Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: mSz72iuEhLXTThr6ffLRTKcndHD6gmVFHw/EqxSmdM4=
Subject key identifier: 79:44:36:91:84:5F:10:BD:2F:67:12:DB:E1:3D:73:E3:7A:AE:9D:C6
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 019A4EF5BF242518C200DFB721215AB21A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 0729
Signing time: Tue 04 Nov 2025 13:01:59 +0000
Manifest this update: Tue 04 Nov 2025 13:01:59 +0000
Manifest next update: Wed 05 Nov 2025 13:01:59 +0000
Files and hashes: 1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: 4mkLLy2AklekEMXSXyaXDcVUFnk97NfVn+7ZZsL1yGI=)
3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bf:24:25:18:c2:00:df:b7:21:21:5a:b2:1a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Nov 4 13:01:59 2025 GMT
Not After : Nov 5 13:01:59 2025 GMT
Subject: CN=79443691845f10bd2f6712dbe13d73e37aae9dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d8:e1:28:c5:14:dc:0f:33:47:8b:d7:56:99:
42:55:60:11:71:2c:7a:6a:c5:04:74:97:1b:7d:66:
2b:14:5e:21:ef:ac:28:fa:05:de:64:9d:8d:cc:ce:
99:8a:48:cc:52:d5:68:8c:a0:87:14:0d:18:19:fc:
e9:c8:f3:15:c8:0f:49:aa:88:6a:8e:6e:70:a1:c1:
1d:0d:3f:2e:ba:df:89:ca:6e:4b:12:ea:57:15:c7:
1c:af:dc:ff:fd:57:26:b0:f1:61:03:a6:06:2f:07:
76:b2:7c:4a:c1:86:70:2d:56:31:a7:0c:42:a9:d8:
e7:bf:64:1b:fa:b6:c0:40:02:48:1d:8c:ae:30:fb:
26:73:04:7e:3b:ba:4b:81:78:01:ab:f0:52:50:ac:
a4:27:aa:52:50:43:2b:94:20:47:59:a6:b1:30:23:
12:64:46:41:4d:fc:cb:80:d8:b3:0c:35:3e:32:ae:
a9:10:fd:21:88:fe:e5:87:c3:0e:e3:cf:e9:58:24:
e6:67:27:9d:e6:76:60:9c:fc:10:d1:f8:62:24:6a:
20:ba:ac:5d:a6:d5:d7:b5:93:e8:da:a0:11:74:6e:
34:8e:ba:9a:da:c5:d3:80:24:d4:a7:c7:05:a7:36:
c7:e6:be:0e:fd:c5:ee:f0:55:fe:0b:4f:8c:aa:92:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:36:91:84:5F:10:BD:2F:67:12:DB:E1:3D:73:E3:7A:AE:9D:C6
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4b:82:69:80:38:ee:bd:9c:d9:77:ec:fe:68:47:f3:8d:18:
3a:21:68:2a:ba:c9:ec:fb:be:94:fc:be:6d:ce:95:32:34:f8:
1a:29:d7:e9:38:01:62:0f:a8:a9:bf:9d:56:8e:34:1c:06:2a:
98:f8:52:fa:f7:72:ff:28:78:7d:0b:3a:00:05:ca:d6:7c:2e:
9f:08:59:db:56:1f:fe:24:44:c9:5b:29:b7:50:48:de:00:37:
78:2e:12:df:64:65:06:4a:80:e9:a2:98:7b:d9:3a:00:88:78:
97:e8:15:eb:3f:fd:f8:46:85:bd:3b:f8:ec:36:11:01:54:72:
82:92:df:b4:d5:42:2f:25:ef:ee:64:e4:4a:d9:a4:4e:e9:b9:
32:58:76:b5:66:dd:7a:e4:9a:b6:d1:24:fd:67:1f:83:94:6b:
46:c7:cc:e3:25:2b:80:99:d5:64:0f:1d:7f:01:b2:8e:33:e2:
5a:21:89:99:1a:8c:8b:e9:a1:7c:ca:f4:ba:0e:c9:c7:85:dd:
ab:36:33:70:b0:4e:10:c0:e3:f9:f1:b4:36:6d:b1:38:8f:02:
b0:81:a7:16:54:b6:5b:d2:07:19:0f:0f:15:af:aa:fa:e2:84:
dc:b0:99:50:eb:7c:9a:52:a9:a9:13:d5:47:a3:33:d5:44:15:
a7:5b:a7:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9b8kJRjCAN+3ISFashoGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzY2MjY3OTQzZDQxM2NkZjc2MGRjNjg1MDEwNGMxYzBm
YzFkNjUwHhcNMjUxMTA0MTMwMTU5WhcNMjUxMTA1MTMwMTU5WjAzMTEwLwYDVQQD
Eyg3OTQ0MzY5MTg0NWYxMGJkMmY2NzEyZGJlMTNkNzNlMzdhYWU5ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8djhKMUU3A8zR4vXVplCVWARcSx6
asUEdJcbfWYrFF4h76wo+gXeZJ2NzM6ZikjMUtVojKCHFA0YGfzpyPMVyA9Jqohq
jm5wocEdDT8uut+Jym5LEupXFcccr9z//VcmsPFhA6YGLwd2snxKwYZwLVYxpwxC
qdjnv2Qb+rbAQAJIHYyuMPsmcwR+O7pLgXgBq/BSUKykJ6pSUEMrlCBHWaaxMCMS
ZEZBTfzLgNizDDU+Mq6pEP0hiP7lh8MO48/pWCTmZyed5nZgnPwQ0fhiJGoguqxd
ptXXtZPo2qARdG40jrqa2sXTgCTUp8cFpzbH5r4O/cXu8FX+C0+MqpJq4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlENpGEXxC9L2cS2+E9c+N6rp3GMB8GA1UdIwQY
MBaAFGLGYmeUPUE833YNxoUBBMHA/B1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQt
YTlkN2FkNDQyYjNiLzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81MGY0ZjctNDljYy00YzgyLTkzMjQtYTlkN2FkNDQyYjNi
LzEvWXNaaVo1UTlRVHpmZGczR2hRRUV3Y0Q4SFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkuCaYA4
7r2c2Xfs/mhH840YOiFoKrrJ7Pu+lPy+bc6VMjT4GinX6TgBYg+oqb+dVo40HAYq
mPhS+vdy/yh4fQs6AAXK1nwunwhZ21Yf/iREyVspt1BI3gA3eC4S32RlBkqA6aKY
e9k6AIh4l+gV6z/9+EaFvTv47DYRAVRygpLftNVCLyXv7mTkStmkTum5Mlh2tWbd
euSattEk/Wcfg5RrRsfM4yUrgJnVZA8dfwGyjjPiWiGJmRqMi+mhfMr0ug7Jx4Xd
qzYzcLBOEMDj+fG0Nm2xOI8CsIGnFlS2W9IHGQ8PFa+q+uKE3LCZUOt8mlKpqRPV
R6Mz1UQVp1unPA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:31 2025 by rpki-client