d:b9:5c:
87:f8:8c:9f:64:5f:1f:02:0c:96:54:d1:da:63:0c:e2:0c:86:
e2:4e:0a:5a:21:16:15:31:7e:6d:ae:13:bc:25:44:4c:a7:22:
ec:cf:19:a5:14:90:53:a9:1a:1f:8d:33:a9:5e:c7:63:11:55:
bd:60:ea:c6:4a:0b:e5:47:49:a9:1d:c1:bd:2e:c6:98:a8:2a:
c3:c3:7f:b7:c8:96:4d:53:9a:aa:da:44:ef:35:4f:14:f4:2f:
d4:33:2a:67:1d:72:65:d9:47:30:1f:a1:62:5b:00:82:8d:75:
4d:c9:cd:7c:7d:72:e5:db:23:b1:3d:c0:96:92:e9:d0:31:ab:
18:8c:b3:73:f4:d7:e6:72:8c:80:59:f5:95:d9:2b:dd:93:83:
d0:36:4a:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0ANpTaeXXmpaSR3bXVPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyODNiNmQxZDg2MTAyZTllZGYyYWJkZGFhN2M5MzQ3YWFj
NzE3YzcwHhcNMjUxMTA0MTcwMDIzWhcNMjUxMTA1MTcwMDIzWjAzMTEwLwYDVQQD
EyhmY2I1MmI0Mzg1Yzk4YTExMGNhMTBjZmY0MDM1YjU3YmNlN2IzMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVl/Yft4ry/cDKr5IuEJnyfGCnJz
ok8WSaSzlZlUBFoax5QSG32zBryeef9eNBHtAOTfNyjOAAVQq7LNoeas5cA6q9rD
e9m+k41Ur2n/qvobd4+k8GYiHwp6figr/m2FT7iBGTwvcn5/mCtp4cmlXHiS0aeY
lFYjD8THjON1ruaMGoNbxaKm5wjlQ+xUxr/nkC8YgiB8kehA6KXcwGRh6XbPbnZ3
GDnMmPXybD57bWpDzJYq5LLvAJTKtAdTfYWNP0HEsYyah4mv3nnOXl3qv4RfVTjY
Q2kN5oHkGLzHiupphfZ4MxuMlt8TqiZQgX9T4QitKAaNXtO2hi7lwo3dSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPy1K0OFyYoRDKEM/0A1tXvOezNfMB8GA1UdIwQY
MBaAFGKDttHYYQLp7fKr3ap8k0eqxxfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQt
OTE0ZTQ4ODFlZWE4LzEvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iZDQzMTctYjllZi00YjIzLTgwYWQtOTE0ZTQ4ODFlZWE4
LzEvWW9PMjBkaGhBdW50OHF2ZHFueVRSNnJIRjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4PoxpJX
FihigtiVN+NdJwi9IKBZtDBm5jsBFVsHRKvQsd2F3W/ARoFrbqabPaUr085it401
Zdf5vmZXWbnkqgmSGQVs4oJ3aUXRZtQd5NBzR23BgG2OH2bramW5953WAeppGwpz
eIl9Lblch/iMn2RfHwIMllTR2mMM4gyG4k4KWiEWFTF+ba4TvCVETKci7M8ZpRSQ
U6kaH40zqV7HYxFVvWDqxkoL5UdJqR3BvS7GmKgqw8N/t8iWTVOaqtpE7zVPFPQv
1DMqZx1yZdlHMB+hYlsAgo11TcnNfH1y5dsjsT3AlpLp0DGrGIyzc/TX5nKMgFn1
ldkr3ZOD0DZKcg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:54:59 2025 by rpki-client