Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
File: Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft (raw, json)
Hash identifier: k5IUsk9O/Dn7rxgUI1mshAA9sxqR/sGu83zM/TJMeio=
Subject key identifier: 9A:59:A4:20:DF:29:01:BA:55:92:3B:C4:10:2D:16:31:B3:D4:1D:34
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Certificate issuer: /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial: 019A4E86B5F9F5C1E6F975B7C46D080BCA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
Manifest number: 0EDA
Signing time: Tue 04 Nov 2025 11:00:42 +0000
Manifest this update: Tue 04 Nov 2025 11:00:42 +0000
Manifest next update: Wed 05 Nov 2025 11:00:42 +0000
Files and hashes: 1: GymugnGNz9hZBNfCgZiljFXWNI4.roa (hash: UzztjdFS5VrTYMjssd7r9V+uU0SvLYHrn/O32cjxd5g=)
2: Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl (hash: uBF62U/gluucmJti3jQuNwZKG4kW2g6NKMGqXXSiFlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b5:f9:f5:c1:e6:f9:75:b7:c4:6d:08:0b:ca:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Validity
Not Before: Nov 4 11:00:42 2025 GMT
Not After : Nov 5 11:00:42 2025 GMT
Subject: CN=9a59a420df2901ba55923bc4102d1631b3d41d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:4e:86:21:a7:6c:d6:ef:f2:a6:56:0a:6a:
aa:c3:21:f5:0e:54:01:4c:d2:80:0b:fe:54:37:65:
ed:37:51:de:5a:27:71:46:94:b5:a0:11:9c:08:30:
a7:24:a9:83:fc:48:71:03:fe:f9:5a:be:99:88:e5:
f1:9c:97:e7:79:eb:3c:8b:02:3b:d7:7f:77:02:be:
9e:5c:af:1b:a4:8a:19:63:53:e7:b2:8d:4c:dd:3e:
cb:7d:2e:ac:b2:70:9f:3f:b6:c0:64:a8:64:bb:91:
fc:77:64:11:72:4c:79:95:5d:e7:4c:81:13:32:99:
68:4d:f4:ae:72:45:db:93:31:9b:c5:3c:42:64:05:
1c:96:0b:3b:72:35:dd:1a:13:01:c8:09:28:bb:fb:
96:eb:2c:41:44:62:61:57:fb:34:90:ab:e8:3d:75:
7d:b6:a2:21:14:a3:42:18:ed:89:db:77:33:ca:20:
0f:b2:48:85:88:0f:29:f7:8a:f4:08:75:b3:e3:85:
fe:cf:cc:a0:c9:03:50:61:12:e6:df:8e:9f:91:27:
61:27:f7:5d:15:d4:f1:94:94:02:c5:83:47:bb:61:
2c:e9:b5:2c:da:21:8b:21:bb:3a:d3:a4:9e:14:b5:
e5:fb:b3:94:dd:37:fb:72:c0:f6:a9:50:77:7b:a8:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:A4:20:DF:29:01:BA:55:92:3B:C4:10:2D:16:31:B3:D4:1D:34
X509v3 Authority Key Identifier:
keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:13:d7:13:e2:99:4c:81:29:b1:48:0a:08:54:ef:e1:8a:09:
8d:bc:38:52:50:ec:c9:9b:2e:d1:ea:27:03:b9:58:86:70:3a:
70:74:93:6e:cc:62:75:ee:92:66:9d:9a:58:ab:07:cc:2f:8b:
f2:eb:36:5d:c9:8e:2c:3e:57:1a:a1:5f:11:b9:57:76:cf:34:
02:84:7f:34:6f:fb:16:e2:8e:83:bd:23:04:55:75:35:ec:d6:
19:26:04:80:55:fd:dc:16:05:df:19:5b:1e:97:d6:bc:23:61:
5b:a0:14:6a:61:f6:47:8e:29:32:d3:39:ef:c2:ae:f6:a1:d5:
7e:2c:87:fa:49:9a:b8:0a:8e:6e:1f:98:ae:ae:be:cc:19:d1:
50:ce:e3:4d:ab:8d:10:65:a9:cb:c7:75:03:df:f4:f5:67:cd:
5f:24:92:13:72:e6:2d:28:27:91:82:8e:fb:0d:fc:c9:1a:e6:
88:c4:0c:03:54:c5:ef:0f:1e:68:1d:26:69:83:a3:d0:d8:aa:
30:c8:38:09:5e:21:1f:10:69:66:44:cb:5e:ab:d5:f3:78:83:
70:f4:ac:c5:fa:a2:21:c5:8c:32:56:f1:eb:29:90:ec:71:d4:
48:2a:bd:0d:36:0d:5f:84:1d:8c:6b:a5:1a:6e:c1:6c:0d:93:
a8:61:7e:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhrX59cHm+XW3xG0IC8pOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmQ2YzJiZGY2MWUyM2VhZmUyM2RkZTAxNmRiOGIzZTE1
OTVmNzYwHhcNMjUxMTA0MTEwMDQyWhcNMjUxMTA1MTEwMDQyWjAzMTEwLwYDVQQD
Eyg5YTU5YTQyMGRmMjkwMWJhNTU5MjNiYzQxMDJkMTYzMWIzZDQxZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEFOhiGnbNbv8qZWCmqqwyH1DlQB
TNKAC/5UN2XtN1HeWidxRpS1oBGcCDCnJKmD/EhxA/75Wr6ZiOXxnJfnees8iwI7
1393Ar6eXK8bpIoZY1Pnso1M3T7LfS6ssnCfP7bAZKhku5H8d2QRckx5lV3nTIET
MploTfSuckXbkzGbxTxCZAUclgs7cjXdGhMByAkou/uW6yxBRGJhV/s0kKvoPXV9
tqIhFKNCGO2J23czyiAPskiFiA8p94r0CHWz44X+z8ygyQNQYRLm346fkSdhJ/dd
FdTxlJQCxYNHu2Es6bUs2iGLIbs606SeFLXl+7OU3Tf7csD2qVB3e6hZNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpZpCDfKQG6VZI7xBAtFjGz1B00MB8GA1UdIwQY
MBaAFGK9bCvfYeI+r+I93gFtuLPhWV92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzct
YjgyYjBlZDJkMzIzLzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzctYjgyYjBlZDJkMzIz
LzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxPXE+KZ
TIEpsUgKCFTv4YoJjbw4UlDsyZsu0eonA7lYhnA6cHSTbsxide6SZp2aWKsHzC+L
8us2XcmOLD5XGqFfEblXds80AoR/NG/7FuKOg70jBFV1NezWGSYEgFX93BYF3xlb
HpfWvCNhW6AUamH2R44pMtM578Ku9qHVfiyH+kmauAqObh+Yrq6+zBnRUM7jTauN
EGWpy8d1A9/09WfNXySSE3LmLSgnkYKO+w38yRrmiMQMA1TF7w8eaB0maYOj0Niq
MMg4CV4hHxBpZkTLXqvV83iDcPSsxfqiIcWMMlbx6ymQ7HHUSCq9DTYNX4QdjGul
Gm7BbA2TqGF+MA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:51 2025 by rpki-client