Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File: j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier: KQcLZurtisBSkNsg+PH/Mf/2On66b6niJSb2OUFhNq8=
Subject key identifier: A5:BC:05:34:FE:54:69:D4:FB:B6:8B:9F:CB:41:F4:AD:06:55:0C:BE
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial: 019A4E869989D3CA7115BBE4CA226DB8022E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number: 0C9D
Signing time: Tue 04 Nov 2025 11:00:35 +0000
Manifest this update: Tue 04 Nov 2025 11:00:35 +0000
Manifest next update: Wed 05 Nov 2025 11:00:35 +0000
Files and hashes: 1: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (hash: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=)
2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: LRhELYnc0/EyJ+5gbKHdRcLtCoCdSwVNmraeyt+jYPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:99:89:d3:ca:71:15:bb:e4:ca:22:6d:b8:02:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
Validity
Not Before: Nov 4 11:00:35 2025 GMT
Not After : Nov 5 11:00:35 2025 GMT
Subject: CN=a5bc0534fe5469d4fbb68b9fcb41f4ad06550cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:45:72:8e:1a:0b:cc:23:23:83:6e:8f:58:
42:04:01:7d:ca:bd:ec:c6:df:98:3f:b7:97:b4:f5:
40:24:6b:6f:4f:5e:a0:c7:c6:96:41:59:3e:4d:56:
37:24:87:cd:3b:33:c3:49:b5:d6:93:31:41:d9:a4:
ad:10:44:7e:48:9f:95:35:bf:d9:79:e2:58:e4:51:
57:40:75:73:fd:23:15:b0:2a:ee:44:0b:17:7d:57:
0a:6f:8d:43:5b:11:67:39:e9:05:04:de:f0:09:70:
0d:4a:96:00:00:20:78:94:88:cb:1a:6e:33:98:08:
cc:2e:1a:61:ed:5e:44:c8:16:c0:d3:63:10:04:46:
93:86:a7:df:bb:3c:de:ef:75:a9:0f:02:98:35:74:
da:e7:73:f8:22:1a:b8:b1:4b:23:20:5e:c2:38:ef:
fd:76:bf:14:52:88:b8:7e:37:fe:38:36:7b:a2:78:
d8:2b:b6:fa:5b:1a:35:e6:95:2f:a5:ca:12:d3:5a:
0b:e8:20:c8:39:87:01:84:54:a7:67:6d:67:84:6f:
13:49:87:f4:f1:d5:c4:77:88:5c:a1:a9:c8:6f:ee:
1f:74:03:e3:b0:a2:6e:de:b5:0f:48:42:98:0c:88:
91:78:54:97:cc:6a:8f:69:3d:2a:bd:84:fe:1f:67:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BC:05:34:FE:54:69:D4:FB:B6:8B:9F:CB:41:F4:AD:06:55:0C:BE
X509v3 Authority Key Identifier:
keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1e:e1:6a:81:68:98:16:66:c6:00:ed:b9:bd:5c:b1:98:f4:
c4:d7:1b:bb:65:ae:87:3a:80:53:25:ad:31:d5:c1:a5:57:39:
25:3a:78:51:11:56:e8:48:49:b8:e8:80:54:d7:68:7a:85:a9:
12:ba:76:8a:5c:de:f9:2c:72:76:84:55:cf:38:a3:18:4c:b6:
7d:b3:e7:e4:f0:3b:0c:d7:12:6e:5f:cf:74:28:08:0b:3a:04:
21:e5:a7:c9:df:e2:6d:b5:ca:6a:d3:18:f1:e8:c6:f7:7f:65:
f1:f7:d1:16:ec:29:38:20:a8:62:6e:25:2c:44:bb:92:82:68:
7f:79:36:1c:82:ff:dd:e0:58:92:47:ee:b2:eb:c5:0b:45:49:
2d:10:89:4d:52:43:21:1d:f4:8a:b6:ee:2b:07:ad:ed:0f:c7:
a7:a1:d8:63:08:a9:6c:60:ca:0f:b9:8b:b7:70:37:c7:91:2c:
a9:65:9a:af:d6:c4:e4:75:e2:76:33:7e:f6:fc:fe:fa:1e:21:
a5:9d:3d:7c:d1:a9:81:04:d8:d6:00:00:ec:55:71:63:1f:42:
c7:2d:67:02:c7:02:96:f9:d4:4c:36:3b:31:a3:45:05:a4:99:
fd:1f:70:51:ad:2f:4a:a3:c5:db:b8:74:1b:39:0e:bb:df:c3:
0a:30:06:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhpmJ08pxFbvkyiJtuAIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTYxM2JlZWJiN2VmMzY5OTJjMDQ5MWFkMTNiMjY3MDcw
NTcyNjAwHhcNMjUxMTA0MTEwMDM1WhcNMjUxMTA1MTEwMDM1WjAzMTEwLwYDVQQD
EyhhNWJjMDUzNGZlNTQ2OWQ0ZmJiNjhiOWZjYjQxZjRhZDA2NTUwY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10BFco4aC8wjI4Nuj1hCBAF9yr3s
xt+YP7eXtPVAJGtvT16gx8aWQVk+TVY3JIfNOzPDSbXWkzFB2aStEER+SJ+VNb/Z
eeJY5FFXQHVz/SMVsCruRAsXfVcKb41DWxFnOekFBN7wCXANSpYAACB4lIjLGm4z
mAjMLhph7V5EyBbA02MQBEaThqffuzze73WpDwKYNXTa53P4Ihq4sUsjIF7COO/9
dr8UUoi4fjf+ODZ7onjYK7b6Wxo15pUvpcoS01oL6CDIOYcBhFSnZ21nhG8TSYf0
8dXEd4hcoanIb+4fdAPjsKJu3rUPSEKYDIiReFSXzGqPaT0qvYT+H2drfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKW8BTT+VGnU+7aLn8tB9K0GVQy+MB8GA1UdIwQY
MBaAFI/mE77rt+82mSwEka0TsmcHBXJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYt
ZmE2NjU0YTJhNmZlLzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYtZmE2NjU0YTJhNmZl
LzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB7haoFo
mBZmxgDtub1csZj0xNcbu2WuhzqAUyWtMdXBpVc5JTp4URFW6EhJuOiAVNdoeoWp
Erp2ilze+SxydoRVzzijGEy2fbPn5PA7DNcSbl/PdCgICzoEIeWnyd/ibbXKatMY
8ejG939l8ffRFuwpOCCoYm4lLES7koJof3k2HIL/3eBYkkfusuvFC0VJLRCJTVJD
IR30irbuKwet7Q/Hp6HYYwipbGDKD7mLt3A3x5EsqWWar9bE5HXidjN+9vz++h4h
pZ09fNGpgQTY1gAA7FVxYx9Cxy1nAscClvnUTDY7MaNFBaSZ/R9wUa0vSqPF27h0
GzkOu9/DCjAG2Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:27 2025 by rpki-client