Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier: 8hW2nmg0ABjQLdz6gJlytQOfF4S51i7hUEZPBrjZFuM=
Subject key identifier: 62:3A:17:F3:83:44:64:98:DD:35:06:D6:A8:F0:F1:B3:95:F8:D4:EB
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 019A4EF5BF6E7BC19EB2DAC3C9525BA74B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number: 1076
Signing time: Tue 04 Nov 2025 13:01:59 +0000
Manifest this update: Tue 04 Nov 2025 13:01:59 +0000
Manifest next update: Wed 05 Nov 2025 13:01:59 +0000
Files and hashes: 1: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (hash: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=)
2: C1FyQJSK2-uv7URyciZXxMvVb6c.roa (hash: CAmInxyQhyb9MZHRVwkcOEX1WeCGUI9sXRoPqIH4UiI=)
3: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (hash: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=)
4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: r4MVHCrcU63e4fm0RHo+Jb28UIKWtzWx3a/T4k6QCT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bf:6e:7b:c1:9e:b2:da:c3:c9:52:5b:a7:4b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Nov 4 13:01:59 2025 GMT
Not After : Nov 5 13:01:59 2025 GMT
Subject: CN=623a17f383446498dd3506d6a8f0f1b395f8d4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:6d:48:df:d1:6f:de:fb:45:3e:38:80:a7:
be:48:0c:9c:f0:87:8d:c6:1e:08:c4:c1:66:69:b8:
c7:e8:34:65:cc:7b:e5:d4:f3:6c:66:c3:9f:17:2e:
f7:d4:74:e3:08:fd:48:d3:c0:0d:ad:2d:ce:e9:4e:
4e:16:89:22:21:05:d0:2a:5e:55:43:b1:c9:de:5e:
8b:25:bd:43:94:d6:77:28:bc:2a:c9:2e:d9:f5:6e:
ac:11:40:6d:c6:b9:c2:d0:f7:30:f1:75:bd:07:04:
ba:c7:59:9f:72:ec:bb:2d:2a:3e:ff:35:91:b6:1f:
f8:e0:a7:8d:c5:90:ab:0b:de:1c:a5:42:c6:4d:59:
60:1c:c6:01:6e:22:15:c1:93:c5:1f:d3:8a:2a:d7:
14:2d:c6:52:73:69:c6:6c:62:d2:24:2d:64:8e:fb:
42:46:2b:e1:a8:20:2e:0a:9d:21:bc:ab:48:4b:99:
c2:92:5e:36:e8:94:4c:58:b1:9a:97:ac:bf:73:c2:
99:f2:76:4c:a3:07:09:6d:fb:fa:45:5d:7c:a3:62:
03:39:76:a9:d4:13:f1:8b:06:52:bb:4f:f3:99:51:
c0:0c:d8:e1:e0:9f:8c:82:cc:34:1a:18:34:7f:62:
8a:be:77:82:cc:11:85:31:98:5a:d8:28:54:73:60:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3A:17:F3:83:44:64:98:DD:35:06:D6:A8:F0:F1:B3:95:F8:D4:EB
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ad:c3:6f:16:2a:1f:50:e6:b0:72:fb:75:03:98:d6:c4:d4:
84:be:e3:4b:b1:8c:55:84:2a:e7:01:fd:ee:51:0d:ad:69:00:
1c:14:e7:f5:4f:fe:4c:4d:e0:b3:1c:ad:78:61:10:d8:88:2f:
39:23:c6:33:0c:58:93:f9:e5:b9:2e:b5:de:ae:91:c2:a6:1c:
e4:cb:e4:36:f0:0f:8c:38:c4:2a:ec:24:d3:a2:ba:15:c5:20:
0f:e9:d1:0d:98:d5:3d:11:8c:c2:fa:ce:0b:ec:c4:ae:96:1f:
9b:73:62:9b:84:5a:d2:6b:05:36:a6:c2:b2:be:08:9b:c8:a0:
2d:a0:a4:54:15:58:ab:c7:cf:fe:16:95:8e:5d:d0:bb:d4:75:
c1:6f:75:b6:e9:61:40:50:07:c9:d9:3a:0e:c9:d4:f1:5a:61:
d0:43:09:3c:14:f3:91:af:e7:99:5a:e1:01:a3:87:3e:66:b1:
15:ef:24:7b:7d:69:b5:81:29:17:0d:85:d7:f9:00:92:df:31:
ef:27:bd:26:6c:0f:67:14:db:96:85:fc:5a:36:18:ce:1a:0c:
c0:e7:55:44:50:7a:49:cd:51:8b:57:bb:4b:1c:96:21:b5:2b:
be:b9:59:b3:c4:4b:55:c9:df:8b:2b:0f:f6:93:4d:a6:c3:e0:
07:e5:18:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9b9ue8GestrDyVJbp0uOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzk4MDRlMjI3ZWFhYzlhYzA5YjA4MjFmYzA3ZWUyODE3
Nzc3YjUwHhcNMjUxMTA0MTMwMTU5WhcNMjUxMTA1MTMwMTU5WjAzMTEwLwYDVQQD
Eyg2MjNhMTdmMzgzNDQ2NDk4ZGQzNTA2ZDZhOGYwZjFiMzk1ZjhkNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe9tSN/Rb977RT44gKe+SAyc8IeN
xh4IxMFmabjH6DRlzHvl1PNsZsOfFy731HTjCP1I08ANrS3O6U5OFokiIQXQKl5V
Q7HJ3l6LJb1DlNZ3KLwqyS7Z9W6sEUBtxrnC0Pcw8XW9BwS6x1mfcuy7LSo+/zWR
th/44KeNxZCrC94cpULGTVlgHMYBbiIVwZPFH9OKKtcULcZSc2nGbGLSJC1kjvtC
RivhqCAuCp0hvKtIS5nCkl426JRMWLGal6y/c8KZ8nZMowcJbfv6RV18o2IDOXap
1BPxiwZSu0/zmVHADNjh4J+Mgsw0Ghg0f2KKvneCzBGFMZha2ChUc2C1RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGI6F/ODRGSY3TUG1qjw8bOV+NTrMB8GA1UdIwQY
MBaAFMrJgE4ifqrJrAmwgh/AfuKBd3e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEt
OTBmYjU3ZDQwY2E3LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEtOTBmYjU3ZDQwY2E3
LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnq3DbxYq
H1DmsHL7dQOY1sTUhL7jS7GMVYQq5wH97lENrWkAHBTn9U/+TE3gsxyteGEQ2Igv
OSPGMwxYk/nluS613q6RwqYc5MvkNvAPjDjEKuwk06K6FcUgD+nRDZjVPRGMwvrO
C+zErpYfm3Nim4Ra0msFNqbCsr4Im8igLaCkVBVYq8fP/haVjl3Qu9R1wW91tulh
QFAHydk6DsnU8Vph0EMJPBTzka/nmVrhAaOHPmaxFe8ke31ptYEpFw2F1/kAkt8x
7ye9JmwPZxTbloX8WjYYzhoMwOdVRFB6Sc1Ri1e7SxyWIbUrvrlZs8RLVcnfiysP
9pNNpsPgB+UYTA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:45:16 2025 by rpki-client