Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: zcI/cJHAdB6y1aPhZTS1nsyT2dYjchI9cPlAdVgr0E4=
Subject key identifier: 8F:AF:3B:0A:35:9D:B9:67:A2:2A:17:FE:05:46:0E:C6:42:0E:F5:10
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 019A52D146AF168375A60EFC16E9BA4B958C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 095E
Signing time: Wed 05 Nov 2025 07:00:38 +0000
Manifest this update: Wed 05 Nov 2025 07:00:38 +0000
Manifest next update: Thu 06 Nov 2025 07:00:38 +0000
Files and hashes: 1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: d1MMh1lKUMv3vStZRvVg0TnoGQXMeJoU9BWBWUN5Dwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:46:af:16:83:75:a6:0e:fc:16:e9:ba:4b:95:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Nov 5 07:00:38 2025 GMT
Not After : Nov 6 07:00:38 2025 GMT
Subject: CN=8faf3b0a359db967a22a17fe05460ec6420ef510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:cf:a3:fd:65:8b:33:4f:87:2d:df:b7:96:
13:32:b8:bb:10:06:9e:a1:20:16:9d:c8:a9:b5:c6:
9b:ed:cb:88:eb:bc:e9:fc:93:f7:a0:28:24:b6:21:
da:f0:6f:f8:61:5c:4f:b7:6b:d3:17:90:92:79:75:
ba:0c:45:6d:6e:1c:b0:c6:60:ac:d9:6b:ef:d8:81:
a1:33:da:36:c1:6e:40:50:20:4c:93:f9:c6:bf:ac:
cf:9f:cc:18:51:f2:dc:d8:20:db:2f:ad:7f:9b:6c:
22:b7:78:f9:cf:6d:bf:f3:6a:60:9c:ed:ed:50:6f:
d3:58:8d:1f:2c:6c:fe:e4:c6:a2:ca:39:21:53:f8:
8f:90:22:04:4e:0d:c7:22:9e:df:6a:c9:19:95:a7:
03:93:c2:9f:83:b7:ab:80:50:e3:4c:c6:6c:ca:f5:
0c:34:77:c7:19:53:ed:47:8e:a4:46:72:33:3d:4a:
59:35:c1:9a:08:61:71:6c:3a:a2:83:da:8f:a1:ec:
cb:ab:78:c5:8a:68:a3:53:43:02:bd:b3:bb:b5:cb:
ee:52:32:36:bf:da:66:23:56:28:fa:87:b4:ac:62:
3e:10:3b:34:a4:51:aa:56:05:f6:d6:4c:19:c5:51:
fa:20:20:13:d2:1a:a6:f6:dc:16:39:74:ce:24:c5:
1d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:3B:0A:35:9D:B9:67:A2:2A:17:FE:05:46:0E:C6:42:0E:F5:10
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6a:20:c9:e8:7c:8d:82:59:2d:35:90:29:d0:dd:8e:85:e9:
fe:e8:2d:06:d5:c7:9a:18:9c:c2:c4:8f:a0:1c:07:d2:83:c9:
5a:28:70:d7:49:8c:87:be:49:62:77:e0:99:62:ac:70:49:db:
96:12:d9:ce:55:f8:69:8a:be:fa:33:76:20:75:b3:2d:73:5a:
6e:88:25:1a:41:ff:28:6e:b8:a8:54:e7:fc:e5:f3:4c:2e:cd:
a9:78:cd:16:7c:1d:4f:f5:ed:b6:20:8f:90:de:47:af:f1:e1:
28:1f:99:1f:f8:70:ec:59:91:2a:0a:c5:bf:17:64:df:1c:c1:
74:ee:dc:17:03:ec:4d:64:dc:d9:65:28:62:c1:2c:ee:c1:c6:
ca:65:79:48:34:07:1c:e9:33:10:c8:a3:3e:b3:a0:6b:0f:14:
9c:5e:a4:c4:93:ea:11:90:9a:d0:e6:85:82:89:a3:1d:14:71:
8c:af:ee:f9:09:34:7a:90:32:16:a7:80:63:2c:19:82:ef:80:
60:30:48:c2:c4:14:f4:69:d3:62:2b:0d:b4:44:d9:69:e5:c5:
0e:56:55:82:8f:8e:04:2e:ea:d7:c3:c0:92:a5:57:22:f1:f8:
af:ef:69:cc:c2:ca:30:b7:b3:ea:48:6a:dc:52:14:ed:82:98:
33:b7:37:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0UavFoN1pg78Fum6S5WMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODgzYTg2ZTgyZDBkOTEwZmNmNTlmOGZmOWY3YmYxYTY3
MTQ4NzAwHhcNMjUxMTA1MDcwMDM4WhcNMjUxMTA2MDcwMDM4WjAzMTEwLwYDVQQD
Eyg4ZmFmM2IwYTM1OWRiOTY3YTIyYTE3ZmUwNTQ2MGVjNjQyMGVmNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4THPo/1lizNPhy3ft5YTMri7EAae
oSAWnciptcab7cuI67zp/JP3oCgktiHa8G/4YVxPt2vTF5CSeXW6DEVtbhywxmCs
2Wvv2IGhM9o2wW5AUCBMk/nGv6zPn8wYUfLc2CDbL61/m2wit3j5z22/82pgnO3t
UG/TWI0fLGz+5MaiyjkhU/iPkCIETg3HIp7faskZlacDk8Kfg7ergFDjTMZsyvUM
NHfHGVPtR46kRnIzPUpZNcGaCGFxbDqig9qPoezLq3jFimijU0MCvbO7tcvuUjI2
v9pmI1Yo+oe0rGI+EDs0pFGqVgX21kwZxVH6ICAT0hqm9twWOXTOJMUd2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+vOwo1nblnoioX/gVGDsZCDvUQMB8GA1UdIwQY
MBaAFK2IOoboLQ2RD89Z+P+fe/GmcUhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTIt
YTU2YmYwY2Y0Y2JlLzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTItYTU2YmYwY2Y0Y2Jl
LzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGogyeh8
jYJZLTWQKdDdjoXp/ugtBtXHmhicwsSPoBwH0oPJWihw10mMh75JYnfgmWKscEnb
lhLZzlX4aYq++jN2IHWzLXNaboglGkH/KG64qFTn/OXzTC7NqXjNFnwdT/XttiCP
kN5Hr/HhKB+ZH/hw7FmRKgrFvxdk3xzBdO7cFwPsTWTc2WUoYsEs7sHGymV5SDQH
HOkzEMijPrOgaw8UnF6kxJPqEZCa0OaFgomjHRRxjK/u+Qk0epAyFqeAYywZgu+A
YDBIwsQU9GnTYisNtETZaeXFDlZVgo+OBC7q18PAkqVXIvH4r+9pzMLKMLez6khq
3FIU7YKYM7c3DQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:07 2025 by rpki-client