Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: tcjGdRruTZNXkUrbQM17O6f/uZz9Y4NJ0uQdz/kCff0=
Subject key identifier: 3C:A7:E8:1A:87:CC:6A:00:B5:77:9B:D1:F1:71:3C:7B:A4:DD:21:EF
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 019A4D3CB48B02B7E5876E946DF2C5E78C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 090E
Signing time: Tue 04 Nov 2025 05:00:15 +0000
Manifest this update: Tue 04 Nov 2025 05:00:15 +0000
Manifest next update: Wed 05 Nov 2025 05:00:15 +0000
Files and hashes: 1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=)
2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: xVQ/hkdFwA6FHJr50hC3rcmkkT0w+SbVayLfQKRi1TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b4:8b:02:b7:e5:87:6e:94:6d:f2:c5:e7:8c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Nov 4 05:00:15 2025 GMT
Not After : Nov 5 05:00:15 2025 GMT
Subject: CN=3ca7e81a87cc6a00b5779bd1f1713c7ba4dd21ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:61:a2:24:7a:9f:11:69:15:22:95:f5:ed:
07:c4:b5:e5:19:b5:56:80:2b:ee:cc:73:21:d2:84:
c0:6a:4e:76:e4:0e:39:c6:6b:fc:2e:6f:7a:74:3f:
35:ae:75:37:15:a7:80:ee:5f:88:ef:01:e8:d7:71:
95:6e:bb:83:ce:8e:34:a8:1d:a9:d9:a1:7b:6b:0d:
16:73:4d:46:6b:4a:27:6a:b1:bd:3e:2a:10:63:ba:
cd:d4:12:39:e5:1c:a0:44:15:c8:65:19:58:bb:47:
3a:9c:f1:37:1d:5b:09:cf:30:ed:33:a6:15:af:4e:
f3:f9:fa:1d:59:70:3d:dc:fd:37:a6:fe:5b:6d:fc:
e2:d5:3c:8d:d7:a3:39:0d:77:19:f4:87:c3:b0:83:
ff:16:b2:ea:e4:fc:57:9d:bc:60:3b:ca:9c:fc:ae:
fb:2b:0b:61:f5:70:df:df:58:52:b0:44:fd:48:ac:
62:0b:3e:71:39:69:32:3c:c0:1e:28:3a:58:48:b0:
a5:3b:9b:e2:f2:b1:c4:f2:10:38:d2:d6:a8:e0:90:
6e:b2:b8:71:33:4f:39:41:d1:45:32:3a:b2:15:b1:
97:32:b8:19:af:3a:0b:04:64:f4:10:01:a8:03:73:
e3:54:6e:26:34:38:73:b5:12:62:0f:02:e8:df:c8:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A7:E8:1A:87:CC:6A:00:B5:77:9B:D1:F1:71:3C:7B:A4:DD:21:EF
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:de:8c:ec:d4:a2:45:6d:d4:92:1b:9c:e3:84:f4:d3:71:22:
1d:fc:c8:f2:1b:7d:dd:e5:06:f0:4e:f5:f0:1d:a9:71:f9:c7:
f4:0c:69:86:3f:17:d1:4a:cc:e1:aa:b9:eb:3d:69:36:bf:86:
a4:76:a9:56:8e:cb:2e:43:7e:e4:82:27:7a:1a:49:5c:7a:e4:
6f:81:c1:23:fe:e5:e9:cc:f5:b1:0d:c0:bd:87:f1:f5:8f:bb:
bc:91:81:4a:29:58:f2:8e:a9:d5:3d:50:d0:5a:2f:13:3a:80:
90:91:81:8b:09:f9:ad:48:83:c8:b4:ea:2d:30:fb:7a:9d:96:
69:b1:76:6c:88:84:90:0a:18:d5:73:5b:2a:c0:ad:fc:fc:be:
53:38:92:a0:24:a1:ca:e4:f6:1b:f3:28:d8:06:70:32:28:dc:
9b:e4:90:ad:5a:e5:66:82:2e:03:37:2f:8c:58:0b:05:ca:a2:
b3:a4:c2:0e:0d:95:1c:e1:d7:bd:31:a0:f0:03:14:51:cd:d1:
f2:71:86:0f:78:fc:e4:4a:6a:5d:b9:61:4a:e5:ac:d0:58:06:
e8:de:09:95:bd:f4:35:7b:1c:ab:e3:75:22:0a:6e:3a:2d:8e:
bd:38:c2:a2:78:de:c6:5b:7a:a2:84:2a:d2:4a:94:d0:ea:ad:
14:c2:98:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPLSLArflh26UbfLF54wJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNTM4MjljMDYxYThhZjI2ZGU5NDZmYzllODE4ODVjNzRj
MTc0YzcwHhcNMjUxMTA0MDUwMDE1WhcNMjUxMTA1MDUwMDE1WjAzMTEwLwYDVQQD
EygzY2E3ZTgxYTg3Y2M2YTAwYjU3NzliZDFmMTcxM2M3YmE0ZGQyMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyBhoiR6nxFpFSKV9e0HxLXlGbVW
gCvuzHMh0oTAak525A45xmv8Lm96dD81rnU3FaeA7l+I7wHo13GVbruDzo40qB2p
2aF7aw0Wc01Ga0onarG9PioQY7rN1BI55RygRBXIZRlYu0c6nPE3HVsJzzDtM6YV
r07z+fodWXA93P03pv5bbfzi1TyN16M5DXcZ9IfDsIP/FrLq5PxXnbxgO8qc/K77
Kwth9XDf31hSsET9SKxiCz5xOWkyPMAeKDpYSLClO5vi8rHE8hA40tao4JBusrhx
M085QdFFMjqyFbGXMrgZrzoLBGT0EAGoA3PjVG4mNDhztRJiDwLo38iuzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyn6BqHzGoAtXeb0fFxPHuk3SHvMB8GA1UdIwQY
MBaAFGNTgpwGGorybelG/J6BiFx0wXTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEt
ODE2MjAzZDIxZDEyLzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEtODE2MjAzZDIxZDEy
LzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACd6M7NSi
RW3Ukhuc44T003EiHfzI8ht93eUG8E718B2pcfnH9Axphj8X0UrM4aq56z1pNr+G
pHapVo7LLkN+5IInehpJXHrkb4HBI/7l6cz1sQ3AvYfx9Y+7vJGBSilY8o6p1T1Q
0FovEzqAkJGBiwn5rUiDyLTqLTD7ep2WabF2bIiEkAoY1XNbKsCt/Py+UziSoCSh
yuT2G/Mo2AZwMijcm+SQrVrlZoIuAzcvjFgLBcqis6TCDg2VHOHXvTGg8AMUUc3R
8nGGD3j85EpqXblhSuWs0FgG6N4Jlb30NXscq+N1IgpuOi2OvTjConjexlt6ooQq
0kqU0OqtFMKY+w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:42 2025 by rpki-client