Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: GGBQuN9Ih0o+aOBv/Z/sngG4dqo04EEdKhUTeTNCK48=
Subject key identifier: D0:99:B3:24:67:A2:84:D4:AB:5C:2B:04:E6:BE:AE:FB:3E:C2:99:C3
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019A4E1899F62BC1B8660C5D377676CA5F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0DF3
Signing time: Tue 04 Nov 2025 09:00:26 +0000
Manifest this update: Tue 04 Nov 2025 09:00:26 +0000
Manifest next update: Wed 05 Nov 2025 09:00:26 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: WNalXcnGoPhCPsz6XVXBr4EAGPE0b/rTiyODBey4csA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:99:f6:2b:c1:b8:66:0c:5d:37:76:76:ca:5f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Nov 4 09:00:26 2025 GMT
Not After : Nov 5 09:00:26 2025 GMT
Subject: CN=d099b32467a284d4ab5c2b04e6beaefb3ec299c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:49:19:65:87:a9:30:cf:6c:07:4d:c5:db:
07:6a:bf:22:28:33:5f:9b:99:03:70:93:97:7a:d3:
c8:c7:75:02:6e:8a:79:95:f7:c4:05:5b:74:0a:97:
c1:a0:6f:43:f8:1d:77:1b:28:ab:ca:57:bf:89:d9:
32:a9:35:80:bd:6b:72:36:5c:c8:99:34:35:92:99:
c6:55:66:56:a8:95:5a:2f:a2:f1:27:b6:07:f2:0c:
09:d6:03:6b:b5:25:67:90:7a:42:17:4b:c2:7b:f2:
71:36:d1:de:f3:cd:d3:a4:21:71:81:d7:fd:1a:1f:
95:28:8e:00:5b:8c:71:1c:81:08:60:b2:cb:5e:a0:
fb:a1:74:5c:78:17:70:96:8b:10:d5:2b:1d:25:fa:
a4:f3:63:e9:a1:7b:0e:59:8a:2e:e1:7f:91:b3:e4:
13:63:cf:4b:13:bf:8c:a6:78:7d:50:b2:1e:55:21:
eb:b3:ea:75:17:3d:7b:25:59:7a:ca:de:4d:4c:04:
e0:11:18:1b:92:d8:05:6b:0f:47:4d:44:3a:eb:48:
21:80:f7:18:7a:71:c4:36:4d:e8:b4:47:c4:41:84:
12:48:06:e0:51:dc:82:a6:53:81:97:7d:0d:6e:68:
4f:fc:c2:41:d5:54:da:3d:de:e6:2f:06:f3:f2:59:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:B3:24:67:A2:84:D4:AB:5C:2B:04:E6:BE:AE:FB:3E:C2:99:C3
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:51:17:68:fe:c4:5c:6d:a6:51:f2:ef:89:d6:ab:61:d1:97:
a4:8f:c3:0e:e4:b2:bf:13:0b:88:eb:98:dd:13:e7:08:df:fd:
02:58:e7:e4:66:26:b2:d4:58:d3:73:ad:11:b9:58:4c:ef:c3:
ce:ad:71:42:22:74:71:64:19:f9:c1:d1:95:bf:1e:80:4e:8a:
4b:e9:bf:37:07:d5:1a:71:ac:29:1c:c5:33:a9:fd:8b:7c:ee:
de:3b:1b:c5:2c:cc:9f:19:9b:58:e1:5e:15:1f:d1:a1:13:97:
49:a5:4f:34:60:fb:c6:82:64:b3:9a:9b:67:55:70:1e:39:44:
61:b9:ac:d5:84:59:ab:a7:76:81:c9:e0:2c:fa:50:ed:b1:e1:
e8:de:a9:f6:8e:1d:4c:26:9d:d9:b2:ed:a1:a1:d7:06:b5:d6:
92:10:b7:9f:77:07:2e:d8:ce:18:5e:3e:c4:21:c2:8d:45:1c:
d0:92:78:c8:94:1a:52:5d:c1:14:45:c0:7c:45:e8:30:a3:24:
94:ff:7b:94:ea:c3:64:ab:4f:8e:88:27:bf:65:4c:a5:5e:3a:
c0:7b:90:03:6e:2c:46:50:e3:38:5c:79:ef:4b:e8:5f:93:78:
71:19:46:b4:90:e9:44:1f:3d:71:b5:b0:db:a9:41:2f:56:dd:
0d:ad:12:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGJn2K8G4ZgxdN3Z2yl8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1
M2Y4MzgwHhcNMjUxMTA0MDkwMDI2WhcNMjUxMTA1MDkwMDI2WjAzMTEwLwYDVQQD
EyhkMDk5YjMyNDY3YTI4NGQ0YWI1YzJiMDRlNmJlYWVmYjNlYzI5OWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO9JGWWHqTDPbAdNxdsHar8iKDNf
m5kDcJOXetPIx3UCbop5lffEBVt0CpfBoG9D+B13Gyiryle/idkyqTWAvWtyNlzI
mTQ1kpnGVWZWqJVaL6LxJ7YH8gwJ1gNrtSVnkHpCF0vCe/JxNtHe883TpCFxgdf9
Gh+VKI4AW4xxHIEIYLLLXqD7oXRceBdwlosQ1SsdJfqk82PpoXsOWYou4X+Rs+QT
Y89LE7+Mpnh9ULIeVSHrs+p1Fz17JVl6yt5NTATgERgbktgFaw9HTUQ660ghgPcY
enHENk3otEfEQYQSSAbgUdyCplOBl30NbmhP/MJB1VTaPd7mLwbz8lmHVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCZsyRnooTUq1wrBOa+rvs+wpnDMB8GA1UdIwQY
MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt
MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5
LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlEXaP7E
XG2mUfLvidarYdGXpI/DDuSyvxMLiOuY3RPnCN/9Aljn5GYmstRY03OtEblYTO/D
zq1xQiJ0cWQZ+cHRlb8egE6KS+m/NwfVGnGsKRzFM6n9i3zu3jsbxSzMnxmbWOFe
FR/RoROXSaVPNGD7xoJks5qbZ1VwHjlEYbms1YRZq6d2gcngLPpQ7bHh6N6p9o4d
TCad2bLtoaHXBrXWkhC3n3cHLtjOGF4+xCHCjUUc0JJ4yJQaUl3BFEXAfEXoMKMk
lP97lOrDZKtPjognv2VMpV46wHuQA24sRlDjOFx570voX5N4cRlGtJDpRB89cbWw
26lBL1bdDa0Spg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:55 2025 by rpki-client