Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
File: yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json)
Hash identifier: dez4Bgw+Lfhd21W+kktDGKsKqIv1VBMFeGVO2BzuUm8=
Subject key identifier: BE:09:8E:89:93:09:E0:78:82:F2:7D:24:5D:E3:45:F5:28:A3:13:4D
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial: 019A5007580EC75EC8B9E5C926F78341DA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 18:00:49 +0000
Manifest this update: Tue 04 Nov 2025 18:00:49 +0000
Manifest next update: Wed 05 Nov 2025 18:00:49 +0000
Files and hashes: 1: usN8GZVfJ54q0l8hKewfBSWmGHw.roa (hash: IakOdZo+PiFdg1ApCygqDDOunMse1hhehFbuFFIfZ5o=)
2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: LvcZcSrpejR4yIDr0RkmrfvzsU5ox8pECnCIzMYwx6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:58:0e:c7:5e:c8:b9:e5:c9:26:f7:83:41:da:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Validity
Not Before: Nov 4 18:00:49 2025 GMT
Not After : Nov 5 18:00:49 2025 GMT
Subject: CN=be098e899309e07882f27d245de345f528a3134d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:5e:1c:c3:8e:3c:71:36:64:ef:02:21:9b:
d5:f6:43:11:c5:7b:ed:43:e1:a3:55:31:86:7d:90:
a6:2a:af:7e:0f:2e:01:34:b7:db:ec:fe:54:06:ec:
15:e2:3e:db:1a:69:89:89:ad:1c:14:44:c3:0c:e9:
52:4d:cb:f4:82:11:f7:8c:8a:35:e6:3b:02:a9:e7:
c1:a5:9a:6d:7f:d7:61:2f:d6:d4:52:a9:73:e2:fe:
cc:79:c0:20:7a:e4:27:73:d5:6f:48:af:0e:e1:9c:
fc:72:a3:5f:5d:d9:b1:0e:ff:a5:d4:f4:e5:b4:69:
ae:77:90:d6:08:6d:60:cb:d1:03:d6:ba:36:ed:fc:
63:e7:70:fb:40:b4:70:54:8c:5f:be:c0:50:2b:f4:
de:a1:2a:7d:f4:10:86:58:75:b1:65:79:54:9d:9f:
9d:8d:01:a9:6d:35:c3:43:d5:2b:47:ac:da:ff:f0:
65:e0:ad:2e:7c:c3:eb:8c:02:0f:49:8d:b3:6d:54:
8e:76:7a:46:03:88:7d:af:d4:ae:cc:54:27:b3:c9:
eb:b8:59:1e:97:6c:25:46:90:e7:08:ba:f3:79:e8:
67:73:c8:90:be:a2:d8:b1:de:99:06:7c:20:68:91:
d2:bb:28:b6:c9:64:f5:7f:bb:aa:68:e2:50:87:64:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:09:8E:89:93:09:E0:78:82:F2:7D:24:5D:E3:45:F5:28:A3:13:4D
X509v3 Authority Key Identifier:
keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:72:3e:57:30:a8:10:da:2d:43:1b:ff:00:6a:f9:32:23:02:
9d:8a:ed:f1:08:ca:db:4f:ec:e4:6d:16:55:cb:1b:37:16:a2:
da:6a:66:08:6a:b1:ff:f5:d7:20:e3:5e:63:9e:cf:61:76:b1:
74:82:29:52:d6:08:cb:7e:15:c7:b8:6f:ee:b3:63:46:72:05:
85:58:b1:3d:9d:de:00:63:59:c6:a3:96:ff:e2:75:ef:ca:62:
3a:16:01:7a:18:0a:db:cd:99:01:d8:3d:3d:9b:4d:fd:15:cb:
a2:a3:d9:5f:b9:84:84:67:67:db:82:1b:5b:b4:3c:a7:83:85:
cb:40:29:22:bd:35:9d:f7:c4:82:3f:29:6e:73:af:cb:1b:47:
ce:1f:15:00:4b:f0:d5:97:04:bb:fc:5f:f1:cc:26:6f:b9:2d:
a5:89:b0:b4:de:3a:57:db:7f:f1:5b:ee:79:e6:f8:c5:4c:d6:
e2:d0:12:5e:5b:d1:67:a9:79:f1:82:6f:28:28:fa:88:77:35:
a2:65:c4:d6:23:95:92:22:43:ae:b2:e0:84:e6:48:ab:bf:33:
27:21:3c:0a:24:28:85:94:69:4a:51:0d:28:a3:3b:fd:71:bd:
2e:05:33:6b:08:38:9f:de:99:44:7f:e1:cd:dc:31:f5:39:1b:
95:b7:2f:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB1gOx17IueXJJveDQdoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWM3N2RmNTllZDcyYTU0NTdkZWNlNmE1M2QwNWVkMGFl
NjAwYWEwHhcNMjUxMTA0MTgwMDQ5WhcNMjUxMTA1MTgwMDQ5WjAzMTEwLwYDVQQD
EyhiZTA5OGU4OTkzMDllMDc4ODJmMjdkMjQ1ZGUzNDVmNTI4YTMxMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnpeHMOOPHE2ZO8CIZvV9kMRxXvt
Q+GjVTGGfZCmKq9+Dy4BNLfb7P5UBuwV4j7bGmmJia0cFETDDOlSTcv0ghH3jIo1
5jsCqefBpZptf9dhL9bUUqlz4v7MecAgeuQnc9VvSK8O4Zz8cqNfXdmxDv+l1PTl
tGmud5DWCG1gy9ED1ro27fxj53D7QLRwVIxfvsBQK/TeoSp99BCGWHWxZXlUnZ+d
jQGpbTXDQ9UrR6za//Bl4K0ufMPrjAIPSY2zbVSOdnpGA4h9r9SuzFQns8nruFke
l2wlRpDnCLrzeehnc8iQvqLYsd6ZBnwgaJHSuyi2yWT1f7uqaOJQh2QBswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4JjomTCeB4gvJ9JF3jRfUooxNNMB8GA1UdIwQY
MBaAFMnsd99Z7XKlRX3s5qU9Be0K5gCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYt
M2ViMDllZGUzZWQ1LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYtM2ViMDllZGUzZWQ1
LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHI+VzCo
ENotQxv/AGr5MiMCnYrt8QjK20/s5G0WVcsbNxai2mpmCGqx//XXIONeY57PYXax
dIIpUtYIy34Vx7hv7rNjRnIFhVixPZ3eAGNZxqOW/+J178piOhYBehgK282ZAdg9
PZtN/RXLoqPZX7mEhGdn24IbW7Q8p4OFy0ApIr01nffEgj8pbnOvyxtHzh8VAEvw
1ZcEu/xf8cwmb7ktpYmwtN46V9t/8Vvueeb4xUzW4tASXlvRZ6l58YJvKCj6iHc1
omXE1iOVkiJDrrLghOZIq78zJyE8CiQohZRpSlENKKM7/XG9LgUzawg4n96ZRH/h
zdwx9TkblbcvTg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:38 2025 by rpki-client