Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: WFNbxuglZ3ycoygokqbv4E767pr/YHON66lpeixWFSU=
Subject key identifier: 5B:87:55:D0:EB:30:B7:0B:D9:06:7C:80:94:E7:89:4C:0A:6A:B9:8C
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 019A4F62756CF4B334B05BB8EA671B5949A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:43 +0000
Manifest this update: Tue 04 Nov 2025 15:00:43 +0000
Manifest next update: Wed 05 Nov 2025 15:00:43 +0000
Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: PkqtTm1RQYzq8nC6saFsoNU8lNT965s34GmVzKyl5Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:75:6c:f4:b3:34:b0:5b:b8:ea:67:1b:59:49:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Nov 4 15:00:43 2025 GMT
Not After : Nov 5 15:00:43 2025 GMT
Subject: CN=5b8755d0eb30b70bd9067c8094e7894c0a6ab98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:bb:05:ea:3d:34:fa:c2:62:c0:6c:4a:c5:
05:0b:93:3b:71:6d:5f:60:20:90:51:fb:5f:dd:c2:
82:ea:67:6e:78:1a:1d:d9:b6:79:08:31:b6:d9:c8:
b8:ba:ae:8b:b9:cc:29:d2:72:0b:e6:06:8b:5a:8d:
61:6a:3d:0b:7c:70:79:0a:c5:37:ba:91:d3:9b:d6:
20:f8:8c:2e:d0:0c:43:b5:15:21:a5:b0:88:ff:2e:
f7:fe:ed:c8:23:ca:b5:24:10:19:9d:15:38:d1:be:
4a:10:1a:73:87:37:f5:05:f0:39:32:70:bb:3d:05:
47:2d:81:bd:58:d4:a0:95:b1:da:4d:f5:38:d2:38:
ec:51:3a:9b:83:44:6b:6c:af:66:56:c6:dd:9f:ba:
cd:75:d5:98:d0:37:30:97:8d:aa:4c:36:eb:ab:9b:
0a:6c:50:5d:7f:d1:2b:04:11:5e:42:40:90:c6:03:
82:9c:1a:5b:dc:79:69:fb:ac:da:d6:ab:7b:9b:bc:
cc:23:69:fe:3c:43:ee:92:55:7c:62:2e:e4:c2:15:
81:93:a1:75:af:75:77:e5:f6:b1:a7:8d:81:bd:63:
de:da:cb:bd:70:a0:fb:34:51:2f:53:bd:97:d9:b2:
d7:e8:3b:18:9c:57:9f:b6:76:01:24:b5:67:18:56:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:55:D0:EB:30:B7:0B:D9:06:7C:80:94:E7:89:4C:0A:6A:B9:8C
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:71:70:51:c7:0d:68:ba:05:ba:19:0b:23:44:74:d6:8e:20:
e2:7a:8f:cd:a3:13:3e:be:3c:a8:48:85:13:4e:c1:fb:2b:9d:
fa:4d:0b:92:e7:24:d8:fd:3e:e0:56:8a:00:8b:22:52:18:32:
7b:39:8a:7c:f8:7d:67:3e:39:f2:68:d2:9f:43:5e:f1:c6:48:
96:35:42:ef:a6:66:12:95:09:f5:1e:1e:c8:8e:0d:c0:f4:c8:
71:60:35:f3:ce:11:46:b5:a2:67:17:c7:8d:ed:ab:f1:38:0a:
fd:a8:bb:88:d0:15:ae:b8:81:53:eb:23:c0:73:83:d2:58:8a:
03:f5:24:71:70:09:b7:39:0e:1d:cb:33:10:90:b0:2d:19:79:
8e:96:89:94:8c:c9:b0:45:5f:5f:fb:f9:14:a8:f9:83:05:bf:
60:97:db:85:ea:cc:6c:31:58:ff:39:c2:b1:0f:85:24:04:a3:
6d:9f:6b:29:84:97:58:f4:b5:d9:5f:af:06:8a:cd:ab:c8:a8:
e9:4c:8a:99:ad:db:20:0a:26:7a:d7:87:15:c8:04:76:83:e6:
65:80:1e:6f:03:08:04:9d:4e:57:dc:bf:be:5c:1d:a9:50:ef:
6e:a8:a1:01:a7:48:79:43:ca:3b:f8:ea:70:8a:cb:75:aa:77:
24:fb:a9:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYnVs9LM0sFu46mcbWUmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGZiYTA5MTkwYjc2ODQ5ZmZmM2QyNmQ1ODA3OTBlNTRm
YWMyZTMwHhcNMjUxMTA0MTUwMDQzWhcNMjUxMTA1MTUwMDQzWjAzMTEwLwYDVQQD
Eyg1Yjg3NTVkMGViMzBiNzBiZDkwNjdjODA5NGU3ODk0YzBhNmFiOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBu7Beo9NPrCYsBsSsUFC5M7cW1f
YCCQUftf3cKC6mdueBod2bZ5CDG22ci4uq6Lucwp0nIL5gaLWo1haj0LfHB5CsU3
upHTm9Yg+Iwu0AxDtRUhpbCI/y73/u3II8q1JBAZnRU40b5KEBpzhzf1BfA5MnC7
PQVHLYG9WNSglbHaTfU40jjsUTqbg0RrbK9mVsbdn7rNddWY0Dcwl42qTDbrq5sK
bFBdf9ErBBFeQkCQxgOCnBpb3Hlp+6za1qt7m7zMI2n+PEPuklV8Yi7kwhWBk6F1
r3V35faxp42BvWPe2su9cKD7NFEvU72X2bLX6DsYnFeftnYBJLVnGFb7VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuHVdDrMLcL2QZ8gJTniUwKarmMMB8GA1UdIwQY
MBaAFMtPugkZC3aEn/89JtWAeQ5U+sLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1Yjct
Zjg1Y2M1NzQ3ZmJmLzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1YjctZjg1Y2M1NzQ3ZmJm
LzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3FwUccN
aLoFuhkLI0R01o4g4nqPzaMTPr48qEiFE07B+yud+k0Lkuck2P0+4FaKAIsiUhgy
ezmKfPh9Zz458mjSn0Ne8cZIljVC76ZmEpUJ9R4eyI4NwPTIcWA1884RRrWiZxfH
je2r8TgK/ai7iNAVrriBU+sjwHOD0liKA/UkcXAJtzkOHcszEJCwLRl5jpaJlIzJ
sEVfX/v5FKj5gwW/YJfbherMbDFY/znCsQ+FJASjbZ9rKYSXWPS12V+vBorNq8io
6UyKma3bIAometeHFcgEdoPmZYAebwMIBJ1OV9y/vlwdqVDvbqihAadIeUPKO/jq
cIrLdap3JPupzA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:42 2025 by rpki-client