
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: 5WYoeHX+OHvKEq2X0ihMbvt0MCq4/OMPjym6UTPJHhU=
Subject key identifier: EF:8D:10:3C:BA:D2:44:2A:AF:62:DF:3A:25:D2:59:51:01:E7:B3:7C
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 019A50E3E7AC9C7A7C1F9CD555AFCF8158D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 050E
Signing time: Tue 04 Nov 2025 22:01:44 +0000
Manifest this update: Tue 04 Nov 2025 22:01:44 +0000
Manifest next update: Wed 05 Nov 2025 22:01:44 +0000
Files and hashes: 1: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (hash: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: vl3haqPT5i5m8h0Cil1RMlKbNjKB6sP1lfruUe4ryWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:e7:ac:9c:7a:7c:1f:9c:d5:55:af:cf:81:58:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Nov 4 22:01:44 2025 GMT
Not After : Nov 5 22:01:44 2025 GMT
Subject: CN=ef8d103cbad2442aaf62df3a25d2595101e7b37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:05:52:5d:52:3a:1c:e1:fc:b3:af:64:2e:
57:3d:1c:14:33:aa:48:3c:55:2b:14:c6:f9:7e:bd:
a6:64:dd:67:8e:47:91:ac:2c:85:ab:22:39:1c:6b:
df:ae:64:a1:cf:37:62:82:c2:05:7e:49:30:05:62:
54:fa:1c:60:47:3b:00:a4:35:d7:8a:5c:61:b2:57:
9e:59:05:2c:12:ee:cf:2a:2a:14:a5:2e:8e:2f:70:
d7:53:81:4b:dc:8f:8c:43:04:0c:f3:66:84:23:35:
9d:09:51:25:4c:02:37:ed:26:fa:f4:e7:f5:ff:55:
e3:8a:42:f9:33:1e:f0:10:20:b9:6c:6f:f0:e8:b7:
5f:28:2f:62:e9:56:05:e3:11:3d:33:8f:a5:da:7a:
04:38:dc:b4:97:9e:b0:49:38:bc:eb:48:ca:0e:b0:
82:ad:ea:ae:f8:0c:c9:cd:95:b3:51:91:87:85:af:
4b:f6:f5:3f:ab:d3:39:46:91:fc:a4:18:4b:73:92:
d1:e3:e1:1b:85:c2:17:7d:03:42:c5:20:83:95:f8:
c2:52:d2:93:aa:4f:5c:c7:8b:a6:3f:c7:4a:e6:87:
e4:8a:75:45:e3:18:5b:cf:2f:d7:d6:51:b2:42:07:
b4:a9:0e:b8:d1:39:e9:7f:b4:da:56:6c:9e:55:1b:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8D:10:3C:BA:D2:44:2A:AF:62:DF:3A:25:D2:59:51:01:E7:B3:7C
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:07:79:3c:d1:3c:c4:c8:b8:4a:fe:e1:ca:9a:c3:61:98:05:
a1:06:c7:39:b4:75:72:ad:e1:aa:1a:31:7b:d8:62:31:29:65:
e8:f9:a3:28:bd:a3:7b:f8:04:8c:9f:e9:ee:f4:b5:f4:a1:15:
41:b5:2a:8d:5e:a4:98:27:3d:26:a2:2a:b5:62:d3:83:0c:d3:
97:49:9a:f5:6b:44:89:9c:73:61:8a:7f:3b:03:d3:b7:b6:21:
67:90:3e:c6:04:7c:10:d5:e2:5f:a1:31:fe:97:50:b4:ca:7e:
0c:9c:de:b5:13:48:dc:06:26:cc:d9:cf:ba:c6:f4:5e:0b:ac:
cc:58:bf:97:61:50:94:25:18:56:ba:78:15:46:a2:46:33:99:
d5:6d:99:49:b1:f0:ac:03:60:95:33:ac:bb:78:67:9c:38:62:
38:2a:12:33:14:42:93:b3:56:af:dc:68:7b:88:63:d2:0e:0e:
ab:e3:39:8d:71:f0:39:ae:22:73:4d:2d:90:0a:a2:eb:8e:ec:
fb:38:31:55:36:7d:0f:70:af:f8:7a:3a:8e:ac:ec:96:b7:f6:
f7:21:e0:e6:b5:25:dd:00:67:ff:50:8e:09:ab:9b:5f:dd:e8:
d9:70:f3:a2:21:41:e2:27:35:f9:6d:e0:dd:b3:da:c5:33:8c:
b5:b1:4f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4+esnHp8H5zVVa/PgVjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjk2ODhlMTc2Y2YzODY0MzZkN2JiODhkM2E0MDViNDZk
MGUyYjkwHhcNMjUxMTA0MjIwMTQ0WhcNMjUxMTA1MjIwMTQ0WjAzMTEwLwYDVQQD
EyhlZjhkMTAzY2JhZDI0NDJhYWY2MmRmM2EyNWQyNTk1MTAxZTdiMzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw10FUl1SOhzh/LOvZC5XPRwUM6pI
PFUrFMb5fr2mZN1njkeRrCyFqyI5HGvfrmShzzdigsIFfkkwBWJU+hxgRzsApDXX
ilxhsleeWQUsEu7PKioUpS6OL3DXU4FL3I+MQwQM82aEIzWdCVElTAI37Sb69Of1
/1XjikL5Mx7wECC5bG/w6LdfKC9i6VYF4xE9M4+l2noEONy0l56wSTi860jKDrCC
requ+AzJzZWzUZGHha9L9vU/q9M5RpH8pBhLc5LR4+EbhcIXfQNCxSCDlfjCUtKT
qk9cx4umP8dK5ofkinVF4xhbzy/X1lGyQge0qQ640Tnpf7TaVmyeVRvZtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+NEDy60kQqr2LfOiXSWVEB57N8MB8GA1UdIwQY
MBaAFMr5aI4XbPOGQ217uI06QFtG0OK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iNGFhZjYtMTBmNC00MTcxLWFjNWEt
YWIwYzFjNDQyZjVkLzEveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iNGFhZjYtMTBmNC00MTcxLWFjNWEtYWIwYzFjNDQyZjVk
LzEveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgd5PNE8
xMi4Sv7hyprDYZgFoQbHObR1cq3hqhoxe9hiMSll6PmjKL2je/gEjJ/p7vS19KEV
QbUqjV6kmCc9JqIqtWLTgwzTl0ma9WtEiZxzYYp/OwPTt7YhZ5A+xgR8ENXiX6Ex
/pdQtMp+DJzetRNI3AYmzNnPusb0XguszFi/l2FQlCUYVrp4FUaiRjOZ1W2ZSbHw
rANglTOsu3hnnDhiOCoSMxRCk7NWr9xoe4hj0g4Oq+M5jXHwOa4ic00tkAqi647s
+zgxVTZ9D3Cv+Ho6jqzslrf29yHg5rUl3QBn/1COCaubX93o2XDzoiFB4ic1+W3g
3bPaxTOMtbFPVQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:15 2025 by rpki-client