Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
File: Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json)
Hash identifier: DuBdQgwB4TN1yocMkaa/hqrDo8DfsaCwpfXQ1JhPb7E=
Subject key identifier: 39:10:B4:1A:F9:A8:DA:47:6C:AA:32:3E:01:D7:04:BD:6F:78:2D:2D
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial: 019A1FBF29514565479E01D38114AC2C438B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
Manifest number: 0987
Signing time: Sun 26 Oct 2025 09:00:12 +0000
Manifest this update: Sun 26 Oct 2025 09:00:12 +0000
Manifest next update: Mon 27 Oct 2025 09:00:12 +0000
Files and hashes: 1: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: L2yHeA3JO2bK9oOGCOW8Oujdjki/VM7hEkXaDcoXyj8=)
2: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=)
3: mS1r3nEBgAI3lLhm6noZgqn_cmA.roa (hash: JYzwmK7XTX/XFKUpzmhiGKHT8MDSKJlug0ZfpJhUdKA=)
4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=)
5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:29:51:45:65:47:9e:01:d3:81:14:ac:2c:43:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
Validity
Not Before: Oct 26 09:00:12 2025 GMT
Not After : Oct 27 09:00:12 2025 GMT
Subject: CN=3910b41af9a8da476caa323e01d704bd6f782d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:46:a2:77:ba:20:51:1b:95:cc:d9:f0:34:
88:2b:ad:37:6e:56:c4:87:9b:ee:57:16:d5:2e:77:
a1:18:3e:29:9d:b5:d5:d9:8a:fe:75:c7:1e:95:a8:
0d:3f:2d:11:79:09:41:a2:f5:81:c6:f5:2a:b3:2a:
c0:5e:3b:4d:c1:94:bc:be:86:51:5a:15:51:a5:54:
48:9c:11:72:77:cd:57:bb:c3:b3:7b:05:0f:4b:ba:
f0:c4:94:9d:37:84:03:9a:20:c1:af:7d:3a:ba:02:
10:ce:3c:b9:6c:f9:f4:1a:66:c2:16:97:c6:50:e9:
d6:97:22:89:bb:74:14:b8:25:10:71:81:22:fc:39:
23:6a:f2:10:d0:09:af:13:fa:34:29:68:0a:38:77:
e3:f5:1d:9f:28:d3:3e:db:72:1b:df:0b:7d:db:c3:
7e:51:fc:43:23:99:93:2a:58:4c:8e:09:22:28:c8:
9e:9e:0c:d1:f3:2c:3f:2e:fa:3d:a8:af:6e:5a:54:
6c:6a:e6:c9:7d:7e:7f:1d:3a:3f:46:73:81:74:53:
89:5c:a3:8e:81:5c:7e:14:c2:9e:99:bc:51:c1:a4:
3a:95:1f:6c:b4:7d:17:11:cc:57:8a:5c:b7:f3:17:
c5:c2:6a:d8:70:54:b9:ef:4f:f2:bf:28:1c:0f:09:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:10:B4:1A:F9:A8:DA:47:6C:AA:32:3E:01:D7:04:BD:6F:78:2D:2D
X509v3 Authority Key Identifier:
keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b2:7b:26:94:ee:e6:30:e3:9a:55:a3:23:36:59:da:27:ee:
39:71:3c:7b:4d:22:16:fc:27:da:e6:97:6d:9e:50:d7:45:b8:
28:5b:38:a4:4c:5f:7e:be:08:9e:3a:c1:6a:d9:7e:c7:4b:c7:
84:ab:5b:15:7d:5c:61:ec:08:ae:b2:7e:8c:48:ff:4e:39:46:
ad:d7:4b:72:87:dd:ce:53:e4:d4:29:f3:12:da:28:e5:f0:51:
37:f5:ad:6b:ca:d2:2a:64:5d:3e:25:7b:9f:c1:35:df:e7:9c:
54:74:8b:24:80:96:dc:18:2a:11:77:18:5f:cb:d9:43:56:02:
d6:fd:1c:6a:07:b3:1e:e7:08:9d:24:85:95:55:63:ce:76:57:
de:b6:77:df:99:d7:a7:09:0e:89:d4:d3:c0:57:4c:47:5d:5d:
44:c8:53:03:0d:22:e3:23:e3:c2:52:7e:8b:ba:47:31:0f:91:
a2:5f:a5:43:9c:e4:04:3f:03:68:73:86:e8:73:0c:ca:5b:3d:
da:50:5f:0d:ea:26:34:83:cd:b4:3d:dc:73:9e:ad:72:01:37:
fd:09:75:5d:ff:62:76:bf:65:36:b6:68:a4:d2:61:af:ed:46:
ed:c6:65:07:57:69:3e:f7:44:f9:2c:5c:b3:22:27:e2:01:17:
00:70:33:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofvylRRWVHngHTgRSsLEOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDQ0MjEwZWEwOGFjNTI5ODc4ZDUxOTE3ZTNiMzAwNTRk
NjIwZDEwHhcNMjUxMDI2MDkwMDEyWhcNMjUxMDI3MDkwMDEyWjAzMTEwLwYDVQQD
EygzOTEwYjQxYWY5YThkYTQ3NmNhYTMyM2UwMWQ3MDRiZDZmNzgyZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9dGone6IFEblczZ8DSIK603blbE
h5vuVxbVLnehGD4pnbXV2Yr+dccelagNPy0ReQlBovWBxvUqsyrAXjtNwZS8voZR
WhVRpVRInBFyd81Xu8OzewUPS7rwxJSdN4QDmiDBr306ugIQzjy5bPn0GmbCFpfG
UOnWlyKJu3QUuCUQcYEi/DkjavIQ0AmvE/o0KWgKOHfj9R2fKNM+23Ib3wt928N+
UfxDI5mTKlhMjgkiKMiengzR8yw/Lvo9qK9uWlRsaubJfX5/HTo/RnOBdFOJXKOO
gVx+FMKembxRwaQ6lR9stH0XEcxXily38xfFwmrYcFS570/yvygcDwn5rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkQtBr5qNpHbKoyPgHXBL1veC0tMB8GA1UdIwQY
MBaAFGNEQhDqCKxSmHjVGRfjswBU1iDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQt
ZmU4MzdmOThlMDI2LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQtZmU4MzdmOThlMDI2
LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbJ7JpTu
5jDjmlWjIzZZ2ifuOXE8e00iFvwn2uaXbZ5Q10W4KFs4pExffr4InjrBatl+x0vH
hKtbFX1cYewIrrJ+jEj/TjlGrddLcofdzlPk1CnzEtoo5fBRN/Wta8rSKmRdPiV7
n8E13+ecVHSLJICW3BgqEXcYX8vZQ1YC1v0cagezHucInSSFlVVjznZX3rZ335nX
pwkOidTTwFdMR11dRMhTAw0i4yPjwlJ+i7pHMQ+Rol+lQ5zkBD8DaHOG6HMMyls9
2lBfDeomNIPNtD3cc56tcgE3/Ql1Xf9idr9lNrZopNJhr+1G7cZlB1dpPvdE+Sxc
syIn4gEXAHAziQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:08:01 2025 by rpki-client