Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: fWtG3yRwytE6yO21NqtUWroKNk2d6sP83JBpLlG+VLc=
Subject key identifier: 67:DF:C3:9C:27:C7:52:68:46:1B:F2:0D:20:8C:38:3F:7F:F5:F7:DC
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 019A4EF4A16BB75189AB8AB1C9A4166225B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:46 +0000
Manifest this update: Tue 04 Nov 2025 13:00:46 +0000
Manifest next update: Wed 05 Nov 2025 13:00:46 +0000
Files and hashes: 1: 6thBO5jod-S22ld5I7cCUqU9PPU.roa (hash: whhraWURnepuYYNpLNQlvK7It8S7aCrmfs8zXpfqsOc=)
2: bNZ4Q9wcD7yZAP2RwlbB4JNFkjQ.roa (hash: JZzkHPxKw9rE1eeiiSJfGm5FFzPkvIECAGzsNfZT2+0=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: cJ937l8rkD/Nj3NepycEuGL51axrklrj8ewKyT7Kk0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a1:6b:b7:51:89:ab:8a:b1:c9:a4:16:62:25:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Nov 4 13:00:46 2025 GMT
Not After : Nov 5 13:00:46 2025 GMT
Subject: CN=67dfc39c27c75268461bf20d208c383f7ff5f7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:ac:12:98:f7:67:08:21:bb:2d:e9:63:8f:
f2:1b:86:fd:28:f6:6e:dc:6a:7e:79:57:ef:28:cc:
63:ad:a1:ef:4d:2b:4d:db:71:cc:44:c7:69:22:02:
6e:69:07:47:99:cb:ca:dd:a2:1e:dc:0d:2f:97:00:
70:17:b5:c1:6c:ce:83:2c:f2:8e:3d:92:d1:7e:13:
b6:8c:e3:1f:a3:0a:98:33:42:b3:91:05:f1:8d:fa:
51:36:9d:0c:5e:69:b3:f2:33:81:a9:ab:b6:63:c4:
f4:de:18:77:25:08:d1:85:4f:ee:cd:b9:18:78:9f:
47:a2:8f:52:d0:66:fc:6c:dd:16:66:04:7b:94:b7:
c1:cc:26:57:f4:9b:f1:bc:b3:0e:98:84:bd:f0:54:
c1:38:dd:dd:c1:b0:ad:90:f8:ed:ce:2f:1b:d6:a9:
50:6a:d9:8f:aa:c0:11:44:d0:01:39:a0:d0:db:71:
8e:c4:a2:f3:93:59:29:65:40:7b:d7:e1:64:57:a5:
c8:b0:29:5e:6f:02:e8:03:68:bd:29:37:9b:6f:d0:
50:76:11:21:59:7f:d0:fd:81:c4:c4:a6:63:14:e2:
aa:75:4e:18:86:da:2b:56:f1:2d:e0:dd:0a:1d:f7:
2b:de:f1:e6:8f:6a:28:ef:a1:33:dc:61:36:1f:54:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:C3:9C:27:C7:52:68:46:1B:F2:0D:20:8C:38:3F:7F:F5:F7:DC
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3f:4e:9a:45:27:ae:9f:c4:7b:69:4b:64:72:d2:b4:89:b8:
cb:31:b3:ff:87:35:93:7c:62:04:07:cf:09:0e:dc:35:58:0d:
95:56:c6:a9:df:c4:8d:8a:dd:b9:22:29:df:d9:d3:51:98:c2:
ba:7c:78:c7:12:e7:46:d9:bf:75:b7:70:84:95:55:44:08:52:
de:c3:d6:ed:59:24:4d:0f:81:e1:72:b2:60:25:32:07:2a:23:
e9:51:14:51:f1:fe:8c:83:5d:d7:8b:5e:ed:bb:3b:07:e7:c2:
12:13:34:86:ea:41:f6:10:11:64:9c:ac:08:91:5a:af:3d:ee:
c5:59:5c:03:64:09:19:2b:ca:86:6a:d2:20:c4:08:d3:5f:38:
a4:88:7d:88:9f:90:89:e6:3e:4a:6a:3b:0b:2e:0f:e9:41:aa:
12:29:46:c0:cd:d0:85:67:b4:f7:83:64:f8:5f:8e:89:ca:a4:
b2:b4:36:73:57:6b:71:89:b3:2b:4b:9b:22:10:b2:dc:a2:cf:
48:e5:b1:44:07:61:b0:9b:10:0e:7d:65:32:e5:1b:9c:c6:0f:
77:55:9b:b1:8d:02:bf:f5:db:23:db:bb:64:57:89:84:64:50:
38:cd:3a:22:0f:d4:d5:38:d2:c7:f5:7d:fd:73:af:9b:4f:15:
fa:02:d8:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KFrt1GJq4qxyaQWYiWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQ3NGNlYjg1YWYzMTEyMmVkZTU4NmQ0ZDY1YjBmNWI0
ZDk3ZjAwHhcNMjUxMTA0MTMwMDQ2WhcNMjUxMTA1MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg2N2RmYzM5YzI3Yzc1MjY4NDYxYmYyMGQyMDhjMzgzZjdmZjVmN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1qsEpj3Zwghuy3pY4/yG4b9KPZu
3Gp+eVfvKMxjraHvTStN23HMRMdpIgJuaQdHmcvK3aIe3A0vlwBwF7XBbM6DLPKO
PZLRfhO2jOMfowqYM0KzkQXxjfpRNp0MXmmz8jOBqau2Y8T03hh3JQjRhU/uzbkY
eJ9Hoo9S0Gb8bN0WZgR7lLfBzCZX9JvxvLMOmIS98FTBON3dwbCtkPjtzi8b1qlQ
atmPqsARRNABOaDQ23GOxKLzk1kpZUB71+FkV6XIsClebwLoA2i9KTebb9BQdhEh
WX/Q/YHExKZjFOKqdU4YhtorVvEt4N0KHfcr3vHmj2oo76Ez3GE2H1QcuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGffw5wnx1JoRhvyDSCMOD9/9ffcMB8GA1UdIwQY
MBaAFMh0dM64WvMRIu3lhtTWWw9bTZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYt
MDM1ODY1MjNiMTMzLzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYtMDM1ODY1MjNiMTMz
LzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMz9OmkUn
rp/Ee2lLZHLStIm4yzGz/4c1k3xiBAfPCQ7cNVgNlVbGqd/EjYrduSIp39nTUZjC
unx4xxLnRtm/dbdwhJVVRAhS3sPW7VkkTQ+B4XKyYCUyByoj6VEUUfH+jINd14te
7bs7B+fCEhM0hupB9hARZJysCJFarz3uxVlcA2QJGSvKhmrSIMQI0184pIh9iJ+Q
ieY+Smo7Cy4P6UGqEilGwM3QhWe094Nk+F+OicqksrQ2c1drcYmzK0ubIhCy3KLP
SOWxRAdhsJsQDn1lMuUbnMYPd1WbsY0Cv/XbI9u7ZFeJhGRQOM06Ig/U1TjSx/V9
/XOvm08V+gLYLg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:38 2025 by rpki-client