Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
File: yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json)
Hash identifier: iRHrUzsrnkq7CKPy1kfXSlYDjKKYtdT3mlHF2VMamc4=
Subject key identifier: 6C:71:47:81:05:48:8B:29:2F:D0:3D:69:CF:26:AF:19:45:3F:6D:43
Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
Certificate issuer: /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Certificate serial: 019A4D73B01C6C930F8443270920F23BDA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:18 +0000
Manifest this update: Tue 04 Nov 2025 06:00:18 +0000
Manifest next update: Wed 05 Nov 2025 06:00:18 +0000
Files and hashes: 1: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (hash: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=)
2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: wk4E7LOygLJ8jB12lCHlL3D79as4o6fRhFESMgLCTXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b0:1c:6c:93:0f:84:43:27:09:20:f2:3b:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Validity
Not Before: Nov 4 06:00:18 2025 GMT
Not After : Nov 5 06:00:18 2025 GMT
Subject: CN=6c71478105488b292fd03d69cf26af19453f6d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:e8:a2:19:76:32:6d:6f:b4:92:c8:4b:0f:
af:a2:cc:50:09:5e:6d:53:ca:2d:9d:93:13:d7:d1:
5d:bc:1e:3e:f3:10:a1:8f:32:04:1a:f1:c6:25:34:
e7:25:bf:6d:d9:2c:0f:2b:e6:6e:00:c8:27:82:e7:
a4:fa:19:c6:59:11:2d:a5:5e:b6:29:55:b9:52:65:
81:a8:f8:dc:c6:39:9e:b8:c5:01:47:8a:48:bb:6a:
a8:8b:aa:53:d6:ca:da:5e:4e:5b:2c:7f:d9:0c:1c:
f3:3c:f9:f5:e5:d5:0e:b8:bc:dd:a4:2b:77:82:52:
b8:dc:ee:4d:54:98:3f:41:03:8c:c4:ef:51:e6:c8:
78:da:a6:7d:7c:52:7c:d8:8b:33:fd:2c:42:b4:e3:
12:70:ef:c9:0f:9c:46:a7:b2:ac:2d:57:84:2b:74:
7b:3a:8a:e1:98:64:30:76:2a:ef:15:8e:f6:59:bb:
a3:93:30:8b:ed:67:6a:4d:b2:c8:0e:8c:40:43:74:
c2:ea:be:b2:74:98:f4:e4:c9:db:97:23:43:e8:2f:
a7:d9:f7:5e:1e:54:d6:1b:8b:c2:0d:0e:96:8c:ff:
73:4d:17:ed:c1:c2:28:c2:c8:c2:bb:61:d1:8d:fd:
db:17:e7:d8:f5:73:5d:54:e3:e5:18:0b:83:a2:70:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:47:81:05:48:8B:29:2F:D0:3D:69:CF:26:AF:19:45:3F:6D:43
X509v3 Authority Key Identifier:
keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:43:09:49:23:e9:f0:a3:3e:97:84:64:5e:7d:7e:c6:de:6a:
b6:77:7f:7a:8e:43:40:0a:d4:c2:6b:d7:e1:ff:65:57:16:03:
01:b7:e8:96:b2:d3:7e:98:7a:3c:ee:d9:d1:05:fd:15:48:a9:
73:f2:0c:6d:e4:00:9f:8e:9a:a9:e1:9a:fa:4d:1e:76:71:93:
70:b7:3b:b6:db:3c:4c:b4:46:c5:05:28:5c:21:9e:e2:ba:d4:
92:7e:13:de:0d:2f:06:1b:8e:e0:60:5c:a0:8a:84:bb:e6:66:
4c:bf:c9:70:63:8b:ae:ea:31:df:e1:cb:e9:4b:44:b1:3f:f5:
b8:12:06:21:b0:35:59:1a:b0:c8:32:f7:ab:51:0c:17:03:a8:
98:c2:05:04:54:3d:b6:8f:3a:02:7d:2b:ab:c2:82:cb:eb:8b:
03:79:9b:7c:d8:63:07:70:8e:94:75:be:5d:82:ff:69:3f:b2:
7b:1c:da:b1:12:e9:e6:1e:5d:cc:2b:97:12:eb:3c:f9:78:e5:
cf:b3:9d:b3:a6:c7:ed:ce:0d:93:55:33:f9:ab:47:8a:d7:b1:
b2:95:e1:c1:c6:71:73:76:be:d1:80:11:3a:91:c5:8f:58:cb:
31:91:de:3e:bb:1d:aa:a7:54:1c:f3:1d:ce:8b:b5:b7:06:e0:
88:a9:c4:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc7AcbJMPhEMnCSDyO9ogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDMyMmJlYjdlMzYzZjRkNDU3NWUxZTRmZWVlNWNjYjg0
ZTEyNzUwHhcNMjUxMTA0MDYwMDE4WhcNMjUxMTA1MDYwMDE4WjAzMTEwLwYDVQQD
Eyg2YzcxNDc4MTA1NDg4YjI5MmZkMDNkNjljZjI2YWYxOTQ1M2Y2ZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ofoohl2Mm1vtJLISw+vosxQCV5t
U8otnZMT19FdvB4+8xChjzIEGvHGJTTnJb9t2SwPK+ZuAMgnguek+hnGWREtpV62
KVW5UmWBqPjcxjmeuMUBR4pIu2qoi6pT1sraXk5bLH/ZDBzzPPn15dUOuLzdpCt3
glK43O5NVJg/QQOMxO9R5sh42qZ9fFJ82Isz/SxCtOMScO/JD5xGp7KsLVeEK3R7
OorhmGQwdirvFY72WbujkzCL7WdqTbLIDoxAQ3TC6r6ydJj05MnblyND6C+n2fde
HlTWG4vCDQ6WjP9zTRftwcIowsjCu2HRjf3bF+fY9XNdVOPlGAuDonCbvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxxR4EFSIspL9A9ac8mrxlFP21DMB8GA1UdIwQY
MBaAFMjTIr6342P01FdeHk/u5cy4ThJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEt
ZGMzNzY5ZThmNmExLzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEtZGMzNzY5ZThmNmEx
LzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEMJSSPp
8KM+l4RkXn1+xt5qtnd/eo5DQArUwmvX4f9lVxYDAbfolrLTfph6PO7Z0QX9FUip
c/IMbeQAn46aqeGa+k0ednGTcLc7tts8TLRGxQUoXCGe4rrUkn4T3g0vBhuO4GBc
oIqEu+ZmTL/JcGOLruox3+HL6UtEsT/1uBIGIbA1WRqwyDL3q1EMFwOomMIFBFQ9
to86An0rq8KCy+uLA3mbfNhjB3COlHW+XYL/aT+yexzasRLp5h5dzCuXEus8+Xjl
z7Ods6bH7c4Nk1Uz+atHitexspXhwcZxc3a+0YAROpHFj1jLMZHePrsdqqdUHPMd
zou1twbgiKnE3w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:12 2025 by rpki-client