Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier: TzwRt7vNIrkrwp2TpUC6fwI3eGl50Ld9BBkRrsCQ3Ts=
Subject key identifier: 30:12:0C:2F:8C:18:C3:56:74:5D:A2:17:AF:58:33:59:01:BD:1D:B9
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 019A4EF5A2799D37561CE3A12C815EB51575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 13:01:51 +0000
Manifest this update: Tue 04 Nov 2025 13:01:51 +0000
Manifest next update: Wed 05 Nov 2025 13:01:51 +0000
Files and hashes: 1: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: 0b7zPf49bv9tpbZMmMTc6NjN36IFkBrWmUxkRe5OWl8=)
2: kmLiHNRRpwOnM7rn20oNf2vg9Dc.roa (hash: 3Uo+lrCMzfAdaBvj61plQUI9wF4wWfccEoe9UjEWqq8=)
3: pxrczszu4gk7oPsVsfTnGAHE-EY.roa (hash: e7fxLeat8zBves10MZjMVqSmM3nHW7bHuvHyNqARg3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a2:79:9d:37:56:1c:e3:a1:2c:81:5e:b5:15:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Nov 4 13:01:51 2025 GMT
Not After : Nov 5 13:01:51 2025 GMT
Subject: CN=30120c2f8c18c356745da217af58335901bd1db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6c:20:5f:79:c0:ca:d4:70:ea:9f:26:4c:62:
bc:dc:2d:94:d5:04:69:79:02:30:f8:ff:c2:05:42:
5a:03:9f:33:ce:8d:36:76:11:ac:58:38:cc:92:04:
3a:39:87:64:32:b1:08:45:79:1e:87:3f:60:0c:a2:
de:ef:6d:82:71:82:18:b6:ff:af:b5:67:ae:3f:4a:
f7:94:bd:e5:f7:d3:81:5f:f0:6f:4a:15:29:96:82:
fe:cb:ce:e2:ad:67:4a:67:f9:e5:23:1c:49:1f:51:
b4:85:22:9d:0f:4d:28:7a:fe:2c:17:01:65:1a:14:
0b:03:8c:ce:0b:99:ca:33:fa:66:9f:ab:a9:9d:51:
00:82:b9:ca:df:f3:14:8b:d7:9b:5d:e5:fb:f4:64:
7d:1e:b0:6a:c4:4e:7e:ac:71:35:56:1f:5e:88:fa:
44:f7:18:d6:9c:1b:38:7c:60:74:00:aa:76:0b:3e:
77:68:fb:81:72:ab:65:06:32:19:18:af:c6:2d:94:
a3:50:16:13:28:7b:c3:a1:64:d7:61:79:97:df:49:
0a:f1:46:a7:fe:5c:fc:0c:f6:e3:8e:d9:f4:cc:7f:
50:6a:f5:6e:6c:4b:07:97:a5:c3:c0:25:5c:69:76:
c7:af:f0:cf:aa:e4:1d:c4:f0:a4:93:3a:ec:35:8c:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:0C:2F:8C:18:C3:56:74:5D:A2:17:AF:58:33:59:01:BD:1D:B9
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d9:54:48:96:35:ac:64:1d:89:aa:21:ff:91:6d:6d:af:e3:
e3:07:d1:71:85:5d:e2:3c:cb:27:c8:5b:39:50:14:28:3b:ac:
0e:17:ed:76:15:8d:15:f2:84:e8:df:46:21:c4:ca:c0:a3:2a:
12:6a:39:0e:80:44:e9:ac:a2:d3:06:26:6a:91:59:c0:09:f7:
af:87:45:78:99:b6:03:d5:48:9a:01:98:aa:4c:da:4f:b8:3c:
35:5b:ad:0f:e7:4d:6d:9b:28:2e:76:f5:26:7f:5b:99:86:30:
75:67:78:25:02:d3:4e:0e:31:e4:96:75:59:87:1b:f3:49:09:
ee:ac:73:b2:29:34:99:cd:c5:98:f0:2c:db:84:71:81:63:37:
57:8d:d2:e4:f5:fc:3f:75:40:1f:6d:94:36:c9:5d:c4:ce:51:
57:03:21:ac:b7:a3:e7:54:dd:cc:8d:a3:d8:94:4d:8d:c5:d6:
b3:9a:58:2c:a5:13:9f:55:c9:c4:e2:c4:fb:85:63:88:15:02:
f4:2e:b0:e4:d4:9b:fe:ae:98:90:d0:0d:5d:4b:39:ef:a7:fe:
98:db:3f:c9:e7:83:4d:55:03:db:bb:25:54:cc:db:c3:e2:18:
68:dc:cc:98:bb:c9:2e:98:fa:5d:8d:fd:55:16:6a:0c:bc:76:
2e:a9:fc:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9aJ5nTdWHOOhLIFetRV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZjE0ZjhlMTQ0YzZkNTBjMzhhYjRmYWZmNWFjNmU1NDdm
ZTFkNDcwHhcNMjUxMTA0MTMwMTUxWhcNMjUxMTA1MTMwMTUxWjAzMTEwLwYDVQQD
EygzMDEyMGMyZjhjMThjMzU2NzQ1ZGEyMTdhZjU4MzM1OTAxYmQxZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WwgX3nAytRw6p8mTGK83C2U1QRp
eQIw+P/CBUJaA58zzo02dhGsWDjMkgQ6OYdkMrEIRXkehz9gDKLe722CcYIYtv+v
tWeuP0r3lL3l99OBX/BvShUploL+y87irWdKZ/nlIxxJH1G0hSKdD00oev4sFwFl
GhQLA4zOC5nKM/pmn6upnVEAgrnK3/MUi9ebXeX79GR9HrBqxE5+rHE1Vh9eiPpE
9xjWnBs4fGB0AKp2Cz53aPuBcqtlBjIZGK/GLZSjUBYTKHvDoWTXYXmX30kK8Uan
/lz8DPbjjtn0zH9QavVubEsHl6XDwCVcaXbHr/DPquQdxPCkkzrsNYxL1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDASDC+MGMNWdF2iF69YM1kBvR25MB8GA1UdIwQY
MBaAFGPxT44UTG1Qw4q0+v9axuVH/h1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YjBhYWUtOWQyNy00OTUxLWJhYjct
ZGEzOTQzODRlOTI1LzEvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YjBhYWUtOWQyNy00OTUxLWJhYjctZGEzOTQzODRlOTI1
LzEvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtlUSJY1
rGQdiaoh/5Ftba/j4wfRcYVd4jzLJ8hbOVAUKDusDhftdhWNFfKE6N9GIcTKwKMq
Emo5DoBE6ayi0wYmapFZwAn3r4dFeJm2A9VImgGYqkzaT7g8NVutD+dNbZsoLnb1
Jn9bmYYwdWd4JQLTTg4x5JZ1WYcb80kJ7qxzsik0mc3FmPAs24RxgWM3V43S5PX8
P3VAH22UNsldxM5RVwMhrLej51TdzI2j2JRNjcXWs5pYLKUTn1XJxOLE+4VjiBUC
9C6w5NSb/q6YkNANXUs576f+mNs/yeeDTVUD27slVMzbw+IYaNzMmLvJLpj6XY39
VRZqDLx2Lqn8rQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:25 2025 by rpki-client