Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
File: Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json)
Hash identifier: GX3LhVmNbjabtvUbXFlgpvFEr0aEaz2onRjVZyf8mfI=
Subject key identifier: 63:CF:29:9A:93:E2:14:BE:13:FB:13:20:92:2E:AC:BA:1F:61:6E:1B
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 019932A3CA3D7441520203AB7304F3CCC093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
Manifest number: 090C
Signing time: Wed 10 Sep 2025 08:00:18 +0000
Manifest this update: Wed 10 Sep 2025 08:00:18 +0000
Manifest next update: Thu 11 Sep 2025 08:00:18 +0000
Files and hashes: 1: BLWp949xCOPuyrxSMZvJmRwjku4.roa (hash: brFq8s5rRfqjVkl10Z304qS39edh8NaB2DeXi+oWClY=)
2: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: AZq3x550yCJz16PTiTy9QoNA0yuKy1hO/1SFEDRNjnI=)
3: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=)
4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=)
5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:ca:3d:74:41:52:02:03:ab:73:04:f3:cc:c0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: Sep 10 08:00:18 2025 GMT
Not After : Sep 11 08:00:18 2025 GMT
Subject: CN=63cf299a93e214be13fb1320922eacba1f616e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:d2:71:4f:fe:5c:c9:f8:a6:14:09:56:34:
db:56:ec:35:85:a4:96:70:79:84:17:d7:66:19:77:
c7:91:f2:ed:ad:9f:2c:c8:6b:8f:30:5e:cd:d1:53:
42:83:07:92:b6:d4:c2:8e:e0:de:4b:d4:d9:fd:a0:
08:27:a8:f8:72:23:b3:ca:2c:88:d9:52:31:3f:42:
9b:9e:4a:98:25:29:37:7a:13:f8:d3:e0:e6:7a:96:
4c:50:2c:5b:91:77:1a:be:32:14:0c:9d:95:7d:07:
66:0f:c4:d7:5a:2c:fb:81:fe:85:e8:3d:d6:18:9b:
ea:f7:3e:da:e1:89:3b:7b:44:c0:cf:e5:14:05:78:
02:1d:63:f9:ea:25:81:25:6d:b6:85:fb:db:b2:f0:
41:2a:1b:82:54:e8:c8:1d:5e:1e:3b:0c:b4:5d:d7:
69:88:a4:be:d9:72:20:8b:7c:49:ea:ac:39:b1:ac:
a8:39:5d:9b:73:5a:8c:88:e0:55:4e:4a:5a:23:8d:
ca:4d:34:3c:ec:3a:29:7f:1f:95:a0:93:f5:c2:29:
5e:20:ad:0a:4f:7c:84:e9:09:c8:02:d0:e5:73:8b:
0a:cb:bc:11:1d:64:03:98:89:ec:b6:49:3c:ac:94:
a7:16:33:8f:9c:b6:a2:98:70:e2:63:51:d0:3a:24:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CF:29:9A:93:E2:14:BE:13:FB:13:20:92:2E:AC:BA:1F:61:6E:1B
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d7:51:c9:41:49:a7:82:12:34:07:7c:0c:a3:68:58:6f:7a:
63:0d:d4:97:34:24:ac:0b:51:e9:89:71:24:08:88:81:0b:f9:
a0:cd:e7:8a:29:52:81:66:32:6a:38:ec:3e:47:ea:bc:20:24:
99:9d:69:ad:c2:bd:2c:c8:74:20:0e:f1:7e:c8:fb:77:27:ca:
8c:bd:e3:41:3e:39:40:36:6a:f5:db:d6:e8:18:e8:c4:38:b8:
58:b0:5b:44:7c:0d:4f:15:36:2f:11:06:4c:0c:fd:b8:89:76:
3a:e9:2b:83:02:7b:bc:53:89:f2:19:f4:32:a1:2c:e7:b9:e5:
97:89:fb:78:65:d9:0c:f3:22:15:b4:bc:7b:0c:69:40:9c:0a:
22:f9:08:03:39:2c:08:9a:92:07:a4:fd:aa:b8:eb:87:4f:c9:
49:a4:88:ea:90:fd:9f:ce:36:60:28:b7:09:85:29:3c:58:b7:
9c:84:67:dd:23:1d:5a:c8:ac:0e:c1:56:bc:f4:79:f2:8c:89:
e8:8f:ae:f2:c3:c1:79:8d:8d:7e:30:b8:85:e4:3a:51:14:ba:
3f:17:c3:78:af:7d:6a:bf:31:a8:a4:31:95:57:ae:e8:e8:5a:
a6:2f:ed:2c:37:69:18:a4:54:c6:3d:8a:16:c1:cd:fc:99:37:
1f:33:83:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkyo8o9dEFSAgOrcwTzzMCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDQ0MjEwZWEwOGFjNTI5ODc4ZDUxOTE3ZTNiMzAwNTRk
NjIwZDEwHhcNMjUwOTEwMDgwMDE4WhcNMjUwOTExMDgwMDE4WjAzMTEwLwYDVQQD
Eyg2M2NmMjk5YTkzZTIxNGJlMTNmYjEzMjA5MjJlYWNiYTFmNjE2ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0LScU/+XMn4phQJVjTbVuw1haSW
cHmEF9dmGXfHkfLtrZ8syGuPMF7N0VNCgweSttTCjuDeS9TZ/aAIJ6j4ciOzyiyI
2VIxP0KbnkqYJSk3ehP40+DmepZMUCxbkXcavjIUDJ2VfQdmD8TXWiz7gf6F6D3W
GJvq9z7a4Yk7e0TAz+UUBXgCHWP56iWBJW22hfvbsvBBKhuCVOjIHV4eOwy0Xddp
iKS+2XIgi3xJ6qw5sayoOV2bc1qMiOBVTkpaI43KTTQ87Dopfx+VoJP1wileIK0K
T3yE6QnIAtDlc4sKy7wRHWQDmInstkk8rJSnFjOPnLaimHDiY1HQOiRWkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPPKZqT4hS+E/sTIJIurLofYW4bMB8GA1UdIwQY
MBaAFGNEQhDqCKxSmHjVGRfjswBU1iDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQt
ZmU4MzdmOThlMDI2LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQtZmU4MzdmOThlMDI2
LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtdRyUFJ
p4ISNAd8DKNoWG96Yw3UlzQkrAtR6YlxJAiIgQv5oM3niilSgWYyajjsPkfqvCAk
mZ1prcK9LMh0IA7xfsj7dyfKjL3jQT45QDZq9dvW6BjoxDi4WLBbRHwNTxU2LxEG
TAz9uIl2OukrgwJ7vFOJ8hn0MqEs57nll4n7eGXZDPMiFbS8ewxpQJwKIvkIAzks
CJqSB6T9qrjrh0/JSaSI6pD9n842YCi3CYUpPFi3nIRn3SMdWsisDsFWvPR58oyJ
6I+u8sPBeY2NfjC4heQ6URS6PxfDeK99ar8xqKQxlVeu6Ohapi/tLDdpGKRUxj2K
FsHN/Jk3HzODmA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:28:48 2025 by rpki-client