Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: xcDijf1jxzplHpF47LgTlcuPLo9SZgVsUzcS99DmmiM=
Subject key identifier: 7F:4C:A7:A3:38:52:6E:55:E6:B8:DD:18:61:C7:09:46:99:C2:A0:37
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 0199522ED17762358D2C76D990678C43C3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 1673
Signing time: Tue 16 Sep 2025 11:00:23 +0000
Manifest this update: Tue 16 Sep 2025 11:00:23 +0000
Manifest next update: Wed 17 Sep 2025 11:00:23 +0000
Files and hashes: 1: mkk-KHtVpdSjRTu_tkkdV37L-30.roa (hash: ivbrYqlxOhyTn42BC3RV5SMdz9F9dKpqo8vRZ2G2vog=)
2: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: ldeXhefs7OO9SV0MZV9aBJIyw98NsKw+FThjM6x0Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:2e:d1:77:62:35:8d:2c:76:d9:90:67:8c:43:c3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Sep 16 11:00:23 2025 GMT
Not After : Sep 17 11:00:23 2025 GMT
Subject: CN=7f4ca7a338526e55e6b8dd1861c7094699c2a037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:65:ad:bc:4a:68:4a:5d:e0:cf:47:10:71:
83:d7:1d:4b:48:ae:41:d5:c7:11:27:75:bf:05:66:
55:d9:a5:ce:3f:b6:de:c3:a2:3e:a5:50:76:34:48:
eb:b5:05:9d:50:e5:24:40:e3:5d:96:3f:f8:6b:34:
ed:69:11:ce:14:69:e1:ae:6a:fd:e5:cc:25:cc:0c:
70:4f:a1:b2:64:e4:c8:3f:7c:ee:9d:d0:63:42:8c:
2c:36:e0:63:1a:98:64:31:20:7a:b0:8b:74:21:ca:
95:18:03:77:59:09:d7:38:3e:05:b2:3c:98:c7:35:
db:4e:13:ee:1e:08:03:3f:75:b5:1b:16:bc:6d:aa:
10:b2:2b:94:3f:4d:83:54:95:cc:3f:5c:01:8a:12:
c6:1c:bb:34:11:90:04:bd:ea:9e:b8:f3:af:e3:68:
59:c8:74:8f:2d:c9:c7:f6:db:3b:8c:6d:ed:50:25:
5d:bc:5b:ce:c2:40:fe:e6:a4:8e:c6:0d:ae:9b:17:
7a:ad:50:9c:08:d6:73:99:09:2e:e8:37:3d:21:e4:
3b:2b:ed:1f:9d:5b:06:c6:5d:27:e7:71:4c:8f:d2:
0f:0a:4d:4b:46:82:f5:63:1c:8a:92:09:bc:1b:21:
ee:1e:6f:2b:70:df:26:9c:d0:ec:65:96:bd:1c:21:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4C:A7:A3:38:52:6E:55:E6:B8:DD:18:61:C7:09:46:99:C2:A0:37
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:98:39:43:2f:60:23:21:77:ca:dc:5b:bf:b0:2b:28:c7:03:
83:9a:4e:2f:d4:33:db:6c:35:4b:39:ca:30:e6:32:d5:65:1a:
e5:4a:1d:60:8e:b6:e8:1b:a8:9d:b4:69:eb:23:db:42:ba:a7:
a3:d0:42:d1:c3:ba:a5:ef:bd:e1:8f:ec:cf:47:81:84:8f:f4:
ae:24:65:2d:1d:4f:00:fa:82:4e:e7:3d:8b:57:6b:43:8b:0e:
53:72:73:4e:39:76:72:80:1a:0b:82:1b:87:d1:33:1d:1a:10:
08:dd:97:61:65:a9:54:bb:e2:6e:ae:56:7f:73:16:51:c7:ab:
43:40:05:44:1e:01:b3:d4:0f:5d:ab:b8:21:3b:a0:8b:45:0f:
17:48:01:5c:2b:84:f1:4b:a3:62:a2:af:3b:ff:fa:e3:60:d5:
35:96:45:4b:c9:14:e1:89:56:22:54:61:c9:0d:48:0e:e6:c9:
32:80:36:60:f2:43:3f:1a:37:68:cb:a6:a6:1a:90:47:1d:1a:
cb:ee:53:21:d9:79:2a:c8:18:1b:56:07:2e:af:77:56:27:51:
fc:eb:79:93:e0:28:2e:cb:27:fd:e7:d2:66:af:da:cf:21:9e:
ba:84:2b:43:7d:98:56:ab:4d:6b:ff:a8:0c:e8:89:a2:a3:2e:
6c:76:eb:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlSLtF3YjWNLHbZkGeMQ8PPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm
OWE1YTQwHhcNMjUwOTE2MTEwMDIzWhcNMjUwOTE3MTEwMDIzWjAzMTEwLwYDVQQD
Eyg3ZjRjYTdhMzM4NTI2ZTU1ZTZiOGRkMTg2MWM3MDk0Njk5YzJhMDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oZlrbxKaEpd4M9HEHGD1x1LSK5B
1ccRJ3W/BWZV2aXOP7bew6I+pVB2NEjrtQWdUOUkQONdlj/4azTtaRHOFGnhrmr9
5cwlzAxwT6GyZOTIP3zundBjQowsNuBjGphkMSB6sIt0IcqVGAN3WQnXOD4FsjyY
xzXbThPuHggDP3W1Gxa8baoQsiuUP02DVJXMP1wBihLGHLs0EZAEveqeuPOv42hZ
yHSPLcnH9ts7jG3tUCVdvFvOwkD+5qSOxg2umxd6rVCcCNZzmQku6Dc9IeQ7K+0f
nVsGxl0n53FMj9IPCk1LRoL1YxyKkgm8GyHuHm8rcN8mnNDsZZa9HCHsZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9Mp6M4Um5V5rjdGGHHCUaZwqA3MB8GA1UdIwQY
MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt
YjQ5ZDg5ZTMwZGRkLzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk
LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5g5Qy9g
IyF3ytxbv7ArKMcDg5pOL9Qz22w1SznKMOYy1WUa5UodYI626BuonbRp6yPbQrqn
o9BC0cO6pe+94Y/sz0eBhI/0riRlLR1PAPqCTuc9i1drQ4sOU3JzTjl2coAaC4Ib
h9EzHRoQCN2XYWWpVLvibq5Wf3MWUcerQ0AFRB4Bs9QPXau4ITugi0UPF0gBXCuE
8UujYqKvO//642DVNZZFS8kU4YlWIlRhyQ1IDubJMoA2YPJDPxo3aMumphqQRx0a
y+5TIdl5KsgYG1YHLq93VidR/Ot5k+AoLssn/efSZq/azyGeuoQrQ32YVqtNa/+o
DOiJoqMubHbrAw==
-----END CERTIFICATE-----
Generated at Tue Sep 16 16:05:21 2025 by rpki-client