Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: OOR+/xgFrTaDmNlE5umrJ3d1eHr2WnQXoTeFA/mBYGA=
Subject key identifier: 02:D3:C2:66:92:14:FC:C6:CB:C1:3C:89:DC:4A:8F:41:3E:C4:48:E7
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 019A4C6183AD10D329475572501DC946DA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0F79
Signing time: Tue 04 Nov 2025 01:00:50 +0000
Manifest this update: Tue 04 Nov 2025 01:00:50 +0000
Manifest next update: Wed 05 Nov 2025 01:00:50 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: kGzTom9d+d1xjWmdMvrHbjU2qO6ZUJbtPGxh1pacsEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:83:ad:10:d3:29:47:55:72:50:1d:c9:46:da:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Nov 4 01:00:50 2025 GMT
Not After : Nov 5 01:00:50 2025 GMT
Subject: CN=02d3c2669214fcc6cbc13c89dc4a8f413ec448e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:8e:94:14:74:0d:23:06:f3:ba:eb:55:98:
cb:0d:3b:63:6e:17:6f:3a:25:c3:a3:b4:0f:58:00:
43:dd:10:07:fa:19:3c:61:bf:fe:d5:5a:eb:7c:77:
c8:0f:36:8f:f7:bb:5f:ba:61:7a:db:85:de:8c:78:
21:88:0b:de:b7:d2:07:5a:d0:26:15:bd:a7:56:21:
e3:b3:5a:11:65:d4:0b:40:dd:f3:4f:84:f2:62:8f:
0c:10:e3:5f:07:fa:9a:98:c3:2c:12:65:2e:79:0b:
c6:4a:32:d5:aa:ee:84:aa:44:6d:e9:a6:aa:e8:5d:
18:74:17:ee:d4:57:ad:26:04:cc:3c:95:84:4b:d2:
2a:a7:55:47:c8:1c:56:d2:0a:53:36:8b:ce:3d:df:
59:6f:5a:bc:04:29:c1:18:2a:6f:fe:40:e1:dd:5b:
c3:97:4d:6a:1a:b3:0b:e4:f7:a5:1d:ed:d3:2a:85:
43:0a:28:cf:d3:a4:9c:1b:10:ba:1b:5d:67:d5:46:
1d:79:15:87:eb:05:f9:bb:65:ff:45:c3:68:07:59:
b7:5d:ea:60:fa:ba:c9:22:18:2e:5a:22:84:67:ae:
ac:b8:c5:0e:07:f5:9f:3b:8e:d6:70:75:ff:b4:85:
ec:56:24:fb:a0:06:1e:df:12:91:63:00:c4:58:33:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D3:C2:66:92:14:FC:C6:CB:C1:3C:89:DC:4A:8F:41:3E:C4:48:E7
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6a:f2:1b:11:11:5f:59:74:ec:7b:31:fa:7d:1b:5b:c1:be:
4d:1b:77:59:28:cb:5e:50:35:c3:48:df:2a:43:03:9d:e3:66:
1d:e6:d2:b7:36:73:99:3d:34:96:6f:ed:06:de:81:ad:30:5c:
b1:5f:65:dd:f7:72:12:ea:2b:7f:cd:9d:99:e8:08:ae:ff:17:
14:46:73:be:a8:d7:de:a8:4c:31:45:0a:71:a5:ec:3a:bc:15:
4f:69:08:ab:83:90:06:42:b5:e9:60:5e:ee:ed:89:e7:de:3c:
52:3e:7e:8a:bd:5e:f2:f9:10:81:35:29:78:42:07:00:0b:a9:
0b:45:5c:03:57:2e:c1:0d:8e:be:80:12:0f:07:2b:0e:84:a4:
5f:da:ec:76:2d:f9:a3:75:27:84:95:82:78:4e:2b:57:a7:9c:
80:5b:d5:b6:9d:37:67:2d:a6:74:03:d3:bc:60:5b:50:a5:a5:
6f:0d:e1:c0:c5:46:83:0a:7c:32:4e:40:39:45:73:ce:ff:74:
90:33:c5:3d:7c:a8:19:a8:ea:cd:ac:7d:5a:b1:7c:68:19:22:
22:53:2b:78:1f:bd:37:da:bc:74:ba:a5:48:59:4d:8e:42:ab:
29:64:11:75:1c:69:47:52:79:e2:1a:45:8c:fd:4f:80:4a:e4:
d0:79:8d:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYYOtENMpR1VyUB3JRtoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDMzNTA0MTcxOGIxODgzMGIxZjU4YzE1ZDM1MTg1MTBm
ZTYxMTgwHhcNMjUxMTA0MDEwMDUwWhcNMjUxMTA1MDEwMDUwWjAzMTEwLwYDVQQD
EygwMmQzYzI2NjkyMTRmY2M2Y2JjMTNjODlkYzRhOGY0MTNlYzQ0OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitSOlBR0DSMG87rrVZjLDTtjbhdv
OiXDo7QPWABD3RAH+hk8Yb/+1VrrfHfIDzaP97tfumF624XejHghiAvet9IHWtAm
Fb2nViHjs1oRZdQLQN3zT4TyYo8MEONfB/qamMMsEmUueQvGSjLVqu6EqkRt6aaq
6F0YdBfu1FetJgTMPJWES9Iqp1VHyBxW0gpTNovOPd9Zb1q8BCnBGCpv/kDh3VvD
l01qGrML5PelHe3TKoVDCijP06ScGxC6G11n1UYdeRWH6wX5u2X/RcNoB1m3Xepg
+rrJIhguWiKEZ66suMUOB/WfO47WcHX/tIXsViT7oAYe3xKRYwDEWDMesQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALTwmaSFPzGy8E8idxKj0E+xEjnMB8GA1UdIwQY
MBaAFMjTNQQXGLGIMLH1jBXTUYUQ/mEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQt
YTllODQ2ODcxMGEzLzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQtYTllODQ2ODcxMGEz
LzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2ryGxER
X1l07Hsx+n0bW8G+TRt3WSjLXlA1w0jfKkMDneNmHebStzZzmT00lm/tBt6BrTBc
sV9l3fdyEuorf82dmegIrv8XFEZzvqjX3qhMMUUKcaXsOrwVT2kIq4OQBkK16WBe
7u2J5948Uj5+ir1e8vkQgTUpeEIHAAupC0VcA1cuwQ2OvoASDwcrDoSkX9rsdi35
o3UnhJWCeE4rV6ecgFvVtp03Zy2mdAPTvGBbUKWlbw3hwMVGgwp8Mk5AOUVzzv90
kDPFPXyoGajqzax9WrF8aBkiIlMreB+9N9q8dLqlSFlNjkKrKWQRdRxpR1J54hpF
jP1PgErk0HmNcg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:55 2025 by rpki-client