Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier: Ty5kJ6cqsa/cjlMtySz0XvSEXyi5fdreRFCSVHTFyP4=
Subject key identifier: 0D:02:B4:77:DF:72:EC:17:B2:ED:A4:C9:82:A3:C2:67:9A:4F:DF:EB
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial: 019A5187427EA0E0C0B2568C69B80A566A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number: 0ED9
Signing time: Wed 05 Nov 2025 01:00:10 +0000
Manifest this update: Wed 05 Nov 2025 01:00:10 +0000
Manifest next update: Thu 06 Nov 2025 01:00:10 +0000
Files and hashes: 1: NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa (hash: I2cRj+89A0JU13KVmdh4JlmOsFRbyD7Lf9jI3qtGRKU=)
2: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: +GftlFh12bh+zzWKQBkxJaEsXf042P9vfpgTN32jZjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:42:7e:a0:e0:c0:b2:56:8c:69:b8:0a:56:6a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Validity
Not Before: Nov 5 01:00:10 2025 GMT
Not After : Nov 6 01:00:10 2025 GMT
Subject: CN=0d02b477df72ec17b2eda4c982a3c2679a4fdfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:e5:cc:6a:fa:f7:13:1f:72:87:23:67:c7:
ee:f9:73:0c:02:40:83:1e:fc:7b:81:13:11:0f:58:
73:0a:69:a6:40:8f:52:7d:c4:50:75:b5:91:2d:47:
39:bc:93:69:a0:4d:60:88:eb:94:17:93:e7:18:ae:
80:c3:2d:a5:04:5e:60:71:bd:b5:f2:2a:f3:1b:a0:
76:16:cf:03:d8:22:25:ff:10:05:02:60:97:f0:3e:
77:3f:42:81:b9:26:f1:0a:ed:3b:e2:b0:27:f0:9e:
6a:d8:1a:d5:f0:e2:9b:7e:e2:11:03:4c:c0:8f:d3:
b1:ad:83:84:0e:29:65:fe:d7:8f:25:b9:5b:43:77:
e5:0d:a4:9b:e2:ed:1d:b3:d8:81:3f:a7:dd:f1:09:
05:37:43:d4:6e:29:3b:1e:33:d0:7d:0e:09:e2:3c:
b2:87:4a:1d:71:ac:40:5b:f7:81:7f:31:e0:05:6e:
8a:b7:74:da:c6:9a:3a:f7:bc:65:e9:48:e1:c0:7c:
06:14:79:f7:a7:4f:5c:fd:86:de:27:4b:8c:aa:89:
e7:d5:31:e8:c4:a5:7f:34:d6:b2:64:61:1f:a8:ae:
8f:e6:e9:93:da:cd:14:c5:7b:27:93:e8:41:87:98:
b8:43:21:e4:bb:1f:21:d1:9e:fd:50:ea:02:2e:0c:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:02:B4:77:DF:72:EC:17:B2:ED:A4:C9:82:A3:C2:67:9A:4F:DF:EB
X509v3 Authority Key Identifier:
keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1d:f9:91:99:70:c4:ff:da:b4:da:85:8c:85:36:a7:9f:74:
86:93:48:c1:0b:bb:a6:b4:b0:90:84:05:9e:f9:41:0b:3b:94:
28:e8:2b:01:6b:ec:08:34:27:a0:eb:a1:d5:b1:28:29:3c:e3:
7f:c2:07:96:99:bd:c9:e5:71:62:43:96:dd:6d:cb:80:0b:2a:
26:6b:6d:90:4a:bf:ae:1b:6f:db:29:f8:e7:df:83:0a:33:40:
53:01:42:5a:3e:6e:f4:b3:c7:9f:3b:3d:ef:c0:dc:da:fb:ac:
42:43:c0:4e:05:48:11:53:75:e9:53:08:77:38:47:aa:93:75:
ac:80:d6:f2:e8:d8:b8:ec:46:33:85:ae:58:fe:91:30:8a:a8:
59:e6:16:e4:8b:81:0c:1f:fc:77:52:db:cc:e9:23:83:d4:83:
64:2f:aa:9d:72:43:d6:5f:9a:f2:8a:13:ed:a3:9a:2c:08:79:
28:65:16:2b:9e:39:de:11:bc:48:6a:34:e3:c2:93:80:30:c1:
da:e4:87:cf:1b:a1:28:91:02:bb:2c:0e:7e:23:75:e7:be:83:
df:81:d3:a3:91:d4:ec:28:85:04:1d:57:35:85:a5:c4:92:01:
b2:52:83:ce:a6:55:2a:b0:72:1d:6d:77:45:75:97:56:1c:1e:
eb:5c:1e:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh0J+oODAslaMabgKVmovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOGJjNWQyYzY5YjkxNjE1Y2NhMjZkYmI2ZWE3MDU3NzAz
NmUyNmQwHhcNMjUxMTA1MDEwMDEwWhcNMjUxMTA2MDEwMDEwWjAzMTEwLwYDVQQD
EygwZDAyYjQ3N2RmNzJlYzE3YjJlZGE0Yzk4MmEzYzI2NzlhNGZkZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpPlzGr69xMfcocjZ8fu+XMMAkCD
Hvx7gRMRD1hzCmmmQI9SfcRQdbWRLUc5vJNpoE1giOuUF5PnGK6Awy2lBF5gcb21
8irzG6B2Fs8D2CIl/xAFAmCX8D53P0KBuSbxCu074rAn8J5q2BrV8OKbfuIRA0zA
j9OxrYOEDill/tePJblbQ3flDaSb4u0ds9iBP6fd8QkFN0PUbik7HjPQfQ4J4jyy
h0odcaxAW/eBfzHgBW6Kt3Taxpo697xl6UjhwHwGFHn3p09c/YbeJ0uMqonn1THo
xKV/NNayZGEfqK6P5umT2s0UxXsnk+hBh5i4QyHkux8h0Z79UOoCLgwigQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0CtHffcuwXsu2kyYKjwmeaT9/rMB8GA1UdIwQY
MBaAFG2LxdLGm5FhXMom27bqcFdwNuJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEt
NzFjMjk2ZDQ5NjlmLzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEtNzFjMjk2ZDQ5Njlm
LzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB35kZlw
xP/atNqFjIU2p590hpNIwQu7prSwkIQFnvlBCzuUKOgrAWvsCDQnoOuh1bEoKTzj
f8IHlpm9yeVxYkOW3W3LgAsqJmttkEq/rhtv2yn459+DCjNAUwFCWj5u9LPHnzs9
78Dc2vusQkPATgVIEVN16VMIdzhHqpN1rIDW8ujYuOxGM4WuWP6RMIqoWeYW5IuB
DB/8d1LbzOkjg9SDZC+qnXJD1l+a8ooT7aOaLAh5KGUWK5453hG8SGo048KTgDDB
2uSHzxuhKJECuywOfiN1576D34HTo5HU7CiFBB1XNYWlxJIBslKDzqZVKrByHW13
RXWXVhwe61weWA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:20 2025 by rpki-client