Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier: A9786KSA8HP5Zyk2i+WvPLPZoHeGN4jBuXOqyHVZ7L4=
Subject key identifier: 0F:47:F8:2C:0D:E1:55:DC:12:11:5A:83:07:1D:99:17:56:D7:56:A3
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 019A4CCED1C92068F98654E7BCF428ABACDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number: 067C
Signing time: Tue 04 Nov 2025 03:00:13 +0000
Manifest this update: Tue 04 Nov 2025 03:00:13 +0000
Manifest next update: Wed 05 Nov 2025 03:00:13 +0000
Files and hashes: 1: NkRmhAwiBvZ-mI3ws7AoUtnvJlw.roa (hash: Qmu587A5vz0QqePux9/8aXshlrfRjr3JIejbf/nnhGw=)
2: RL3xJ4ezhmNdZ1rcVqISik-0MMo.roa (hash: xlGD8LTXAgZF6ai7L4BH7qy3aFEkBhgRkokviaW4/Ws=)
3: T58xMDbLANQb9Kgw893xpFau1Fs.roa (hash: 6zsxCyqe8IvUF3KmmNmoDeEUsdW8rKFl85HR/TG08js=)
4: Xa0B9m97ByYphB5XrMGxVdHZyes.roa (hash: mXqV2/vQX57Ww79AIe2GrEvrqiY5gtML1rzRmVpsOdY=)
5: x1uDU9Zoy9uOw-P8QajIkhafsls.roa (hash: DvZ2AA1RQvmoSZSW5gPnUUBwYA0pEWM/KDqbtkIXCWA=)
6: x9gEvmLiqp6QXnPTPsa-6i-pFyo.roa (hash: keFMGhxuV8MLlgHVwMp/d+A+4wpJiYJvnC3NEijngr0=)
7: xCnT23Rn0GW_J69HKTBn0CbUrEg.roa (hash: lihRtt/ALF9fF8QJo8U8WnJBS3k3roL75dQ2MUYDSMI=)
8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: cA6sAjSN/kwMK5Co2RHtIlH5QwSvHhDvMGPcnZb9W3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:ce:d1:c9:20:68:f9:86:54:e7:bc:f4:28:ab:ac:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Nov 4 03:00:13 2025 GMT
Not After : Nov 5 03:00:13 2025 GMT
Subject: CN=0f47f82c0de155dc12115a83071d991756d756a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:79:4e:0a:7c:50:26:28:44:a1:e0:90:bf:
78:b3:1d:78:da:dc:b7:80:b6:c3:35:0e:2a:98:31:
96:11:95:35:49:e5:e8:3d:b9:1c:7e:02:6e:d7:4e:
5b:c8:ba:1f:08:65:88:72:f2:65:fb:9d:14:84:89:
f0:f9:e7:a2:1c:88:67:cd:b6:be:13:77:f5:7b:d3:
f8:3a:f6:10:51:46:90:01:c8:f2:6e:cd:6b:d3:b0:
5e:5d:bd:51:32:af:36:27:b3:85:03:c4:7c:75:d8:
ab:30:3f:b5:81:bb:23:8a:7d:44:75:88:80:eb:80:
d0:4f:28:00:d1:2d:8c:b7:d7:2a:96:39:52:c1:a3:
81:a8:4e:63:8e:50:b8:9b:a0:f0:68:c7:ed:1f:ff:
65:09:4a:32:e2:bf:09:f0:86:5c:4f:80:e4:1f:db:
12:c0:5d:03:7a:7f:ff:7f:67:c8:7d:15:b6:c6:98:
20:3f:df:31:bf:72:52:24:75:fd:99:40:2d:4e:34:
db:f7:06:2c:36:0a:72:ed:84:95:28:a9:d2:4d:ed:
20:1b:a1:3b:ee:52:7b:7b:f9:a6:0a:f5:25:88:7b:
e1:50:d5:ea:ef:41:f2:23:ab:46:15:14:87:aa:9d:
72:a9:e8:a6:38:aa:7b:4d:46:8b:5f:1a:3e:a7:ee:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:47:F8:2C:0D:E1:55:DC:12:11:5A:83:07:1D:99:17:56:D7:56:A3
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5b:b3:bf:ee:b9:b0:c2:8f:eb:b9:0d:20:87:a4:ab:5b:54:
18:94:64:5b:1b:70:19:5d:c5:a5:80:52:85:88:0d:82:d2:4c:
cd:f3:01:67:b5:68:4f:51:5f:9b:6e:9c:2d:3a:c6:08:e1:e4:
d1:01:19:47:57:67:cc:aa:78:62:64:83:33:6c:a9:3c:78:ca:
6c:7d:be:00:68:af:86:be:9b:14:bb:67:db:96:d7:e6:6d:43:
5d:49:6c:11:00:95:93:af:a0:7d:90:5e:85:25:77:0a:64:e0:
d3:01:05:bf:d2:2e:cf:7d:20:c9:de:92:45:eb:1f:43:dc:60:
2a:e4:88:81:56:4e:54:99:9b:78:48:27:aa:06:c9:62:03:57:
ad:12:f2:c1:a5:37:11:02:25:c0:2b:f0:84:a7:a7:54:ac:3f:
29:88:81:50:ae:c0:61:c3:a4:9c:db:3f:11:b8:5e:38:86:13:
cf:0a:c5:3c:f5:ec:ad:3a:59:44:65:8c:4d:81:33:19:35:87:
b6:68:25:39:a7:75:7a:06:69:c3:78:ca:dc:02:ec:32:3b:a4:
8f:83:35:15:d7:c5:db:fd:9a:e2:13:53:0f:96:6a:06:57:be:
ee:18:77:de:1b:f5:77:c9:18:f8:0c:07:33:ba:09:18:95:3b:
6d:a0:a9:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMztHJIGj5hlTnvPQoq6zbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YWNmNTlhYmQ0YWJiZmJmODMwYTA2MDIyNWE5NmEyMTc5
YTI2OTQwHhcNMjUxMTA0MDMwMDEzWhcNMjUxMTA1MDMwMDEzWjAzMTEwLwYDVQQD
EygwZjQ3ZjgyYzBkZTE1NWRjMTIxMTVhODMwNzFkOTkxNzU2ZDc1NmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArop5Tgp8UCYoRKHgkL94sx142ty3
gLbDNQ4qmDGWEZU1SeXoPbkcfgJu105byLofCGWIcvJl+50UhInw+eeiHIhnzba+
E3f1e9P4OvYQUUaQAcjybs1r07BeXb1RMq82J7OFA8R8ddirMD+1gbsjin1EdYiA
64DQTygA0S2Mt9cqljlSwaOBqE5jjlC4m6DwaMftH/9lCUoy4r8J8IZcT4DkH9sS
wF0Den//f2fIfRW2xpggP98xv3JSJHX9mUAtTjTb9wYsNgpy7YSVKKnSTe0gG6E7
7lJ7e/mmCvUliHvhUNXq70HyI6tGFRSHqp1yqeimOKp7TUaLXxo+p+5rtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9H+CwN4VXcEhFagwcdmRdW11ajMB8GA1UdIwQY
MBaAFMis9Zq9Srv7+DCgYCJalqIXmiaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt
ODM4ZWJmNDEyYTYxLzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx
LzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYluzv+65
sMKP67kNIIekq1tUGJRkWxtwGV3FpYBShYgNgtJMzfMBZ7VoT1Ffm26cLTrGCOHk
0QEZR1dnzKp4YmSDM2ypPHjKbH2+AGivhr6bFLtn25bX5m1DXUlsEQCVk6+gfZBe
hSV3CmTg0wEFv9Iuz30gyd6SResfQ9xgKuSIgVZOVJmbeEgnqgbJYgNXrRLywaU3
EQIlwCvwhKenVKw/KYiBUK7AYcOknNs/EbheOIYTzwrFPPXsrTpZRGWMTYEzGTWH
tmglOad1egZpw3jK3ALsMjukj4M1FdfF2/2a4hNTD5ZqBle+7hh33hv1d8kY+AwH
M7oJGJU7baCpyw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:40 2025 by rpki-client