Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier: s6WprXyT4BsDPBDuXP12d/9KJGVAgd2LSLLeG5T17EE=
Subject key identifier: 2D:5A:5F:64:2F:0A:DF:76:48:C7:34:67:68:47:66:4A:F7:5D:9C:25
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer: /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial: 019A4F9923F62C9830AB65AA85080C661BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number: 09D8
Signing time: Tue 04 Nov 2025 16:00:27 +0000
Manifest this update: Tue 04 Nov 2025 16:00:27 +0000
Manifest next update: Wed 05 Nov 2025 16:00:27 +0000
Files and hashes: 1: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: QyZFy5S343aA+GdxgiSEcVqZQFSmIiFC5BZp3ciOMkk=)
2: hyeaa7WHUt2Rcq_9qyU3ynO8FJA.roa (hash: 1lxOMkF/m/0MqdFiTX81zywF3SRcX+JuIQEJSNJChMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:23:f6:2c:98:30:ab:65:aa:85:08:0c:66:1b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Validity
Not Before: Nov 4 16:00:27 2025 GMT
Not After : Nov 5 16:00:27 2025 GMT
Subject: CN=2d5a5f642f0adf7648c734676847664af75d9c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:1f:bc:d2:88:72:bc:ca:c1:a0:46:83:65:
03:01:bf:6e:e2:c0:fa:08:6c:e1:8d:31:64:06:be:
7d:38:4d:83:c0:88:2a:3e:44:e7:42:a7:a7:a4:a9:
83:ea:b5:4a:59:b9:6b:f2:08:97:8a:57:ca:7f:53:
0d:c5:06:30:18:f5:21:bd:28:e1:d3:b6:ec:fb:d0:
4f:94:9d:24:c7:1b:a8:25:38:78:94:70:30:2a:49:
ac:73:69:d2:c3:2e:f2:bb:af:1f:60:c4:ed:1f:79:
8d:94:cf:d7:87:32:ae:89:e0:5c:79:58:9b:e0:ae:
b3:72:02:fa:99:bd:00:a8:34:2f:5b:49:94:fe:43:
e9:eb:7b:11:ad:f4:25:69:61:d9:4d:50:f3:81:1b:
c9:92:c0:f3:89:ff:20:a7:42:b5:44:47:49:27:a4:
74:3e:bf:17:3a:06:b1:08:50:5b:9d:68:fc:3e:ac:
e4:41:12:4a:a0:38:e1:97:3c:37:c2:2b:21:82:66:
19:43:dd:1c:63:cf:28:f3:9d:fd:b0:8b:cb:4d:35:
76:77:c0:42:a1:d4:a2:4a:fc:09:4b:92:3f:81:9c:
dc:83:7d:3c:b9:54:62:58:78:5f:0b:af:18:4c:c4:
48:a1:48:72:0b:9d:58:46:83:4e:91:e2:10:50:b1:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5A:5F:64:2F:0A:DF:76:48:C7:34:67:68:47:66:4A:F7:5D:9C:25
X509v3 Authority Key Identifier:
keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d5:48:39:6c:6f:c7:4b:38:7b:d4:b8:50:e2:10:8c:63:95:
6f:0d:16:f0:a3:dc:e1:59:96:fe:d8:f6:15:4c:d2:39:70:c3:
ef:0a:76:93:44:cf:ce:48:e9:33:4b:a7:67:df:c0:fa:03:b0:
c9:b2:34:e3:d3:d2:b2:54:99:6c:9d:23:dc:cc:c9:55:af:39:
18:e7:43:d9:6e:aa:ed:a1:98:dc:38:86:cb:95:e1:ad:4d:4b:
10:55:02:80:4f:03:ee:ee:02:18:a8:2f:db:48:ad:cf:5b:71:
c7:1a:65:27:34:9a:65:5c:4a:3f:5c:5b:7c:fd:0f:f9:80:4a:
81:dc:0e:21:de:42:d0:e3:9a:1b:e7:08:6e:85:c9:f8:59:81:
a7:8a:6c:00:a6:d6:c0:b9:3b:dc:1d:4a:33:89:76:d4:f7:b7:
1a:89:92:de:92:48:ae:ab:6a:60:62:e8:d6:aa:d0:10:11:a3:
55:2d:07:02:3d:a1:e8:8c:9f:0a:34:71:a4:a7:92:f3:20:3c:
b6:e0:38:f1:f6:8d:3f:9f:c1:76:54:a2:24:ec:19:a2:fd:78:
3f:77:08:3e:54:b2:f2:a6:7a:a0:9d:1e:e1:ea:99:59:05:73:
3e:24:d1:f9:f6:91:8d:0b:cf:19:f0:84:a2:58:f9:11:95:2b:
b0:67:ea:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmSP2LJgwq2WqhQgMZhutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxODRjODA1ZDRlNTNjMmExMzJjNzM5YzRlMzc1MmFmYzM1
YWU5OTUwHhcNMjUxMTA0MTYwMDI3WhcNMjUxMTA1MTYwMDI3WjAzMTEwLwYDVQQD
EygyZDVhNWY2NDJmMGFkZjc2NDhjNzM0Njc2ODQ3NjY0YWY3NWQ5YzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwwfvNKIcrzKwaBGg2UDAb9u4sD6
CGzhjTFkBr59OE2DwIgqPkTnQqenpKmD6rVKWblr8giXilfKf1MNxQYwGPUhvSjh
07bs+9BPlJ0kxxuoJTh4lHAwKkmsc2nSwy7yu68fYMTtH3mNlM/XhzKuieBceVib
4K6zcgL6mb0AqDQvW0mU/kPp63sRrfQlaWHZTVDzgRvJksDzif8gp0K1REdJJ6R0
Pr8XOgaxCFBbnWj8PqzkQRJKoDjhlzw3wishgmYZQ90cY88o8539sIvLTTV2d8BC
odSiSvwJS5I/gZzcg308uVRiWHhfC68YTMRIoUhyC51YRoNOkeIQULHgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1aX2QvCt92SMc0Z2hHZkr3XZwlMB8GA1UdIwQY
MBaAFHGEyAXU5TwqEyxznE43Uq/DWumVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83MjZhNTItNWM3My00OTA1LWExOWQt
OWY3MmY4ZGVjNDY4LzEvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83MjZhNTItNWM3My00OTA1LWExOWQtOWY3MmY4ZGVjNDY4
LzEvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNVIOWxv
x0s4e9S4UOIQjGOVbw0W8KPc4VmW/tj2FUzSOXDD7wp2k0TPzkjpM0unZ9/A+gOw
ybI049PSslSZbJ0j3MzJVa85GOdD2W6q7aGY3DiGy5XhrU1LEFUCgE8D7u4CGKgv
20itz1txxxplJzSaZVxKP1xbfP0P+YBKgdwOId5C0OOaG+cIboXJ+FmBp4psAKbW
wLk73B1KM4l21Pe3GomS3pJIrqtqYGLo1qrQEBGjVS0HAj2h6IyfCjRxpKeS8yA8
tuA48faNP5/BdlSiJOwZov14P3cIPlSy8qZ6oJ0e4eqZWQVzPiTR+faRjQvPGfCE
olj5EZUrsGfqMA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:54 2025 by rpki-client