Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft (raw, json)
Hash identifier: NULc/gZj+q08wAYU0YRUIPFCJsO4okpxGC9nJN2h9IY=
Subject key identifier: E1:AA:57:F1:17:91:05:CD:8A:59:C0:DE:69:E8:F0:AD:90:C8:29:9F
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 019A4DE1E83325B9E9E7F5CC0FEA5176CADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
Manifest number: 0A29
Signing time: Tue 04 Nov 2025 08:00:41 +0000
Manifest this update: Tue 04 Nov 2025 08:00:41 +0000
Manifest next update: Wed 05 Nov 2025 08:00:41 +0000
Files and hashes: 1: FsywoxiqGbiXN3gXMv28UkxtGzE.roa (hash: 27vs8gux+UHGS5Np9ysCtz/GYc8vnHVfHjLJxXKtJgE=)
2: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl (hash: mJgQmZIU1Mg3zhUqBKFNDftw9ve6PKMZwHzn+wdWYwU=)
3: qM3ZAvps-gKGvN30T9QvpmI8sJE.roa (hash: xtyLgmvHq7ABuRoQiqspwHHgcXHUL2RCU/HQCa1ypNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e8:33:25:b9:e9:e7:f5:cc:0f:ea:51:76:ca:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Nov 4 08:00:41 2025 GMT
Not After : Nov 5 08:00:41 2025 GMT
Subject: CN=e1aa57f1179105cd8a59c0de69e8f0ad90c8299f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:85:18:09:84:06:48:b8:e9:bd:fe:3f:f1:
aa:89:f7:f2:07:b9:3c:6c:d2:6f:7c:ba:54:66:3a:
d2:f6:e7:80:df:8a:3a:eb:a7:37:a6:ce:a8:26:62:
92:41:9a:1c:5c:6c:80:de:5b:16:b1:30:9f:3c:04:
38:35:e4:14:5f:5a:4c:e1:3e:db:89:39:44:fb:bf:
43:82:4c:78:44:b1:44:31:b7:60:4c:7f:e1:2a:b2:
b7:8c:31:c6:9b:c3:63:7a:9b:52:50:b1:d3:38:ef:
81:47:d6:73:9e:6d:23:cd:ba:97:81:2e:fa:7c:8f:
d4:cc:6d:c5:98:33:c7:a5:33:19:9d:1e:ff:27:db:
fb:0a:a1:27:13:65:8b:1e:d7:ee:32:20:0a:81:25:
a3:3b:30:f1:b7:2c:0e:42:9d:11:74:98:74:3e:31:
45:e0:1f:16:17:77:f2:2b:49:c1:de:7f:c2:08:7e:
77:6f:41:23:85:6e:c0:4a:92:00:40:76:71:d3:77:
fb:a8:95:0c:39:f0:75:ea:41:96:cd:5e:dd:96:12:
86:95:68:80:76:0a:52:36:5c:57:b6:a9:3d:5f:34:
87:09:27:78:36:a6:1e:5c:00:5e:a1:8f:eb:de:78:
61:be:c3:4b:86:0e:4b:51:bf:8e:3f:30:23:bb:cd:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:57:F1:17:91:05:CD:8A:59:C0:DE:69:E8:F0:AD:90:C8:29:9F
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3e:05:40:5a:47:f6:c0:4b:d7:3c:ee:4a:0b:60:1f:19:c3:
fa:72:7d:b8:b9:14:32:1f:10:09:c2:35:56:12:67:38:f1:1e:
ec:d1:2f:cb:64:83:ca:a0:38:f9:8c:43:26:4c:63:c4:b0:05:
c4:8e:a2:50:9b:31:f4:b2:1f:fb:ca:f4:8f:40:ff:4a:4f:f2:
e4:5c:10:75:84:c8:cc:87:61:c7:bf:90:06:b6:76:0e:73:a8:
87:e5:ed:88:ca:37:22:a0:ab:d2:26:46:f2:30:b5:c4:e6:b4:
d1:a0:6c:7f:0b:f8:a0:c5:45:a0:df:25:a5:66:37:cd:8f:38:
8d:4e:e9:47:be:e1:86:3c:ab:6b:4e:f0:7d:64:9a:3b:53:f5:
82:ae:58:19:fa:a1:cd:96:fd:a1:d2:87:af:8b:33:0c:f7:7b:
d6:84:40:9e:66:65:91:3c:f2:f1:bc:8d:cf:95:07:d9:f0:96:
85:fa:83:94:f8:28:b1:c1:47:fe:32:39:d3:76:7c:4d:36:68:
3f:24:15:20:ad:ac:fc:c8:e6:61:36:0f:a7:5b:b3:70:25:a3:
61:e0:62:7d:66:28:b6:51:8c:cf:01:26:77:ca:3c:a1:c8:ec:
6c:4b:ed:6a:51:33:7d:ae:bd:c7:81:df:16:1b:ce:e9:69:42:
ac:91:c0:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4egzJbnp5/XMD+pRdsrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjllNzBhZjJmN2UxOGNiYzE5Zjk3Y2NhOGZkNmMwNTA5
OTc0MWQwHhcNMjUxMTA0MDgwMDQxWhcNMjUxMTA1MDgwMDQxWjAzMTEwLwYDVQQD
EyhlMWFhNTdmMTE3OTEwNWNkOGE1OWMwZGU2OWU4ZjBhZDkwYzgyOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u2FGAmEBki46b3+P/GqiffyB7k8
bNJvfLpUZjrS9ueA34o666c3ps6oJmKSQZocXGyA3lsWsTCfPAQ4NeQUX1pM4T7b
iTlE+79Dgkx4RLFEMbdgTH/hKrK3jDHGm8NjeptSULHTOO+BR9Zznm0jzbqXgS76
fI/UzG3FmDPHpTMZnR7/J9v7CqEnE2WLHtfuMiAKgSWjOzDxtywOQp0RdJh0PjFF
4B8WF3fyK0nB3n/CCH53b0EjhW7ASpIAQHZx03f7qJUMOfB16kGWzV7dlhKGlWiA
dgpSNlxXtqk9XzSHCSd4NqYeXABeoY/r3nhhvsNLhg5LUb+OPzAju82mRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGqV/EXkQXNilnA3mno8K2QyCmfMB8GA1UdIwQY
MBaAFP8p5wry9+GMvBn5fMqP1sBQmXQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lubkN2TDM0WXk4R2ZsOHlvX1d3RkNaZEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYzJkODktNDRkZC00YmFiLWFlN2Et
Y2YyMGU1YjY3ZmM4LzEvX3lubkN2TDM0WXk4R2ZsOHlvX1d3RkNaZEIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lYzJkODktNDRkZC00YmFiLWFlN2EtY2YyMGU1YjY3ZmM4
LzEvX3lubkN2TDM0WXk4R2ZsOHlvX1d3RkNaZEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz4FQFpH
9sBL1zzuSgtgHxnD+nJ9uLkUMh8QCcI1VhJnOPEe7NEvy2SDyqA4+YxDJkxjxLAF
xI6iUJsx9LIf+8r0j0D/Sk/y5FwQdYTIzIdhx7+QBrZ2DnOoh+XtiMo3IqCr0iZG
8jC1xOa00aBsfwv4oMVFoN8lpWY3zY84jU7pR77hhjyra07wfWSaO1P1gq5YGfqh
zZb9odKHr4szDPd71oRAnmZlkTzy8byNz5UH2fCWhfqDlPgoscFH/jI503Z8TTZo
PyQVIK2s/MjmYTYPp1uzcCWjYeBifWYotlGMzwEmd8o8ocjsbEvtalEzfa69x4Hf
FhvO6WlCrJHAnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:01 2025 by rpki-client