Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: jeEwuhVGs1KYX9tGHuKobPCyu5u+gvVT07eaXU3eYkA=
Subject key identifier: 2F:9E:B3:CA:7E:81:76:6B:C6:F0:1C:2E:6C:DB:E2:00:38:19:4D:21
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 019A54C10F8C4A6370E276BA38364BF450E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 16:02:09 +0000
Manifest this update: Wed 05 Nov 2025 16:02:09 +0000
Manifest next update: Thu 06 Nov 2025 16:02:09 +0000
Files and hashes: 1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: SYTV9v9n9l+EVyEaGpAWNi/4/tO9MPamU2iYAsMS6b0=)
3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c1:0f:8c:4a:63:70:e2:76:ba:38:36:4b:f4:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Nov 5 16:02:09 2025 GMT
Not After : Nov 6 16:02:09 2025 GMT
Subject: CN=2f9eb3ca7e81766bc6f01c2e6cdbe20038194d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:be:34:e2:4b:5b:59:fb:c1:e2:fb:24:0e:
cd:53:b0:0f:48:01:4d:5a:0d:91:30:a4:6a:9e:a5:
06:aa:ba:13:f2:85:bc:de:0e:5b:fa:88:f5:ca:80:
72:1d:55:b7:cf:7c:fe:26:7c:26:d7:5e:cc:2d:26:
c2:72:fe:e3:ea:74:17:65:32:f8:43:ce:13:47:46:
f9:84:41:34:10:11:74:8c:8c:04:2b:b8:fa:7a:d1:
0b:7b:35:7e:56:57:37:83:c1:06:47:78:21:fb:34:
7a:b6:c6:f1:e4:b6:97:99:07:c7:73:1a:dd:08:10:
74:2f:49:f5:f3:b2:56:32:64:f2:38:ec:b2:58:3a:
0f:1a:f2:f6:f8:dc:eb:76:24:b1:2b:19:a0:b9:42:
42:c3:9e:e2:cb:65:ed:ee:2b:55:33:8c:96:3b:ce:
fc:fd:8b:2f:8a:0d:e4:50:3d:87:ba:07:31:ff:dd:
7b:0e:b3:3d:b4:0e:0c:e7:05:22:cf:f9:00:fe:5a:
6c:77:3d:fb:86:45:b2:e9:3a:65:6f:fe:f2:97:3c:
3f:3c:1d:2b:13:fa:fd:92:d2:77:2a:70:09:05:98:
4e:43:60:e1:8d:f0:ef:e8:ff:99:3a:a1:f0:f1:52:
ed:3a:00:6d:eb:d4:8d:bd:81:03:09:f8:0b:24:87:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9E:B3:CA:7E:81:76:6B:C6:F0:1C:2E:6C:DB:E2:00:38:19:4D:21
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d5:4a:7b:1e:c9:64:c1:bb:56:c5:3a:ae:8c:82:6c:a8:45:
7d:33:26:34:9a:b0:a2:c1:50:d7:33:24:ed:4b:a6:fa:1f:e8:
50:56:c5:52:f0:bc:69:3a:2e:f7:4e:7e:2b:92:47:5e:27:4b:
07:23:43:df:be:a5:d7:c6:6a:7d:3f:7b:12:c5:3d:f4:91:21:
ce:29:43:93:b1:06:e2:83:38:8b:3b:75:17:71:70:85:b3:bf:
7a:6d:aa:48:7c:00:70:1d:2a:b7:56:19:53:ce:32:ef:b8:eb:
8d:13:d0:da:f6:08:f0:d9:f2:83:3f:10:61:fe:7e:96:6b:64:
ac:23:fa:28:3f:2a:d8:b8:15:32:68:83:9f:4a:5b:77:1f:6f:
c7:ba:17:4c:5b:9b:3e:76:9f:b9:1d:74:dc:57:95:80:96:da:
94:f5:97:4f:61:a0:1d:d2:f4:28:74:cd:b5:51:a8:b8:5f:cf:
05:88:40:8e:95:bd:0a:05:2a:fe:d6:1c:7e:cb:37:50:5e:94:
3b:0d:f4:5c:51:b6:ce:fb:ff:f7:10:e6:09:76:62:b1:43:ec:
97:8f:a8:c4:a1:a3:f7:6e:f7:8b:c3:2b:e3:34:3e:f3:ce:cb:
d9:0e:b1:57:d9:70:a4:59:0e:9f:97:ee:53:b9:7d:76:ff:31:
0e:cc:8b:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwQ+MSmNw4na6ODZL9FDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjgyNzcyYWYzZDYxMWI5OWIxYmE2ZTNlYjZjYmZkMTY5
NjUzNjMwHhcNMjUxMTA1MTYwMjA5WhcNMjUxMTA2MTYwMjA5WjAzMTEwLwYDVQQD
EygyZjllYjNjYTdlODE3NjZiYzZmMDFjMmU2Y2RiZTIwMDM4MTk0ZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2a+NOJLW1n7weL7JA7NU7APSAFN
Wg2RMKRqnqUGqroT8oW83g5b+oj1yoByHVW3z3z+Jnwm117MLSbCcv7j6nQXZTL4
Q84TR0b5hEE0EBF0jIwEK7j6etELezV+Vlc3g8EGR3gh+zR6tsbx5LaXmQfHcxrd
CBB0L0n187JWMmTyOOyyWDoPGvL2+NzrdiSxKxmguUJCw57iy2Xt7itVM4yWO878
/Ysvig3kUD2Hugcx/917DrM9tA4M5wUiz/kA/lpsdz37hkWy6Tplb/7ylzw/PB0r
E/r9ktJ3KnAJBZhOQ2DhjfDv6P+ZOqHw8VLtOgBt69SNvYEDCfgLJIfocQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+es8p+gXZrxvAcLmzb4gA4GU0hMB8GA1UdIwQY
MBaAFGO4J3KvPWEbmbG6bj62y/0WllNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdnbmNxODlZUnVac2JwdVByYkxfUmFXVTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jYjBkOTEtODI3MC00NTUwLThmYWMt
MGNlMjAzOGFhYTdiLzEvWTdnbmNxODlZUnVac2JwdVByYkxfUmFXVTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jYjBkOTEtODI3MC00NTUwLThmYWMtMGNlMjAzOGFhYTdi
LzEvWTdnbmNxODlZUnVac2JwdVByYkxfUmFXVTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtVKex7J
ZMG7VsU6royCbKhFfTMmNJqwosFQ1zMk7Uum+h/oUFbFUvC8aTou905+K5JHXidL
ByND376l18ZqfT97EsU99JEhzilDk7EG4oM4izt1F3FwhbO/em2qSHwAcB0qt1YZ
U84y77jrjRPQ2vYI8Nnygz8QYf5+lmtkrCP6KD8q2LgVMmiDn0pbdx9vx7oXTFub
PnafuR103FeVgJbalPWXT2GgHdL0KHTNtVGouF/PBYhAjpW9CgUq/tYcfss3UF6U
Ow30XFG2zvv/9xDmCXZisUPsl4+oxKGj9273i8Mr4zQ+887L2Q6xV9lwpFkOn5fu
U7l9dv8xDsyL7g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:52:16 2025 by rpki-client