Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier: 3qgiR3L+ePR/NzvFyTTham0at010Kd2PNQY7FJhImKA=
Subject key identifier: F2:EE:F4:C6:62:45:CD:94:1E:35:59:2D:00:F1:5E:DC:BA:1A:49:09
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 019A4D3D46AF53C9ECFD44CFF274C67E033A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number: 0C35
Signing time: Tue 04 Nov 2025 05:00:52 +0000
Manifest this update: Tue 04 Nov 2025 05:00:52 +0000
Manifest next update: Wed 05 Nov 2025 05:00:52 +0000
Files and hashes: 1: d43Bbm-jTlxIEQu_UfTFZQFzBcE.roa (hash: UkexUnRIJprjhWor4Jilgkay/bVJfFqJkF7dBPx8pH8=)
2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: Gng5l7fCy/jcyYREMru1APgw1G9shhowFHiCWawTzy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:46:af:53:c9:ec:fd:44:cf:f2:74:c6:7e:03:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Nov 4 05:00:52 2025 GMT
Not After : Nov 5 05:00:52 2025 GMT
Subject: CN=f2eef4c66245cd941e35592d00f15edcba1a4909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:47:6a:1a:42:8b:a7:6e:84:74:f0:d4:90:
49:9f:de:b1:03:21:e8:e8:bb:b1:a1:84:b5:45:22:
04:d5:01:e1:5a:19:13:09:45:42:50:ec:60:7b:0e:
e2:13:46:df:58:6c:1b:b5:df:3d:99:0b:32:30:7c:
1f:88:a8:03:b2:e4:09:a4:a8:d0:c0:18:f5:55:6e:
7d:68:1c:33:d4:75:52:7a:a0:3a:b7:6c:25:72:51:
cd:46:60:a1:00:9a:ea:73:60:1a:af:14:da:e4:36:
be:ef:73:80:19:27:4d:62:19:c8:91:e2:97:15:64:
51:37:37:86:ab:52:46:36:5c:1b:bc:0c:cd:ec:35:
44:b6:c5:f5:24:49:88:62:73:08:22:ad:17:0d:71:
a9:62:8a:30:ad:4a:ec:5e:ae:91:fd:d6:7e:bf:41:
7f:c8:9d:60:2f:6a:3b:0f:bb:b1:3c:07:86:06:a2:
7d:08:9f:eb:87:ce:00:67:39:51:69:a3:5d:83:33:
e0:b7:89:72:3f:20:78:70:73:78:12:12:7e:76:cf:
ce:2a:bb:de:40:36:7d:e9:8e:76:fa:f4:3b:c8:5d:
5b:e1:a4:e9:8c:b0:8e:60:e0:c0:6f:cc:6a:82:10:
41:8b:52:5d:d4:a6:43:f2:77:3e:1e:e4:84:40:58:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EE:F4:C6:62:45:CD:94:1E:35:59:2D:00:F1:5E:DC:BA:1A:49:09
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:57:0e:48:67:62:4b:2f:5e:31:95:2a:35:5c:ed:f8:bf:07:
0e:82:66:7e:41:87:27:64:ec:81:a3:33:7d:87:d4:ee:de:2c:
fb:eb:a2:be:a4:8c:5b:b6:fe:be:3d:ac:5f:01:4d:f4:72:cb:
26:ca:4e:4c:78:d4:11:39:3a:45:e8:5a:52:25:2b:e5:d1:67:
86:54:88:5c:61:9d:9b:0d:01:a9:81:bb:24:cd:71:05:3b:3e:
f8:fb:1a:6e:b5:20:9b:2d:10:61:85:7b:55:81:b5:2d:41:b1:
08:37:83:27:8a:20:79:2f:63:2f:0a:97:17:a6:b2:c3:14:de:
47:37:0f:ba:60:b4:bf:87:77:80:25:e5:61:e8:ed:c8:ce:4b:
7f:f7:2e:16:ff:bc:69:cb:dc:af:0f:8a:14:a0:b9:3e:ff:b0:
a0:db:fc:aa:2d:7d:c9:fa:7e:7f:2c:53:12:ec:7f:af:cc:a4:
d2:1b:da:76:b0:76:62:72:53:ce:57:f6:af:14:5e:c6:19:52:
c0:1b:ac:a7:b1:96:dc:ac:f1:f7:43:a9:16:86:36:48:dc:42:
89:2b:48:76:7d:02:e9:71:07:3b:47:57:56:cf:31:b5:ac:f5:
f0:de:a5:6b:0d:38:0e:91:ba:fc:5b:89:2d:73:97:a0:8a:6f:
1a:55:04:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPUavU8ns/UTP8nTGfgM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDViNmUxMjUxNmEwZmQ1ZWJhYmU3YTc4MTEwODJmM2E3
NDYzOTcwHhcNMjUxMTA0MDUwMDUyWhcNMjUxMTA1MDUwMDUyWjAzMTEwLwYDVQQD
EyhmMmVlZjRjNjYyNDVjZDk0MWUzNTU5MmQwMGYxNWVkY2JhMWE0OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsttHahpCi6duhHTw1JBJn96xAyHo
6LuxoYS1RSIE1QHhWhkTCUVCUOxgew7iE0bfWGwbtd89mQsyMHwfiKgDsuQJpKjQ
wBj1VW59aBwz1HVSeqA6t2wlclHNRmChAJrqc2AarxTa5Da+73OAGSdNYhnIkeKX
FWRRNzeGq1JGNlwbvAzN7DVEtsX1JEmIYnMIIq0XDXGpYoowrUrsXq6R/dZ+v0F/
yJ1gL2o7D7uxPAeGBqJ9CJ/rh84AZzlRaaNdgzPgt4lyPyB4cHN4EhJ+ds/OKrve
QDZ96Y52+vQ7yF1b4aTpjLCOYODAb8xqghBBi1Jd1KZD8nc+HuSEQFhYGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLu9MZiRc2UHjVZLQDxXty6GkkJMB8GA1UdIwQY
MBaAFMtFtuElFqD9Xrq+engRCC86dGOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYt
ZjdjMTg5OWNkN2ZhLzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYtZjdjMTg5OWNkN2Zh
LzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFcOSGdi
Sy9eMZUqNVzt+L8HDoJmfkGHJ2TsgaMzfYfU7t4s++uivqSMW7b+vj2sXwFN9HLL
JspOTHjUETk6RehaUiUr5dFnhlSIXGGdmw0BqYG7JM1xBTs++PsabrUgmy0QYYV7
VYG1LUGxCDeDJ4ogeS9jLwqXF6aywxTeRzcPumC0v4d3gCXlYejtyM5Lf/cuFv+8
acvcrw+KFKC5Pv+woNv8qi19yfp+fyxTEux/r8yk0hvadrB2YnJTzlf2rxRexhlS
wBusp7GW3Kzx90OpFoY2SNxCiStIdn0C6XEHO0dXVs8xtaz18N6law04DpG6/FuJ
LXOXoIpvGlUEOg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:56 2025 by rpki-client