Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: Vz3kSY9ewEh6rGu/9WclHIW75zJshUn6rNYWgmqQI0E=
Subject key identifier: 06:DC:37:1F:46:FE:4D:86:01:E9:02:D4:44:DF:15:21:EF:F7:4B:CC
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 019A4D3D0BD6B170B4D9389CF6A8BA77C703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 138D
Signing time: Tue 04 Nov 2025 05:00:37 +0000
Manifest this update: Tue 04 Nov 2025 05:00:37 +0000
Manifest next update: Wed 05 Nov 2025 05:00:37 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: x49Dd5aHq61RrEQuHDZ5mTtPO6Fl8aH+xOfIKwMfz2w=)
2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:0b:d6:b1:70:b4:d9:38:9c:f6:a8:ba:77:c7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Nov 4 05:00:37 2025 GMT
Not After : Nov 5 05:00:37 2025 GMT
Subject: CN=06dc371f46fe4d8601e902d444df1521eff74bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:0f:1a:6e:29:27:95:e4:b2:df:f5:b0:cc:
1f:5c:3c:f0:93:9c:b5:0c:c4:87:46:bb:32:e1:a9:
3a:b1:9e:c8:34:37:14:40:58:29:ce:d0:16:65:46:
f9:1a:02:2e:bd:24:7d:97:47:c1:bf:de:58:92:f9:
29:44:6a:24:01:36:d8:9f:9e:10:d0:38:5a:37:d3:
7d:f7:34:b0:ff:21:7b:2a:2d:f9:b8:92:fc:33:a2:
c7:e7:31:f9:11:e6:5f:7f:ee:ad:5e:d2:f1:06:ff:
df:21:3d:b5:a9:37:c5:60:9a:4d:66:d7:1b:e2:7b:
ee:1b:ec:27:68:b3:69:36:4f:b2:4f:ed:a0:50:b5:
0d:e1:3f:16:4d:ae:9f:92:09:17:60:23:2d:68:80:
be:e6:09:09:e9:f7:c2:60:08:04:28:10:f5:dd:e0:
96:ba:e9:18:3b:c8:7c:b0:fe:a8:0f:05:c7:03:9d:
f6:a4:5a:b0:0b:9e:8c:f7:e4:41:bb:bd:96:e5:06:
98:96:2a:12:19:61:51:59:b4:62:23:6f:e9:0e:c9:
91:4c:79:56:19:16:e8:63:39:f1:31:2e:d0:fe:b3:
cf:fb:81:a6:a2:bc:1c:69:6b:49:16:0e:e3:c3:d1:
9b:a6:e8:fb:18:59:7b:94:e4:b8:a6:e6:20:3c:30:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DC:37:1F:46:FE:4D:86:01:E9:02:D4:44:DF:15:21:EF:F7:4B:CC
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:49:51:c9:da:7f:0a:8e:32:a4:d6:2b:23:cb:f0:00:41:aa:
c1:fe:26:62:38:05:4f:65:ab:e1:19:40:4c:91:88:76:e4:37:
7d:26:39:9c:01:9b:fa:3b:3b:97:5a:b7:73:78:0e:78:ca:95:
b5:96:06:b8:2f:46:33:bb:54:48:a0:18:df:af:2e:ef:96:83:
23:4c:74:18:3a:38:b4:9d:d8:c4:9e:c9:ca:1e:71:18:86:82:
c8:66:24:80:ad:7b:e8:b3:b9:af:9f:93:0e:de:70:00:58:76:
d9:bc:67:81:e7:1e:e9:d9:d1:64:20:b2:1a:9a:aa:1f:b6:5f:
ab:e4:64:3c:2a:5a:ec:88:59:54:4b:b1:a1:13:a6:68:2c:e2:
cb:23:a0:ce:12:f0:96:88:7b:40:40:08:6b:54:4c:ed:b6:16:
15:28:99:22:d8:25:b7:f5:b3:54:76:90:9f:99:cb:da:a8:0e:
fa:82:18:4a:85:e3:25:d0:f3:33:79:3a:2d:c8:19:f2:52:df:
9f:29:38:3d:34:ea:2e:d9:68:3e:53:6c:28:1a:d9:62:fb:55:
5e:f0:11:24:a0:99:20:2b:93:2a:57:06:16:96:4a:4d:ac:1d:
20:28:b9:88:e7:3e:78:9a:3d:ea:56:7f:7c:6a:bb:c4:9c:ae:
b4:e4:3e:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPQvWsXC02Tic9qi6d8cDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOGVjMzQzNTM4MGU4YWUxNWZjODFjZGRjYzk0Y2VlNjdk
NmIzOTAwHhcNMjUxMTA0MDUwMDM3WhcNMjUxMTA1MDUwMDM3WjAzMTEwLwYDVQQD
EygwNmRjMzcxZjQ2ZmU0ZDg2MDFlOTAyZDQ0NGRmMTUyMWVmZjc0YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RMPGm4pJ5Xkst/1sMwfXDzwk5y1
DMSHRrsy4ak6sZ7INDcUQFgpztAWZUb5GgIuvSR9l0fBv95YkvkpRGokATbYn54Q
0DhaN9N99zSw/yF7Ki35uJL8M6LH5zH5EeZff+6tXtLxBv/fIT21qTfFYJpNZtcb
4nvuG+wnaLNpNk+yT+2gULUN4T8WTa6fkgkXYCMtaIC+5gkJ6ffCYAgEKBD13eCW
uukYO8h8sP6oDwXHA532pFqwC56M9+RBu72W5QaYlioSGWFRWbRiI2/pDsmRTHlW
GRboYznxMS7Q/rPP+4GmorwcaWtJFg7jw9Gbpuj7GFl7lOS4puYgPDDYmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbcNx9G/k2GAekC1ETfFSHv90vMMB8GA1UdIwQY
MBaAFP2Ow0NTgOiuFfyBzdzJTO5n1rOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYt
Zjc2MjUyNjMwN2U4LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYtZjc2MjUyNjMwN2U4
LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUlRydp/
Co4ypNYrI8vwAEGqwf4mYjgFT2Wr4RlATJGIduQ3fSY5nAGb+js7l1q3c3gOeMqV
tZYGuC9GM7tUSKAY368u75aDI0x0GDo4tJ3YxJ7Jyh5xGIaCyGYkgK176LO5r5+T
Dt5wAFh22bxngece6dnRZCCyGpqqH7Zfq+RkPCpa7IhZVEuxoROmaCziyyOgzhLw
loh7QEAIa1RM7bYWFSiZItglt/WzVHaQn5nL2qgO+oIYSoXjJdDzM3k6LcgZ8lLf
nyk4PTTqLtloPlNsKBrZYvtVXvARJKCZICuTKlcGFpZKTawdICi5iOc+eJo96lZ/
fGq7xJyutOQ+2g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:34 2025 by rpki-client