Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: 0sCeS780jxnvx1hTU28EpfYIrVT0nuuOMWpcTE7bSBM=
Subject key identifier: 43:C4:3C:AE:AA:E1:D4:ED:61:DD:04:81:D0:5C:94:58:37:1C:8A:AA
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 0199168802B736DF06AF5C480523DABD7FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 12E5
Signing time: Thu 04 Sep 2025 21:00:36 +0000
Manifest this update: Thu 04 Sep 2025 21:00:36 +0000
Manifest next update: Fri 05 Sep 2025 21:00:36 +0000
Files and hashes: 1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: JGIIURT3FtvLb0QKsy5dQuJX1N2DOLdHyF/XOEnDa8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:02:b7:36:df:06:af:5c:48:05:23:da:bd:7f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Sep 4 21:00:36 2025 GMT
Not After : Sep 5 21:00:36 2025 GMT
Subject: CN=43c43caeaae1d4ed61dd0481d05c9458371c8aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:74:78:18:0b:17:06:80:c0:14:ad:d7:6f:
fd:2a:05:8b:5b:2f:83:c2:91:09:13:e9:1b:49:a2:
19:0a:ec:4b:e0:08:fb:d4:87:e8:df:a2:0b:c1:8f:
f5:3d:d1:b6:e3:6c:a3:21:1e:46:58:21:d3:04:d6:
b7:91:d2:f8:93:1b:d6:2a:69:e6:32:e4:14:cc:8c:
d2:3b:c1:05:d9:7c:63:b0:d1:2e:af:4b:95:31:20:
c7:b3:04:1c:43:8f:3c:f7:85:9e:80:ef:cb:50:e2:
78:0e:ab:41:ee:53:c9:e2:ab:67:fa:15:69:a1:17:
90:bf:95:c3:b0:b2:50:37:1c:2b:51:44:0b:73:b8:
58:c9:8b:55:a8:30:02:13:32:98:68:59:c3:15:a9:
d8:ed:f0:c9:e4:7c:80:87:64:17:e5:f1:94:50:8c:
59:2b:ae:f1:b3:47:3a:78:cd:e8:43:be:e4:54:4c:
d3:62:53:a9:ca:81:cb:ed:33:f3:04:70:37:6b:a3:
af:db:6a:e7:d1:bd:80:ab:7f:23:8e:fa:d7:d8:b7:
1b:98:4b:73:fd:5c:e7:78:ea:d9:4a:62:30:4f:dd:
07:f7:b3:90:a3:5d:8d:9c:88:4b:a7:ba:5c:02:5b:
c2:6d:63:ce:b0:88:ab:88:2f:6c:36:bb:34:0c:1f:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C4:3C:AE:AA:E1:D4:ED:61:DD:04:81:D0:5C:94:58:37:1C:8A:AA
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a5:f1:2a:96:40:51:77:19:31:a3:56:f1:7d:a5:67:15:7f:
03:16:73:90:ba:18:18:b1:7c:b9:5b:4d:b9:ab:33:72:1f:d8:
32:eb:88:2b:05:a7:32:90:0f:c2:65:66:ed:ba:bf:47:59:61:
88:9d:63:f7:fc:a3:8f:26:e3:6b:4a:15:98:11:8d:62:b5:d4:
43:bb:2e:56:2e:ba:50:4d:98:64:c4:1a:36:4f:e6:65:0a:72:
ec:78:d9:a9:c6:50:3b:49:55:a0:05:7f:ff:39:c3:75:16:89:
1c:df:08:ef:f8:5a:27:57:59:49:d8:9f:a3:7c:39:a5:c4:14:
70:f4:5b:7b:ca:bc:2f:9a:5e:2a:c0:65:56:83:a6:1e:60:03:
dd:15:03:75:8c:c4:e6:13:af:10:62:15:04:ad:dd:02:2c:e6:
db:f2:57:23:ab:ab:ea:dc:8a:2e:97:0c:24:23:d0:67:f7:c0:
88:8e:f5:94:85:41:80:4a:8a:c9:83:c2:62:b0:f0:c3:bd:82:
09:75:1e:91:45:d6:29:db:1e:d2:ea:ef:5d:f7:70:de:37:ea:
d1:d3:18:a3:39:ce:21:3c:b7:aa:42:a4:b4:4b:9c:a3:94:26:
0a:ff:f8:85:6e:31:81:19:08:5c:4f:17:8c:83:fe:d7:c3:30:
74:a5:53:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWiAK3Nt8Gr1xIBSPavX+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGRkMTdhNzY4ZTNiNmZiZmE3YTcwMDlhNzAwN2ViZTY1
YjQ1YzgwHhcNMjUwOTA0MjEwMDM2WhcNMjUwOTA1MjEwMDM2WjAzMTEwLwYDVQQD
Eyg0M2M0M2NhZWFhZTFkNGVkNjFkZDA0ODFkMDVjOTQ1ODM3MWM4YWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvJ0eBgLFwaAwBSt12/9KgWLWy+D
wpEJE+kbSaIZCuxL4Aj71Ifo36ILwY/1PdG242yjIR5GWCHTBNa3kdL4kxvWKmnm
MuQUzIzSO8EF2XxjsNEur0uVMSDHswQcQ48894WegO/LUOJ4DqtB7lPJ4qtn+hVp
oReQv5XDsLJQNxwrUUQLc7hYyYtVqDACEzKYaFnDFanY7fDJ5HyAh2QX5fGUUIxZ
K67xs0c6eM3oQ77kVEzTYlOpyoHL7TPzBHA3a6Ov22rn0b2Aq38jjvrX2LcbmEtz
/VzneOrZSmIwT90H97OQo12NnIhLp7pcAlvCbWPOsIiriC9sNrs0DB9qewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPEPK6q4dTtYd0EgdBclFg3HIqqMB8GA1UdIwQY
MBaAFK2N0Xp2jjtvv6enAJpwB+vmW0XIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85OGIzNWItOTQ1ZS00MGM1LWJiOTUt
OWVhZGQzNTFmYzc5LzEvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85OGIzNWItOTQ1ZS00MGM1LWJiOTUtOWVhZGQzNTFmYzc5
LzEvclkzUmVuYU9PMi1fcDZjQW1uQUg2LVpiUmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6XxKpZA
UXcZMaNW8X2lZxV/AxZzkLoYGLF8uVtNuaszch/YMuuIKwWnMpAPwmVm7bq/R1lh
iJ1j9/yjjybja0oVmBGNYrXUQ7suVi66UE2YZMQaNk/mZQpy7HjZqcZQO0lVoAV/
/znDdRaJHN8I7/haJ1dZSdifo3w5pcQUcPRbe8q8L5peKsBlVoOmHmAD3RUDdYzE
5hOvEGIVBK3dAizm2/JXI6ur6tyKLpcMJCPQZ/fAiI71lIVBgEqKyYPCYrDww72C
CXUekUXWKdse0urvXfdw3jfq0dMYoznOITy3qkKktEuco5QmCv/4hW4xgRkIXE8X
jIP+18MwdKVTjA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:36 2025 by rpki-client