Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
File: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft (raw, json)
Hash identifier: lWVa/eo+9EwdxMMToOTBHFLfZI2gWIR+gEz6dGe+Igw=
Subject key identifier: 05:CE:7D:8C:B2:3E:A4:13:B5:E1:53:AB:81:F9:96:BF:0E:5E:3E:66
Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
Certificate issuer: /CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Certificate serial: 019A522CC30E6C0DC68DAC2316BC3D1AE6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
Manifest number: 1043
Signing time: Wed 05 Nov 2025 04:00:56 +0000
Manifest this update: Wed 05 Nov 2025 04:00:56 +0000
Manifest next update: Thu 06 Nov 2025 04:00:56 +0000
Files and hashes: 1: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl (hash: 63FVdnL6sLhPL26zrtME/mfr+z6JTCI7xrxT859PWu8=)
2: e7A-mRDgO875HCDrxITlnnJ3Ki0.roa (hash: 7vWhmuACkkydDfcxmeEEUNVhiR5m0fscFivB+SuNzME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:c3:0e:6c:0d:c6:8d:ac:23:16:bc:3d:1a:e6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Validity
Not Before: Nov 5 04:00:56 2025 GMT
Not After : Nov 6 04:00:56 2025 GMT
Subject: CN=05ce7d8cb23ea413b5e153ab81f996bf0e5e3e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:6a:7c:58:41:88:4a:b2:11:80:15:9f:d8:
c8:15:9a:1e:74:53:0a:8a:fe:1b:b6:69:bf:cb:d0:
12:0f:dd:ee:d8:fd:8d:e5:63:83:03:87:fc:bd:0c:
11:d0:12:27:94:f2:fa:a2:e0:f5:1a:37:d4:a5:63:
71:7d:c8:45:39:45:e5:0b:e8:d6:ec:d4:2e:cd:26:
cb:90:6f:7c:9d:ee:ae:c9:c1:71:ae:96:3d:da:3b:
f9:ad:d8:68:5d:19:3a:69:bd:7f:e4:0b:5e:46:2a:
69:2f:1f:c0:8d:45:f7:6b:54:d7:c4:41:68:e1:27:
ad:ed:b5:fb:d1:b4:b4:7d:1e:c3:15:76:c9:15:7a:
3e:de:35:39:a2:52:e3:66:cb:0a:17:23:ba:45:55:
32:ec:69:1c:f9:2d:e6:10:d3:41:3a:9c:a4:e6:8d:
13:4e:31:b7:35:28:af:d2:01:f3:d4:9a:36:df:c5:
75:72:7b:dc:c9:e4:fc:ae:05:2c:14:6d:c4:2c:58:
69:3d:55:2f:13:b7:b1:77:2a:85:3a:8d:f3:93:3f:
23:93:15:d2:fd:e5:09:bd:c7:11:de:98:1f:0f:51:
f3:43:78:73:fe:ef:76:7d:73:85:c4:8c:67:6f:16:
08:91:35:75:05:70:71:a0:ff:76:f4:36:93:f8:9e:
2f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:7D:8C:B2:3E:A4:13:B5:E1:53:AB:81:F9:96:BF:0E:5E:3E:66
X509v3 Authority Key Identifier:
keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:3a:ca:87:f6:ae:0b:6d:3a:08:4f:18:dd:87:9b:fb:51:e3:
d7:e7:13:38:47:d6:1e:3e:21:29:e2:8c:b6:3f:95:27:f4:76:
9d:ac:7a:16:2d:d5:e8:29:af:c8:38:0f:7c:3e:98:88:5a:34:
82:53:38:8b:41:8b:a6:95:0c:57:b6:89:5a:fa:09:12:ec:63:
fe:2d:6f:d6:25:1a:6b:19:61:f1:39:cb:d2:f3:14:66:a3:df:
77:84:50:c5:73:95:21:cd:d9:f5:e1:57:7e:7f:47:90:37:95:
09:2e:b9:e9:36:70:39:4a:2b:ea:45:20:56:ec:b5:51:dd:20:
0c:ef:e2:7d:e2:8f:ea:d9:d8:fb:55:90:09:3c:9b:e6:d0:bc:
87:22:e7:a6:b4:f8:a6:20:e7:fe:81:a1:b9:a2:09:39:1c:fa:
34:d7:b0:94:d2:fd:c3:54:7c:e0:36:8f:7b:e1:c0:76:37:80:
6a:ba:17:a6:c1:fd:13:96:ae:78:6c:fe:91:c5:2b:86:ed:34:
f3:66:e5:bf:ac:a9:a1:ad:c6:bd:eb:9c:fc:8a:f9:c3:59:ae:
f1:3a:2b:1a:11:77:68:2c:6e:86:4c:f3:01:0a:37:a3:d6:4d:
72:9f:21:06:ad:3d:0c:08:d1:e1:75:94:33:09:12:38:46:55:
d1:cf:53:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLMMObA3GjawjFrw9GubCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzOThlYzE1YmMwMzljNWE2MDQyZmJlOTA0ODQ0NTZiZTAy
ZGE3YjkwHhcNMjUxMTA1MDQwMDU2WhcNMjUxMTA2MDQwMDU2WjAzMTEwLwYDVQQD
EygwNWNlN2Q4Y2IyM2VhNDEzYjVlMTUzYWI4MWY5OTZiZjBlNWUzZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0FqfFhBiEqyEYAVn9jIFZoedFMK
iv4btmm/y9ASD93u2P2N5WODA4f8vQwR0BInlPL6ouD1GjfUpWNxfchFOUXlC+jW
7NQuzSbLkG98ne6uycFxrpY92jv5rdhoXRk6ab1/5AteRippLx/AjUX3a1TXxEFo
4Set7bX70bS0fR7DFXbJFXo+3jU5olLjZssKFyO6RVUy7Gkc+S3mENNBOpyk5o0T
TjG3NSiv0gHz1Jo238V1cnvcyeT8rgUsFG3ELFhpPVUvE7exdyqFOo3zkz8jkxXS
/eUJvccR3pgfD1HzQ3hz/u92fXOFxIxnbxYIkTV1BXBxoP929DaT+J4v8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXOfYyyPqQTteFTq4H5lr8OXj5mMB8GA1UdIwQY
MBaAFGOY7BW8A5xaYEL76QSERWvgLae5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NzExZDktN2Y3Yy00ZWRiLWE2ODct
ZDZmMDRlNzA4NDU0LzEvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NzExZDktN2Y3Yy00ZWRiLWE2ODctZDZmMDRlNzA4NDU0
LzEvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4zrKh/au
C206CE8Y3Yeb+1Hj1+cTOEfWHj4hKeKMtj+VJ/R2nax6Fi3V6CmvyDgPfD6YiFo0
glM4i0GLppUMV7aJWvoJEuxj/i1v1iUaaxlh8TnL0vMUZqPfd4RQxXOVIc3Z9eFX
fn9HkDeVCS656TZwOUor6kUgVuy1Ud0gDO/ifeKP6tnY+1WQCTyb5tC8hyLnprT4
piDn/oGhuaIJORz6NNewlNL9w1R84DaPe+HAdjeAaroXpsH9E5aueGz+kcUrhu00
82blv6ypoa3Gveuc/Ir5w1mu8TorGhF3aCxuhkzzAQo3o9ZNcp8hBq09DAjR4XWU
MwkSOEZV0c9T7A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:41:38 2025 by rpki-client