Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: CpaPCHGUQcjAcmAghM55fRvtfh5zwa2SSBTUQ26L86o=
Subject key identifier: 43:E4:DC:BB:29:25:78:42:B8:72:70:94:30:A3:63:6F:7A:8D:D6:76
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019A4C97C3852CD926D23F27312CF4C657DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 055B
Signing time: Tue 04 Nov 2025 02:00:05 +0000
Manifest this update: Tue 04 Nov 2025 02:00:05 +0000
Manifest next update: Wed 05 Nov 2025 02:00:05 +0000
Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: rbop/cItmZ9reEyKhj4WiM/arOQbYuESRVc7q+5kntg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:c3:85:2c:d9:26:d2:3f:27:31:2c:f4:c6:57:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Nov 4 02:00:05 2025 GMT
Not After : Nov 5 02:00:05 2025 GMT
Subject: CN=43e4dcbb29257842b872709430a3636f7a8dd676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a3:a6:4c:11:8e:94:fe:9e:80:76:f1:57:88:
f5:64:8e:85:d9:8a:32:fa:80:28:b5:be:b8:ca:73:
fc:24:5d:af:f9:81:c0:12:cd:d4:5f:aa:de:ea:b0:
45:87:93:53:e5:6e:c0:83:ee:51:0e:26:22:8c:80:
65:dc:59:38:21:fc:69:51:b5:5b:1c:61:62:d8:5d:
b3:5d:68:d0:c5:43:90:19:8d:3b:f3:87:88:10:f5:
0e:f1:fd:e1:07:60:b8:74:bf:f6:f1:d4:9f:22:b2:
0c:d2:53:89:ba:e6:c2:39:a4:79:1b:1f:d4:cc:2a:
91:fa:ce:06:96:94:f2:d1:3d:44:42:04:5a:73:7d:
73:3f:7b:0b:92:5e:9f:a3:9b:64:07:20:aa:82:b5:
59:35:db:ca:ff:5c:3b:3b:27:18:39:1e:6b:71:e7:
5d:e0:b6:a5:76:b4:f8:65:0b:2b:55:f0:6c:d5:4b:
03:50:2b:72:16:52:40:01:9c:29:6b:e8:7b:a2:bc:
1e:3a:8c:cb:d5:12:88:e8:d2:41:3e:bf:2e:ed:d4:
76:da:64:b2:01:50:04:66:81:cb:42:da:ff:05:d8:
c3:e3:5c:bc:74:fb:84:b9:9a:b4:f5:9c:8d:a2:0e:
8f:ce:6f:5d:27:6a:59:c3:d6:29:77:88:b6:ec:8c:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E4:DC:BB:29:25:78:42:B8:72:70:94:30:A3:63:6F:7A:8D:D6:76
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c1:e1:75:c7:97:f6:81:11:3f:f0:45:aa:cd:12:14:31:82:
86:cd:b9:3d:6b:7a:c3:6e:ca:41:49:f2:18:50:37:69:d1:b2:
90:18:50:e3:ca:ef:fa:5d:08:d8:6c:74:db:86:8d:c4:14:5b:
71:94:55:f3:32:ac:11:80:72:22:75:de:65:88:78:60:0e:5c:
90:39:b5:bf:a8:bf:e8:65:06:1f:f6:aa:1c:af:32:03:ff:ab:
d8:6f:3d:db:1d:c6:29:15:1d:74:d7:d0:86:4c:fc:e5:b3:ec:
8f:c9:07:4b:33:a5:5f:48:b8:75:d7:b8:33:42:cd:71:6a:57:
0c:33:93:53:27:9f:fc:c6:49:4b:9f:ff:a4:8d:7d:52:d6:f3:
47:74:45:70:1a:9b:e5:5b:7d:b7:48:c8:b1:a5:7e:fe:a6:46:
0b:68:e1:16:d4:6c:fb:e5:2f:cd:69:5a:0b:8e:b8:e5:1f:d0:
4c:6f:13:c2:5b:7a:4c:9a:28:1a:33:c8:41:4b:73:03:6f:0b:
be:9a:bb:dd:85:25:82:ed:a2:2b:71:d4:17:03:66:38:b0:cf:
f9:d1:0a:fe:63:d6:8f:61:f8:b6:0e:c8:65:1e:0f:59:82:8e:
3e:ec:1d:64:1e:6d:93:d7:ac:59:22:cb:ac:63:6a:3a:8f:a4:
ac:42:ab:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMl8OFLNkm0j8nMSz0xlfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzBlYjQzNTNlZDc1MGZhZjIzZjJmMWUxNDAxOGM2Y2Zj
NjI3MTUwHhcNMjUxMTA0MDIwMDA1WhcNMjUxMTA1MDIwMDA1WjAzMTEwLwYDVQQD
Eyg0M2U0ZGNiYjI5MjU3ODQyYjg3MjcwOTQzMGEzNjM2ZjdhOGRkNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqOmTBGOlP6egHbxV4j1ZI6F2Yoy
+oAotb64ynP8JF2v+YHAEs3UX6re6rBFh5NT5W7Ag+5RDiYijIBl3Fk4IfxpUbVb
HGFi2F2zXWjQxUOQGY0784eIEPUO8f3hB2C4dL/28dSfIrIM0lOJuubCOaR5Gx/U
zCqR+s4GlpTy0T1EQgRac31zP3sLkl6fo5tkByCqgrVZNdvK/1w7OycYOR5rcedd
4LaldrT4ZQsrVfBs1UsDUCtyFlJAAZwpa+h7orweOozL1RKI6NJBPr8u7dR22mSy
AVAEZoHLQtr/BdjD41y8dPuEuZq09ZyNog6Pzm9dJ2pZw9Ypd4i27IzfKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPk3LspJXhCuHJwlDCjY296jdZ2MB8GA1UdIwQY
MBaAFMsw60NT7XUPryPy8eFAGMbPxicVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgt
MWI5YTMyM2M1NzBiLzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgtMWI5YTMyM2M1NzBi
LzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8HhdceX
9oERP/BFqs0SFDGChs25PWt6w27KQUnyGFA3adGykBhQ48rv+l0I2Gx024aNxBRb
cZRV8zKsEYByInXeZYh4YA5ckDm1v6i/6GUGH/aqHK8yA/+r2G892x3GKRUddNfQ
hkz85bPsj8kHSzOlX0i4dde4M0LNcWpXDDOTUyef/MZJS5//pI19UtbzR3RFcBqb
5Vt9t0jIsaV+/qZGC2jhFtRs++UvzWlaC4645R/QTG8Twlt6TJooGjPIQUtzA28L
vpq73YUlgu2iK3HUFwNmOLDP+dEK/mPWj2H4tg7IZR4PWYKOPuwdZB5tk9esWSLL
rGNqOo+krEKr+A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:42 2025 by rpki-client