Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: tXVwEhMS8xR0qGO8nOOkdGBNBg5OOHfkmMiwvhXfhOg=
Subject key identifier: FB:90:D9:CB:11:15:8B:93:FC:8B:E9:CB:02:9F:F3:C0:5E:39:9E:B0
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 019A4EF5DDAB8B972F78BBD5B2A7FB23FA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 11F7
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: aemvDugLTDNQzVMmb9oDaX5ljkHAGWGU0WLJ/NwGHYI=)
2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:dd:ab:8b:97:2f:78:bb:d5:b2:a7:fb:23:fa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=fb90d9cb11158b93fc8be9cb029ff3c05e399eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:96:2b:13:34:94:70:44:98:5f:ad:f6:a0:
1e:1c:57:02:60:3a:1d:53:80:0a:2c:60:53:a4:26:
6c:f2:84:76:67:d9:e3:eb:65:f0:eb:aa:52:cb:88:
fa:e5:e0:ec:0d:29:ff:cf:80:d6:32:f2:3e:28:ad:
77:67:18:7b:33:11:de:f4:98:ce:9a:e8:46:37:e5:
2e:95:c2:53:ca:ab:4a:17:e8:f0:8d:fa:d9:7d:8a:
cf:62:25:a1:c1:ea:c8:d1:3f:a0:ff:c7:30:e2:f8:
9e:fc:c6:79:c5:30:58:38:32:a0:7b:ea:bf:c7:25:
74:b2:f6:b9:f3:33:28:d9:5a:f9:fe:d4:fa:b3:97:
b7:11:48:ff:b0:33:a3:e6:39:b1:3d:d8:cc:f2:e4:
1e:c4:2b:05:db:99:c7:11:43:e5:7d:fb:66:a0:f6:
53:5c:e4:8e:89:3b:78:44:1a:3e:db:88:a5:cd:ea:
40:87:1d:dd:49:e6:c2:07:89:64:80:78:f9:ca:9c:
76:65:a0:ca:6a:ca:d7:1f:a0:cb:5e:a5:2a:c7:55:
d4:81:45:3f:0a:4d:1d:0d:ca:60:55:61:61:26:8f:
bb:ed:b5:40:8a:07:da:06:a8:84:7c:68:c6:79:cc:
16:0d:a3:05:9d:06:58:1e:f0:c8:bc:46:6d:0a:36:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:90:D9:CB:11:15:8B:93:FC:8B:E9:CB:02:9F:F3:C0:5E:39:9E:B0
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f1:ba:87:e3:56:3f:d6:1a:33:51:8d:17:bc:06:ac:f2:cd:
84:d9:8d:6a:c6:27:0a:55:26:48:85:db:31:25:c4:b8:2b:a8:
30:d7:35:36:72:67:fe:3d:9d:e7:a5:3d:96:43:7a:a7:7d:af:
86:1d:f0:2c:64:ce:f4:ab:c3:ea:5e:6a:48:e2:5a:01:5c:87:
f1:04:fd:cf:3b:e0:c5:a1:76:42:75:c3:18:c1:1b:2b:62:a4:
dd:f4:d6:01:95:65:b8:15:61:ad:3e:ad:24:27:1d:7c:ce:ca:
f8:85:82:c5:a8:11:29:2f:31:85:05:15:bd:1f:d8:60:59:a3:
c6:28:b6:c0:ed:e1:47:6d:ef:21:72:5d:4a:94:f2:60:c7:e3:
f9:a1:0a:fa:5b:08:72:9a:6a:90:54:f4:cd:a2:86:80:d1:45:
15:e3:34:2c:58:e1:ab:b6:ca:55:62:e4:d4:46:a4:e0:09:52:
e1:93:6b:d7:36:56:78:c2:98:6b:f5:42:56:ab:37:a9:8f:4b:
b0:9d:20:c3:da:54:ee:a6:65:ad:2b:02:83:67:b0:b7:c1:a3:
e7:54:60:b7:82:3e:84:0b:5b:5d:bc:12:14:18:cf:64:de:61:
ec:80:ff:50:ad:9b:cf:f2:2c:8e:e5:a9:00:9a:ec:a5:fe:c1:
27:2c:8a:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9d2ri5cveLvVsqf7I/puMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOGMyMDMwYTU5NzFjNGE1NDA5NmE4ZWRiYjIxMjExZTU0
MjE2YTcwHhcNMjUxMTA0MTMwMjA3WhcNMjUxMTA1MTMwMjA3WjAzMTEwLwYDVQQD
EyhmYjkwZDljYjExMTU4YjkzZmM4YmU5Y2IwMjlmZjNjMDVlMzk5ZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjmWKxM0lHBEmF+t9qAeHFcCYDod
U4AKLGBTpCZs8oR2Z9nj62Xw66pSy4j65eDsDSn/z4DWMvI+KK13Zxh7MxHe9JjO
muhGN+UulcJTyqtKF+jwjfrZfYrPYiWhwerI0T+g/8cw4vie/MZ5xTBYODKge+q/
xyV0sva58zMo2Vr5/tT6s5e3EUj/sDOj5jmxPdjM8uQexCsF25nHEUPlfftmoPZT
XOSOiTt4RBo+24ilzepAhx3dSebCB4lkgHj5ypx2ZaDKasrXH6DLXqUqx1XUgUU/
Ck0dDcpgVWFhJo+77bVAigfaBqiEfGjGecwWDaMFnQZYHvDIvEZtCjbVWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuQ2csRFYuT/IvpywKf88BeOZ6wMB8GA1UdIwQY
MBaAFNGMIDCllxxKVAlqjtuyEhHlQhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQt
NTNhNjcyZDE0YjdhLzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQtNTNhNjcyZDE0Yjdh
LzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/G6h+NW
P9YaM1GNF7wGrPLNhNmNasYnClUmSIXbMSXEuCuoMNc1NnJn/j2d56U9lkN6p32v
hh3wLGTO9KvD6l5qSOJaAVyH8QT9zzvgxaF2QnXDGMEbK2Kk3fTWAZVluBVhrT6t
JCcdfM7K+IWCxagRKS8xhQUVvR/YYFmjxii2wO3hR23vIXJdSpTyYMfj+aEK+lsI
cppqkFT0zaKGgNFFFeM0LFjhq7bKVWLk1Eak4AlS4ZNr1zZWeMKYa/VCVqs3qY9L
sJ0gw9pU7qZlrSsCg2ewt8Gj51Rgt4I+hAtbXbwSFBjPZN5h7ID/UK2bz/IsjuWp
AJrspf7BJyyKdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:34 2025 by rpki-client