Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: WpazwtzPtXtSakj4OYyFx3ildwR1EBehKlaaE+O0SDA=
Subject key identifier: 08:37:EF:54:72:DD:90:E8:E6:42:1A:CA:B0:07:C2:72:D9:BE:80:48
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019A4E86656D5146415AD464B4F06FDC0B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 11:00:21 +0000
Manifest this update: Tue 04 Nov 2025 11:00:21 +0000
Manifest next update: Wed 05 Nov 2025 11:00:21 +0000
Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: WBDB+QAgBGe9Z2vkRIEfaJjsXEk2kPnSYk+OSWwLde8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:65:6d:51:46:41:5a:d4:64:b4:f0:6f:dc:0b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Nov 4 11:00:21 2025 GMT
Not After : Nov 5 11:00:21 2025 GMT
Subject: CN=0837ef5472dd90e8e6421acab007c272d9be8048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:39:95:16:5a:a5:d7:2b:fb:2b:2b:69:30:
d5:e2:a8:f4:72:d3:c3:cb:a9:8f:b0:3e:56:39:8b:
aa:de:0c:ff:d9:d5:c3:7f:cd:79:34:b0:82:61:32:
e8:d4:79:da:0c:60:aa:86:19:2c:90:99:57:fa:c9:
dc:60:22:96:f8:a4:d7:5f:4d:f9:07:23:ef:45:c0:
94:cc:e1:cf:0a:5a:af:d3:ca:4d:a5:cc:4f:8d:0f:
2b:f6:c2:56:15:f5:17:e8:a2:ae:b2:1c:ab:ad:3f:
96:18:f0:d5:4c:df:bc:f2:93:ed:73:5f:b0:7d:6c:
f8:19:fd:8a:db:ed:e1:52:36:fb:cf:7d:ab:89:eb:
5d:55:93:03:f6:89:c2:54:44:f1:59:cd:c1:d8:20:
44:eb:93:1f:a7:ee:48:d0:58:8a:19:b4:3e:17:d0:
1d:e9:72:76:85:ae:a5:71:8b:ac:a1:55:fe:77:f0:
06:3f:72:4e:b6:ae:76:f6:14:de:20:00:9d:1e:6f:
a6:99:84:bf:6b:fa:91:02:c7:48:11:c8:ee:13:34:
d9:e6:af:91:5f:9f:6d:ac:f7:dc:cf:f2:71:30:61:
e5:b6:43:39:d1:cb:24:d4:c9:72:9e:b5:fe:93:f6:
83:6b:94:08:a2:51:ce:31:a3:10:b1:b3:7f:d4:43:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:37:EF:54:72:DD:90:E8:E6:42:1A:CA:B0:07:C2:72:D9:BE:80:48
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:21:50:fc:40:18:2a:cc:2e:3f:40:c1:23:f5:13:3a:d0:06:
98:3c:68:e1:10:36:4b:e5:d5:74:24:31:52:8c:db:36:67:c3:
c6:86:fc:ee:82:81:fd:94:2f:db:b6:15:bd:b3:43:2e:11:fe:
b5:e3:98:74:23:c6:fe:14:12:38:1c:a7:f2:6d:76:10:d6:06:
bc:ab:8c:5d:d6:56:30:d7:dc:37:40:db:dc:11:13:2e:ee:97:
74:f1:a7:b5:ac:30:4e:9c:fb:28:96:6c:b1:02:3e:d0:a5:3f:
6e:65:13:ca:fa:18:37:a1:11:61:c8:e0:c4:ea:2a:3c:59:05:
15:d0:c2:2f:e7:c0:18:fc:d6:97:db:9b:46:0c:71:ba:71:e6:
1a:12:42:fb:05:14:79:b0:9b:86:6a:46:04:50:8b:7c:67:2b:
51:d0:93:dd:e4:af:a5:f4:74:be:ee:d5:f0:c6:6e:b5:ec:c0:
47:77:ac:e4:ae:28:af:eb:98:60:13:5a:e4:c2:61:b5:e9:6a:
36:ac:2d:bc:fc:b8:af:84:79:7c:29:3c:c1:79:36:fe:b8:a4:
f0:f8:53:fb:00:72:11:46:32:ad:3a:d3:47:ee:39:49:f0:67:
57:1b:a1:3c:ce:80:e8:94:05:0e:96:54:5e:7d:61:0f:37:ab:
f5:3d:d3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhmVtUUZBWtRktPBv3AtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTVlMWNiYzY3ZTc4MmRiZjlmOGU3NDRlNDM3MjY4YmRj
YzM5Y2UwHhcNMjUxMTA0MTEwMDIxWhcNMjUxMTA1MTEwMDIxWjAzMTEwLwYDVQQD
EygwODM3ZWY1NDcyZGQ5MGU4ZTY0MjFhY2FiMDA3YzI3MmQ5YmU4MDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKM5lRZapdcr+ysraTDV4qj0ctPD
y6mPsD5WOYuq3gz/2dXDf815NLCCYTLo1HnaDGCqhhkskJlX+sncYCKW+KTXX035
ByPvRcCUzOHPClqv08pNpcxPjQ8r9sJWFfUX6KKushyrrT+WGPDVTN+88pPtc1+w
fWz4Gf2K2+3hUjb7z32rietdVZMD9onCVETxWc3B2CBE65Mfp+5I0FiKGbQ+F9Ad
6XJ2ha6lcYusoVX+d/AGP3JOtq529hTeIACdHm+mmYS/a/qRAsdIEcjuEzTZ5q+R
X59trPfcz/JxMGHltkM50csk1MlynrX+k/aDa5QIolHOMaMQsbN/1EO6LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg371Ry3ZDo5kIayrAHwnLZvoBIMB8GA1UdIwQY
MBaAFMuV4cvGfngtv5+OdE5Dcmi9zDnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmIt
NzY2ODJlNzk0Y2MzLzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmItNzY2ODJlNzk0Y2Mz
LzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiFQ/EAY
KswuP0DBI/UTOtAGmDxo4RA2S+XVdCQxUozbNmfDxob87oKB/ZQv27YVvbNDLhH+
teOYdCPG/hQSOByn8m12ENYGvKuMXdZWMNfcN0Db3BETLu6XdPGntawwTpz7KJZs
sQI+0KU/bmUTyvoYN6ERYcjgxOoqPFkFFdDCL+fAGPzWl9ubRgxxunHmGhJC+wUU
ebCbhmpGBFCLfGcrUdCT3eSvpfR0vu7V8MZutezAR3es5K4or+uYYBNa5MJhtelq
NqwtvPy4r4R5fCk8wXk2/rik8PhT+wByEUYyrTrTR+45SfBnVxuhPM6A6JQFDpZU
Xn1hDzer9T3THQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:54 2025 by rpki-client