Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier: H3LZVyvzYm9dia10Nh+CzuZf9VC8P9dL/lANHfFnj5A=
Subject key identifier: E7:59:21:CE:FA:87:F9:08:7F:C5:15:2F:4A:B0:19:35:26:44:8B:43
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 019A52D1A8E34356A7DE684050D905C218D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 07:01:03 +0000
Manifest this update: Wed 05 Nov 2025 07:01:03 +0000
Manifest next update: Thu 06 Nov 2025 07:01:03 +0000
Files and hashes: 1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=)
2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: l0YgSI1YmsZQ8FUeKsKMesphzBR5V3MShdVIND1gLEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a8:e3:43:56:a7:de:68:40:50:d9:05:c2:18:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Nov 5 07:01:03 2025 GMT
Not After : Nov 6 07:01:03 2025 GMT
Subject: CN=e75921cefa87f9087fc5152f4ab0193526448b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:f9:61:fc:92:af:34:76:04:be:46:51:05:
05:3c:3f:60:87:ca:db:6f:27:46:05:c6:59:b5:d4:
df:cf:8b:81:a5:1a:c7:11:e3:5c:c6:df:a7:56:de:
a4:ca:4b:4f:29:18:0d:61:71:41:5c:fc:5b:c9:7e:
c3:52:e9:7a:1b:53:ab:16:b6:30:0e:12:fc:44:4b:
fc:fd:d6:2a:a1:9a:d1:ef:90:fe:50:99:c6:80:9a:
5e:2c:1b:a0:7a:46:27:52:4f:75:22:cf:e5:d4:35:
32:eb:a4:0d:07:51:32:36:dc:66:fa:41:22:3c:ec:
83:b6:76:bf:83:05:d7:34:56:dc:03:51:9f:1c:ce:
c1:f2:41:61:98:c4:b5:ac:6a:9b:11:c0:9b:a1:29:
18:a7:b1:41:ab:bc:ed:59:ff:a1:b6:9e:31:ac:92:
41:4a:68:78:4e:d7:48:50:49:f8:b0:26:84:d9:0d:
a0:06:ea:d7:1d:23:c6:69:19:b4:49:62:86:05:d1:
f8:39:87:3f:b1:ea:91:8d:08:8c:c7:a4:2a:4a:d5:
b9:b1:75:c1:2e:28:12:e5:7c:06:80:97:c3:4f:e6:
50:95:b5:c4:9f:69:09:6d:21:cd:2a:07:04:97:2f:
e8:33:16:99:b8:0a:6d:d2:f0:5c:31:06:34:d8:fd:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:59:21:CE:FA:87:F9:08:7F:C5:15:2F:4A:B0:19:35:26:44:8B:43
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:25:ec:e5:58:e4:cd:0c:d6:ed:09:fb:78:69:4d:88:23:5f:
f4:72:ca:b5:42:11:44:35:c8:f2:92:e8:ff:9b:ca:3d:9c:57:
fe:75:d5:e7:ba:68:78:5b:23:a6:49:e3:ff:f3:14:38:e2:51:
be:08:73:8d:54:8b:a2:b0:bb:b0:f8:a4:e0:93:2d:b1:00:b4:
c2:3c:80:01:03:8d:4c:45:4d:9e:d3:57:d5:63:d7:44:bb:2c:
ae:22:20:10:ad:bb:52:2d:d8:f8:cb:18:d2:c2:82:47:97:99:
1d:d8:90:d1:9c:1f:d2:2d:e3:10:62:62:47:21:24:f2:78:34:
0b:42:26:c4:54:64:32:39:51:31:a4:a5:02:1f:bc:06:22:c7:
f4:5b:7c:9e:4a:9c:e7:21:89:5d:ed:7e:03:fa:72:96:79:cc:
d2:47:02:e6:3b:e0:c5:0d:08:ca:da:e4:61:5b:f7:ee:5d:2c:
c0:8f:1e:25:dc:a5:49:a5:19:2e:de:f6:2c:55:92:0f:21:7f:
92:13:91:1f:2f:6f:52:c6:92:9e:58:80:2b:b1:d2:75:a2:58:
93:00:4f:d0:5a:5a:70:38:d9:7a:57:ee:16:98:5f:60:a5:e3:
c0:23:72:91:91:f5:0f:02:b2:86:41:23:f0:e6:18:fd:a6:48:
94:82:47:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0ajjQ1an3mhAUNkFwhjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzQ0OGZjMDliM2Y3MzIwZGE4MDU3YmZhOGVlYTliYWY5
Y2VlMzkwHhcNMjUxMTA1MDcwMTAzWhcNMjUxMTA2MDcwMTAzWjAzMTEwLwYDVQQD
EyhlNzU5MjFjZWZhODdmOTA4N2ZjNTE1MmY0YWIwMTkzNTI2NDQ4YjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurL5YfySrzR2BL5GUQUFPD9gh8rb
bydGBcZZtdTfz4uBpRrHEeNcxt+nVt6kyktPKRgNYXFBXPxbyX7DUul6G1OrFrYw
DhL8REv8/dYqoZrR75D+UJnGgJpeLBugekYnUk91Is/l1DUy66QNB1EyNtxm+kEi
POyDtna/gwXXNFbcA1GfHM7B8kFhmMS1rGqbEcCboSkYp7FBq7ztWf+htp4xrJJB
Smh4TtdIUEn4sCaE2Q2gBurXHSPGaRm0SWKGBdH4OYc/seqRjQiMx6QqStW5sXXB
LigS5XwGgJfDT+ZQlbXEn2kJbSHNKgcEly/oMxaZuApt0vBcMQY02P0e3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdZIc76h/kIf8UVL0qwGTUmRItDMB8GA1UdIwQY
MBaAFMp0SPwJs/cyDagFe/qO6puvnO45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80NGNlMDEtZDQ1MS00ZDczLWE2ZTQt
MzgwMmZmNGVjMTU5LzEveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80NGNlMDEtZDQ1MS00ZDczLWE2ZTQtMzgwMmZmNGVjMTU5
LzEveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyXs5Vjk
zQzW7Qn7eGlNiCNf9HLKtUIRRDXI8pLo/5vKPZxX/nXV57poeFsjpknj//MUOOJR
vghzjVSLorC7sPik4JMtsQC0wjyAAQONTEVNntNX1WPXRLssriIgEK27Ui3Y+MsY
0sKCR5eZHdiQ0Zwf0i3jEGJiRyEk8ng0C0ImxFRkMjlRMaSlAh+8BiLH9Ft8nkqc
5yGJXe1+A/pylnnM0kcC5jvgxQ0IytrkYVv37l0swI8eJdylSaUZLt72LFWSDyF/
khORHy9vUsaSnliAK7HSdaJYkwBP0FpacDjZelfuFphfYKXjwCNykZH1DwKyhkEj
8OYY/aZIlIJHQA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:58:44 2025 by rpki-client