Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier: E2j1bNQJrg0352TmiXXe/4UVnb+E4hhhLCrZRbF6XmI=
Subject key identifier: 49:B5:76:FF:7C:B6:1A:D6:F0:E3:D4:A7:F2:0A:D5:3A:22:66:C1:49
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 019A4F627D74C65B2153273B9F8FFB2BD0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number: 161A
Signing time: Tue 04 Nov 2025 15:00:45 +0000
Manifest this update: Tue 04 Nov 2025 15:00:45 +0000
Manifest next update: Wed 05 Nov 2025 15:00:45 +0000
Files and hashes: 1: JlQN0N4As8kTE_2777wqlcFNrC8.roa (hash: gQA+8fA2lRTUYRE2yD6RworLn/rUFJdeb4rtkckOnyE=)
2: WD7cwf6HLxZKq0IMG8YbMTooJt0.roa (hash: JexN5Bcs7RxXPWQCAkKPWPwbZPwuEud7FpPGiuV9xSU=)
3: n0VCvrGvbIgBmTHfdTvtFpgH4bs.roa (hash: ukpF9blWLJ1fHC+qQnWNibfuLjVHA9hpURE/X4EaFzY=)
4: qObypTg-nOBL35cm5Sg2yM7Yo3s.roa (hash: rh8dBS1PUlDYnkodpVPvUZaeXyMvofP2iGR3Qp60YxQ=)
5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: 0+0CAN1KnO/BYF5X0pu17XpmqC3Y3mjiufKRLHkNeDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7d:74:c6:5b:21:53:27:3b:9f:8f:fb:2b:d0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Nov 4 15:00:45 2025 GMT
Not After : Nov 5 15:00:45 2025 GMT
Subject: CN=49b576ff7cb61ad6f0e3d4a7f20ad53a2266c149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:1f:eb:f6:48:6c:0a:03:13:b9:99:47:29:
8a:ab:29:a4:da:44:4b:b2:b1:11:0d:2e:de:5d:7a:
e2:9a:fc:7c:15:2d:13:51:24:ee:19:ed:e9:01:7a:
2d:59:c3:7d:a3:ea:4d:55:06:04:43:2b:74:68:8a:
73:b4:81:33:4d:b5:7d:85:96:65:56:64:db:1a:42:
66:cb:40:16:b3:eb:5d:c2:57:da:3d:db:02:a1:7c:
b2:50:20:93:6f:11:90:ae:b3:0f:8e:3f:2e:4e:17:
75:05:63:5d:e3:58:95:3a:3d:5e:1f:ee:5b:c0:86:
ee:0a:11:a1:4d:98:f0:6c:2b:da:0c:0a:7a:39:e8:
80:31:e7:7c:c1:92:b7:66:44:9a:9e:59:7c:3f:1b:
c9:bd:0d:2b:8c:b5:76:9f:f3:64:21:c8:07:c7:93:
89:4c:a5:b0:fc:40:f5:76:f6:e6:f0:3f:cd:54:e5:
ec:2f:d9:14:cb:62:8c:67:1d:50:17:09:38:92:47:
fd:75:0c:b2:5b:68:ef:58:ba:39:c7:5c:2e:a4:ef:
b5:a8:a0:87:f5:48:46:47:66:08:2c:ae:01:69:c6:
d5:54:70:9a:52:ec:55:64:fa:cc:c7:04:41:47:91:
3c:10:33:39:1c:c7:73:e1:3c:8a:11:48:c7:b4:31:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B5:76:FF:7C:B6:1A:D6:F0:E3:D4:A7:F2:0A:D5:3A:22:66:C1:49
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b9:e0:0d:e7:ec:f3:81:fe:f3:ac:24:d2:16:0b:79:11:6d:
a4:43:0a:77:55:c0:3d:3b:8d:67:89:2c:8d:ea:aa:36:e7:4e:
ac:79:17:5c:7e:2b:51:d5:e0:77:43:fa:16:ff:8d:fe:6d:d2:
47:25:3a:3c:97:a6:7d:7f:1f:ee:7a:a8:1e:58:88:fa:bf:d7:
f1:64:51:87:dd:0b:ba:2d:dd:a6:e8:59:75:7f:72:fa:6b:47:
d3:15:c4:41:5d:97:03:7f:5b:30:31:2d:4c:75:f5:07:cd:87:
b7:d3:be:f7:e1:08:3d:8b:1d:ba:84:8c:ab:94:e3:39:20:39:
f1:79:a5:5b:ce:b0:7c:9d:5f:98:c2:ad:d9:87:d9:39:95:dc:
de:ba:70:7a:49:ef:a0:3b:51:a7:a2:e6:e4:49:2c:ea:53:68:
02:f2:92:fc:a6:eb:11:54:92:cf:b6:7a:cc:f4:f7:bf:6d:3a:
71:95:04:53:37:70:e3:de:24:ea:43:15:9e:39:0a:02:09:41:
3e:f1:05:b6:59:a5:cb:d5:dd:5d:b9:ac:1f:4f:56:2b:84:52:
c5:bb:40:10:0d:b2:ef:a4:e2:c8:73:8c:6f:df:0f:b0:df:6b:
3a:f2:e9:ee:aa:7b:09:b7:c4:fe:64:9e:e6:2e:92:57:ac:3c:
a6:2f:65:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYn10xlshUyc7n4/7K9DQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjc0Y2Q4NDY0OTMxMzhmNTIyYzU3YzAwNjViNWM2MDUx
MmRkMDkwHhcNMjUxMTA0MTUwMDQ1WhcNMjUxMTA1MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg0OWI1NzZmZjdjYjYxYWQ2ZjBlM2Q0YTdmMjBhZDUzYTIyNjZjMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZof6/ZIbAoDE7mZRymKqymk2kRL
srERDS7eXXrimvx8FS0TUSTuGe3pAXotWcN9o+pNVQYEQyt0aIpztIEzTbV9hZZl
VmTbGkJmy0AWs+tdwlfaPdsCoXyyUCCTbxGQrrMPjj8uThd1BWNd41iVOj1eH+5b
wIbuChGhTZjwbCvaDAp6OeiAMed8wZK3ZkSanll8PxvJvQ0rjLV2n/NkIcgHx5OJ
TKWw/ED1dvbm8D/NVOXsL9kUy2KMZx1QFwk4kkf9dQyyW2jvWLo5x1wupO+1qKCH
9UhGR2YILK4BacbVVHCaUuxVZPrMxwRBR5E8EDM5HMdz4TyKEUjHtDFjsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm1dv98thrW8OPUp/IK1ToiZsFJMB8GA1UdIwQY
MBaAFMv3TNhGSTE49SLFfABltcYFEt0JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2Yt
OTgyZDFmMjFhMzJiLzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2YtOTgyZDFmMjFhMzJi
LzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLngDefs
84H+86wk0hYLeRFtpEMKd1XAPTuNZ4ksjeqqNudOrHkXXH4rUdXgd0P6Fv+N/m3S
RyU6PJemfX8f7nqoHliI+r/X8WRRh90Lui3dpuhZdX9y+mtH0xXEQV2XA39bMDEt
THX1B82Ht9O+9+EIPYsduoSMq5TjOSA58XmlW86wfJ1fmMKt2YfZOZXc3rpweknv
oDtRp6Lm5Eks6lNoAvKS/KbrEVSSz7Z6zPT3v206cZUEUzdw494k6kMVnjkKAglB
PvEFtlmly9XdXbmsH09WK4RSxbtAEA2y76TiyHOMb98PsN9rOvLp7qp7CbfE/mSe
5i6SV6w8pi9l2g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:10 2025 by rpki-client