Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: JYiqkuCqH+85dNTNfRImdo+eCO5hT2q16meBe1392ik=
Subject key identifier: 7D:0B:3F:84:A5:97:EA:0B:06:88:04:C9:70:DF:0B:47:3A:87:5E:DA
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 019A4D0632EE2DBDC26613AE97E8F088807F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 04:00:43 +0000
Manifest this update: Tue 04 Nov 2025 04:00:43 +0000
Manifest next update: Wed 05 Nov 2025 04:00:43 +0000
Files and hashes: 1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
2: WgJ7O_17xXOGfX8GMYTFeehuvIo.roa (hash: +WryK0/1+O95YS2Z1PvMaCPKPteooKSJABgjRhfvP9U=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: MoGujR0spnXdqoTBuWyFm8JHjd2Gs7SNDmtsuSb8o78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:32:ee:2d:bd:c2:66:13:ae:97:e8:f0:88:80:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Nov 4 04:00:43 2025 GMT
Not After : Nov 5 04:00:43 2025 GMT
Subject: CN=7d0b3f84a597ea0b068804c970df0b473a875eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:50:fd:d9:eb:19:04:36:c5:25:ba:68:53:da:
a5:bd:5d:37:ce:dd:0e:8b:d7:99:53:75:e1:cb:37:
17:7d:30:40:99:a5:38:45:2a:3b:ec:b6:89:36:ce:
3a:38:0f:25:f3:28:b2:26:dc:9e:57:3b:3a:5f:95:
54:a9:5d:04:44:0d:55:96:0f:97:95:09:22:eb:19:
fc:05:23:47:7a:00:8e:6e:59:e9:c4:b8:d0:96:77:
ab:c8:29:8c:29:54:ef:f0:96:b6:98:14:79:24:c7:
b1:c9:96:39:3c:ba:14:df:b6:c3:98:a7:44:b7:59:
20:86:50:9e:01:f4:b4:90:40:28:21:85:ad:b3:ae:
f6:ac:cb:15:15:6d:f3:ed:9a:46:63:8e:b3:a6:a6:
a0:b0:ca:0d:b7:cd:77:c3:3b:09:4e:28:a3:79:b0:
cb:cf:49:21:c6:2e:da:b8:b5:35:ba:06:b8:02:f8:
65:10:e4:df:c9:98:6c:c1:66:41:f9:7d:61:bb:10:
b7:4d:db:a3:f3:8e:c6:f2:13:d9:99:aa:d9:2a:d9:
ad:52:9f:f5:cc:c5:5d:68:c0:e1:4c:9f:4b:12:0b:
be:0a:27:dc:c3:54:1d:bc:00:38:26:98:bc:df:33:
59:a8:54:c1:ce:6e:94:5a:36:25:e3:1a:a1:ea:6e:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0B:3F:84:A5:97:EA:0B:06:88:04:C9:70:DF:0B:47:3A:87:5E:DA
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f9:f0:7f:c6:96:9d:97:3a:c8:1e:10:fd:1d:37:f4:6f:b8:
cd:16:c6:1f:b4:53:ac:fb:18:2f:c4:c5:0f:a6:42:05:e3:2c:
57:59:b3:27:e0:eb:30:27:e7:93:32:cc:82:59:70:f5:2a:ea:
20:ff:5b:15:b8:0c:8d:e4:7f:f7:d7:bc:0e:28:ec:d6:e2:b2:
41:25:bb:be:11:7c:eb:2e:cc:2d:b0:c0:cb:8f:8c:9a:dc:dd:
aa:8c:32:e4:45:8d:88:40:22:b7:37:b2:2b:3b:73:57:cd:dd:
44:b4:73:b4:31:7b:b3:47:8e:b3:c9:1c:90:ce:c3:57:6d:42:
31:9e:54:2f:cc:c3:51:33:5b:d3:55:9f:fa:4e:dd:08:67:15:
96:31:ce:06:eb:15:61:5b:18:be:ac:5f:cc:70:be:0b:a3:a2:
3e:b0:56:88:45:b0:e6:7f:10:95:64:51:04:27:2f:4c:0d:18:
96:9f:88:a3:ef:39:e5:79:10:2a:d9:33:a3:49:79:de:33:5f:
5c:8b:84:7f:93:f0:97:40:1c:33:d6:99:9c:eb:81:80:0f:c5:
03:49:c2:1a:61:98:92:a8:ef:f2:27:ac:37:09:a5:eb:a4:cd:
ab:3d:6c:19:5b:8c:99:fc:3c:bb:2f:3c:73:cf:73:66:4e:88:
29:63:7b:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBjLuLb3CZhOul+jwiIB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNjYyY2VlYjcyNjc3NGIxYjQ0YzUxZmYxZmMwZGY5MDhi
ZGViYmMwHhcNMjUxMTA0MDQwMDQzWhcNMjUxMTA1MDQwMDQzWjAzMTEwLwYDVQQD
Eyg3ZDBiM2Y4NGE1OTdlYTBiMDY4ODA0Yzk3MGRmMGI0NzNhODc1ZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FD92esZBDbFJbpoU9qlvV03zt0O
i9eZU3XhyzcXfTBAmaU4RSo77LaJNs46OA8l8yiyJtyeVzs6X5VUqV0ERA1Vlg+X
lQki6xn8BSNHegCOblnpxLjQlneryCmMKVTv8Ja2mBR5JMexyZY5PLoU37bDmKdE
t1kghlCeAfS0kEAoIYWts672rMsVFW3z7ZpGY46zpqagsMoNt813wzsJTiijebDL
z0khxi7auLU1uga4AvhlEOTfyZhswWZB+X1huxC3Tduj847G8hPZmarZKtmtUp/1
zMVdaMDhTJ9LEgu+Cifcw1QdvAA4Jpi83zNZqFTBzm6UWjYl4xqh6m7O3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0LP4Sll+oLBogEyXDfC0c6h17aMB8GA1UdIwQY
MBaAFMtmLO63JndLG0TFH/H8DfkIveu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTJZczdyY21kMHNiUk1VZjhmd04tUWk5Njd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9hOTYyYTktYWJmZi00NDk1LTg2Y2Mt
YjU2YzhjY2IyOTM1LzEveTJZczdyY21kMHNiUk1VZjhmd04tUWk5Njd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9hOTYyYTktYWJmZi00NDk1LTg2Y2MtYjU2YzhjY2IyOTM1
LzEveTJZczdyY21kMHNiUk1VZjhmd04tUWk5Njd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPnwf8aW
nZc6yB4Q/R039G+4zRbGH7RTrPsYL8TFD6ZCBeMsV1mzJ+DrMCfnkzLMgllw9Srq
IP9bFbgMjeR/99e8Dijs1uKyQSW7vhF86y7MLbDAy4+Mmtzdqowy5EWNiEAitzey
KztzV83dRLRztDF7s0eOs8kckM7DV21CMZ5UL8zDUTNb01Wf+k7dCGcVljHOBusV
YVsYvqxfzHC+C6OiPrBWiEWw5n8QlWRRBCcvTA0Ylp+Io+855XkQKtkzo0l53jNf
XIuEf5Pwl0AcM9aZnOuBgA/FA0nCGmGYkqjv8iesNwml66TNqz1sGVuMmfw8uy88
c89zZk6IKWN7sQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:58 2025 by rpki-client