Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: jGPy0miqwKgJj7+oMCunNNW8lK3qgqsXQOohmTi17zo=
Subject key identifier: F9:02:62:53:1A:EA:30:29:8D:80:44:75:F4:AA:14:BF:9B:3A:14:55
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 019A4DE1B6788AE71CED89456F56E6E7CB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 1391
Signing time: Tue 04 Nov 2025 08:00:29 +0000
Manifest this update: Tue 04 Nov 2025 08:00:29 +0000
Manifest next update: Wed 05 Nov 2025 08:00:29 +0000
Files and hashes: 1: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (hash: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: uxH0wOr8lGO+BzDMXDUvcdPpXhbZL7cA+DMTVShhiBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b6:78:8a:e7:1c:ed:89:45:6f:56:e6:e7:cb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Nov 4 08:00:29 2025 GMT
Not After : Nov 5 08:00:29 2025 GMT
Subject: CN=f90262531aea30298d804475f4aa14bf9b3a1455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:81:07:85:48:da:da:35:f1:8a:f8:ab:e3:
bf:c9:9b:b3:29:dc:41:d9:91:e6:d7:71:93:e1:f3:
32:0f:67:04:8b:8d:75:87:92:58:ab:3f:8b:63:fc:
48:04:df:05:db:44:2a:7d:60:95:2f:73:bd:fe:92:
d6:94:1c:94:3d:de:ca:73:bd:19:64:fb:fd:84:4b:
15:db:2e:d0:b9:ef:a6:51:0e:ac:1e:c9:9b:12:f6:
d9:7d:ca:de:62:07:30:59:d3:8f:80:85:00:35:43:
c8:76:55:ef:97:21:fc:48:6c:8c:aa:61:f7:91:5f:
a3:fd:8a:fa:43:6d:a2:e0:98:31:cd:17:47:14:42:
55:d1:ba:cf:18:b3:82:a8:ae:a5:3a:75:5d:68:09:
a1:a9:66:45:ea:cc:70:9f:99:77:3d:de:4d:bb:94:
73:21:8f:81:e1:1e:3c:8b:31:89:e2:cb:84:41:5f:
47:79:4c:81:7c:95:52:0e:43:aa:7b:f5:1b:dd:c8:
f6:63:01:ba:ea:1f:b9:06:13:08:f8:6c:98:ed:33:
94:9d:d6:78:e6:eb:4b:bb:56:26:4b:62:c9:8c:0d:
cd:28:2f:0e:95:c8:c7:ea:ab:19:11:5b:7c:99:72:
04:68:fa:25:4c:62:19:56:5c:06:95:8c:3c:66:f2:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:02:62:53:1A:EA:30:29:8D:80:44:75:F4:AA:14:BF:9B:3A:14:55
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:54:bc:0c:2f:22:3b:82:54:b8:d8:98:8a:dc:43:bb:ea:73:
b7:46:d0:00:93:ea:14:11:38:55:12:49:55:6d:1f:51:0b:ce:
65:4b:41:50:d0:e4:b4:e0:62:fc:5b:b9:0e:ab:c9:08:57:ea:
e4:d3:7f:6e:2d:2a:da:0b:4a:3f:80:9f:8d:49:d0:12:e1:bc:
be:01:97:10:43:56:d4:6b:c6:87:60:f9:a2:4f:e1:1a:5c:66:
0c:30:c4:9d:6f:df:31:35:4c:14:65:3a:8d:dd:de:20:b0:7b:
95:86:10:9e:fd:9a:88:46:fa:62:49:79:a3:12:d1:b5:2c:59:
a6:a5:b5:c1:a6:2e:d2:33:f0:47:79:bf:a5:66:ea:32:32:ba:
97:ab:fa:96:33:41:27:09:10:0d:ed:ab:0d:9e:db:ea:59:07:
49:4c:bb:85:c0:15:7d:f7:1a:e6:c2:02:d6:92:f4:cc:6e:94:
78:0f:53:11:33:3a:6f:ce:38:9f:ec:2d:7e:1c:98:53:b2:ed:
3a:dc:6b:6c:ce:e8:52:9e:4b:85:7a:cf:f4:9b:64:17:fb:ef:
62:ee:1d:19:cc:a3:b2:d1:f1:3e:de:39:61:7d:43:98:59:2a:
87:c1:95:64:c6:74:22:62:a3:8b:43:0e:2e:00:9a:6f:5a:96:
79:de:bf:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4bZ4iucc7YlFb1bm58udMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Mjg5NTM1ZTdlNGQyM2U2M2UxNzhlM2ZiNWJmMDU2ZmU4
YWUyNzcwHhcNMjUxMTA0MDgwMDI5WhcNMjUxMTA1MDgwMDI5WjAzMTEwLwYDVQQD
EyhmOTAyNjI1MzFhZWEzMDI5OGQ4MDQ0NzVmNGFhMTRiZjliM2ExNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRqBB4VI2to18Yr4q+O/yZuzKdxB
2ZHm13GT4fMyD2cEi411h5JYqz+LY/xIBN8F20QqfWCVL3O9/pLWlByUPd7Kc70Z
ZPv9hEsV2y7Que+mUQ6sHsmbEvbZfcreYgcwWdOPgIUANUPIdlXvlyH8SGyMqmH3
kV+j/Yr6Q22i4JgxzRdHFEJV0brPGLOCqK6lOnVdaAmhqWZF6sxwn5l3Pd5Nu5Rz
IY+B4R48izGJ4suEQV9HeUyBfJVSDkOqe/Ub3cj2YwG66h+5BhMI+GyY7TOUndZ4
5utLu1YmS2LJjA3NKC8OlcjH6qsZEVt8mXIEaPolTGIZVlwGlYw8ZvJNPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkCYlMa6jApjYBEdfSqFL+bOhRVMB8GA1UdIwQY
MBaAFMgolTXn5NI+Y+F44/tb8Fb+iuJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQt
NjZhNWVjYzg0NjE2LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQtNjZhNWVjYzg0NjE2
LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVS8DC8i
O4JUuNiYitxDu+pzt0bQAJPqFBE4VRJJVW0fUQvOZUtBUNDktOBi/Fu5DqvJCFfq
5NN/bi0q2gtKP4CfjUnQEuG8vgGXEENW1GvGh2D5ok/hGlxmDDDEnW/fMTVMFGU6
jd3eILB7lYYQnv2aiEb6Ykl5oxLRtSxZpqW1waYu0jPwR3m/pWbqMjK6l6v6ljNB
JwkQDe2rDZ7b6lkHSUy7hcAVffca5sIC1pL0zG6UeA9TETM6b844n+wtfhyYU7Lt
OtxrbM7oUp5LhXrP9JtkF/vvYu4dGcyjstHxPt45YX1DmFkqh8GVZMZ0ImKji0MO
LgCab1qWed6/4g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:43 2025 by rpki-client