Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: LeQDNpMUhyjAw0h9Np9MRCLbAHJwcHrl8aX/XErQVOU=
Subject key identifier: 1A:59:34:16:28:50:C2:02:C8:3B:A0:B2:F3:9E:FC:77:CC:31:4F:DA
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 019A4D06570C8DE43561551576247BE58103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 04BF
Signing time: Tue 04 Nov 2025 04:00:52 +0000
Manifest this update: Tue 04 Nov 2025 04:00:52 +0000
Manifest next update: Wed 05 Nov 2025 04:00:52 +0000
Files and hashes: 1: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=)
2: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: IT9drHpraXe3mAcHZMsTnFlWwIpIsoTZU/b90zZvhcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:57:0c:8d:e4:35:61:55:15:76:24:7b:e5:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Nov 4 04:00:52 2025 GMT
Not After : Nov 5 04:00:52 2025 GMT
Subject: CN=1a5934162850c202c83ba0b2f39efc77cc314fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:a7:44:d0:ff:bc:43:f2:af:d4:32:2c:4f:
a0:6f:95:a6:2f:39:93:59:3a:96:50:97:b6:94:8d:
a1:3f:cf:2c:41:cf:02:25:36:0a:ed:b6:ce:c2:c9:
d3:61:2f:64:c3:ff:37:35:7b:4e:78:f1:7b:73:88:
3d:7d:17:86:2f:d4:80:4c:93:49:c5:74:18:86:6f:
dd:8b:60:f8:cf:1f:e5:64:77:80:4e:93:82:3a:52:
27:34:25:76:62:31:4e:c7:aa:a0:eb:e0:3f:35:d8:
3c:65:48:8b:72:ce:d4:51:83:ea:d6:c2:25:f5:cd:
a1:78:37:9c:10:4f:0d:2b:74:46:86:2b:21:54:77:
cf:f5:8d:7a:da:a1:79:cd:3a:90:38:5f:4d:7a:49:
87:f9:74:3c:22:1a:b0:d0:c1:75:a0:14:6c:8b:7a:
96:21:a1:5f:ec:de:c0:df:7a:6e:23:a1:9f:76:85:
53:43:0c:00:4d:7e:f6:75:0a:74:d8:ea:09:a9:eb:
a3:aa:58:16:52:7e:71:2e:98:36:6a:47:de:bf:01:
fb:44:8b:7f:16:99:ca:05:eb:d4:0e:e7:a3:89:13:
e1:e5:80:fd:3d:16:38:ba:67:f7:00:83:37:21:af:
e1:84:d3:b8:1e:f8:e4:be:5d:77:a0:66:b4:53:6a:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:59:34:16:28:50:C2:02:C8:3B:A0:B2:F3:9E:FC:77:CC:31:4F:DA
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fc:a6:df:8f:80:d5:d0:9e:10:d7:e0:6d:cf:4f:68:ba:63:
70:13:d4:ce:4e:e7:89:f6:1c:ef:9b:46:93:18:0b:6e:6c:7b:
a5:19:c0:cf:bc:01:3c:8a:70:16:40:19:d1:79:13:df:6e:d1:
0d:9a:88:70:79:df:4b:ec:60:c1:b2:22:bf:6f:33:b8:52:c8:
bd:9b:96:b6:18:65:e6:ff:8c:dc:54:a1:ef:e8:31:3d:3c:ba:
89:16:ca:ab:eb:43:ba:c4:3e:55:8f:80:be:c1:48:b9:88:63:
fe:52:99:35:60:fc:bf:bc:1a:e7:3d:10:37:48:1b:8a:cb:00:
56:71:d4:2c:e6:2a:32:17:58:98:75:f1:4b:5f:cd:d3:6f:54:
0d:ce:b9:fc:69:09:4a:27:b9:3b:c7:57:34:ed:a9:3b:f9:b2:
3c:07:5f:9e:33:b9:a4:15:14:74:9a:ea:20:b5:15:ce:8d:da:
b7:bf:9f:6b:6c:8f:bc:f3:0d:43:c7:36:91:ca:1b:12:86:d3:
ac:17:e7:07:c4:43:e7:c7:28:14:be:2d:46:0a:71:dc:8c:b6:
85:5c:83:58:a4:cc:a2:30:21:60:e5:2c:57:b4:1d:d3:cc:e3:
d8:62:5e:d8:56:9a:c5:0d:64:36:62:70:b0:46:bd:d1:ed:66:
fe:f6:b1:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBlcMjeQ1YVUVdiR75YEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhODg2ZDU1ODdlYzg1ZjcxMjQyY2Q1N2NlZDQwOTU0NDUy
ODE2OGQwHhcNMjUxMTA0MDQwMDUyWhcNMjUxMTA1MDQwMDUyWjAzMTEwLwYDVQQD
EygxYTU5MzQxNjI4NTBjMjAyYzgzYmEwYjJmMzllZmM3N2NjMzE0ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+qnRND/vEPyr9QyLE+gb5WmLzmT
WTqWUJe2lI2hP88sQc8CJTYK7bbOwsnTYS9kw/83NXtOePF7c4g9fReGL9SATJNJ
xXQYhm/di2D4zx/lZHeATpOCOlInNCV2YjFOx6qg6+A/Ndg8ZUiLcs7UUYPq1sIl
9c2heDecEE8NK3RGhishVHfP9Y162qF5zTqQOF9NekmH+XQ8Ihqw0MF1oBRsi3qW
IaFf7N7A33puI6GfdoVTQwwATX72dQp02OoJqeujqlgWUn5xLpg2akfevwH7RIt/
FpnKBevUDuejiRPh5YD9PRY4umf3AIM3Ia/hhNO4Hvjkvl13oGa0U2qPLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpZNBYoUMICyDugsvOe/HfMMU/aMB8GA1UdIwQY
MBaAFMqIbVWH7IX3EkLNV87UCVRFKBaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjIt
YzdlMjUyMGM0Y2VhLzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjItYzdlMjUyMGM0Y2Vh
LzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/ym34+A
1dCeENfgbc9PaLpjcBPUzk7nifYc75tGkxgLbmx7pRnAz7wBPIpwFkAZ0XkT327R
DZqIcHnfS+xgwbIiv28zuFLIvZuWthhl5v+M3FSh7+gxPTy6iRbKq+tDusQ+VY+A
vsFIuYhj/lKZNWD8v7wa5z0QN0gbissAVnHULOYqMhdYmHXxS1/N029UDc65/GkJ
Sie5O8dXNO2pO/myPAdfnjO5pBUUdJrqILUVzo3at7+fa2yPvPMNQ8c2kcobEobT
rBfnB8RD58coFL4tRgpx3Iy2hVyDWKTMojAhYOUsV7Qd08zj2GJe2FaaxQ1kNmJw
sEa90e1m/vaxzQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:48 2025 by rpki-client