Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier: O+GoodmxLYEKvRn5yvi9e3TAxN7smiLEQBuptLCXwzw=
Subject key identifier: CA:25:DE:90:75:4E:5E:97:64:01:7D:73:8E:E8:67:61:58:3B:E6:72
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 019A240A4A1188EBD1E3295E579FC33296A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number: 0974
Signing time: Mon 27 Oct 2025 05:00:45 +0000
Manifest this update: Mon 27 Oct 2025 05:00:45 +0000
Manifest next update: Tue 28 Oct 2025 05:00:45 +0000
Files and hashes: 1: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (hash: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=)
2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=)
3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=)
4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: Hr2xAIk0QimjDu+2QCvj+2Vzofn3ShCLqPyOkdHNBnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:4a:11:88:eb:d1:e3:29:5e:57:9f:c3:32:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Oct 27 05:00:45 2025 GMT
Not After : Oct 28 05:00:45 2025 GMT
Subject: CN=ca25de90754e5e9764017d738ee86761583be672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:ca:8c:e4:5c:39:1f:48:ea:9a:51:b6:77:
46:4c:11:98:dd:02:68:cb:f5:66:f8:23:c8:98:10:
8d:b8:0c:42:68:a4:be:b2:b9:c0:f7:b0:8b:44:5f:
49:8d:63:6a:61:da:db:ff:0d:72:d4:d9:3d:5f:bd:
2b:b6:fe:a7:ba:26:c6:7f:7c:00:2b:e2:21:67:a5:
4c:87:aa:e8:0d:01:d5:1e:5f:e4:9f:66:d1:c7:09:
54:f3:f6:74:d0:22:70:fe:90:1e:9b:31:53:69:46:
0e:d0:94:dd:c5:20:4c:15:78:ab:1f:89:8c:a0:41:
91:7c:e9:d2:94:1e:19:49:fa:c1:e0:d4:3f:92:1e:
78:2a:ea:b9:a7:d8:dc:59:c1:3b:23:0a:7f:2e:09:
e6:e4:57:b2:ae:cd:83:96:07:31:5c:93:ea:2b:6c:
9f:0a:98:68:14:8b:80:4a:77:a0:e6:12:5a:8a:94:
93:1a:3e:9f:bb:48:3d:f9:3e:63:41:3a:b8:ca:1c:
9f:22:64:f8:10:35:59:cd:99:bd:bd:28:53:d7:4d:
96:ef:fd:12:79:fa:15:45:c9:a0:64:73:7f:d0:68:
f3:01:9b:1e:8d:3c:48:a8:ad:74:0a:74:17:85:ab:
00:58:72:49:de:51:fa:46:47:1d:d1:fc:97:8e:77:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:DE:90:75:4E:5E:97:64:01:7D:73:8E:E8:67:61:58:3B:E6:72
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:cc:6a:fb:fd:8e:31:45:a2:ac:ed:5c:bc:f4:f2:f6:7f:d5:
39:be:a8:35:7f:2d:9b:03:b5:4d:0a:5f:e9:46:2f:ef:d8:f9:
51:46:1c:be:a2:b7:3b:83:57:61:21:5e:45:65:d6:fd:7c:09:
3d:2f:6f:7c:3d:d2:29:e9:2a:48:59:42:a6:6a:55:45:4a:6c:
1f:20:a7:10:fe:9a:92:35:ba:18:38:b1:c1:7b:43:1d:4f:22:
af:64:14:08:c3:f0:84:59:26:4c:e1:5f:46:50:9c:59:72:ab:
64:2c:e2:c6:c1:dc:65:23:e4:31:bb:53:e3:d2:97:8c:67:4f:
88:97:18:7d:36:c3:af:58:b7:49:c7:9b:7e:51:2e:2a:5a:8b:
a4:8a:0b:21:bb:f5:32:09:a9:f0:c7:b7:db:57:1f:10:80:b8:
59:b2:98:dc:72:fa:af:fb:ec:a0:ff:32:2a:80:7d:41:8e:f8:
d6:94:e3:a6:3d:42:2d:6a:03:03:70:1b:d1:c1:6c:91:e0:f2:
a9:ac:2f:19:b5:b5:bb:f8:8c:71:ec:8c:14:ab:68:c6:78:2a:
ca:29:da:4c:ca:96:d5:d9:75:5d:e8:ab:f3:ab:8c:66:7b:d6:
cf:22:7c:9f:15:7b:28:1f:8b:85:a6:8b:9a:b3:67:4e:c3:03:
bd:e8:8e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokCkoRiOvR4yleV5/DMpapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1
MzEzNjEwHhcNMjUxMDI3MDUwMDQ1WhcNMjUxMDI4MDUwMDQ1WjAzMTEwLwYDVQQD
EyhjYTI1ZGU5MDc1NGU1ZTk3NjQwMTdkNzM4ZWU4Njc2MTU4M2JlNjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6fKjORcOR9I6ppRtndGTBGY3QJo
y/Vm+CPImBCNuAxCaKS+srnA97CLRF9JjWNqYdrb/w1y1Nk9X70rtv6nuibGf3wA
K+IhZ6VMh6roDQHVHl/kn2bRxwlU8/Z00CJw/pAemzFTaUYO0JTdxSBMFXirH4mM
oEGRfOnSlB4ZSfrB4NQ/kh54Kuq5p9jcWcE7Iwp/Lgnm5Feyrs2DlgcxXJPqK2yf
CphoFIuASneg5hJaipSTGj6fu0g9+T5jQTq4yhyfImT4EDVZzZm9vShT102W7/0S
efoVRcmgZHN/0GjzAZsejTxIqK10CnQXhasAWHJJ3lH6Rkcd0fyXjncQ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMol3pB1Tl6XZAF9c47oZ2FYO+ZyMB8GA1UdIwQY
MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct
MzE2NjBjMjJkMTllLzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll
LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssxq+/2O
MUWirO1cvPTy9n/VOb6oNX8tmwO1TQpf6UYv79j5UUYcvqK3O4NXYSFeRWXW/XwJ
PS9vfD3SKekqSFlCpmpVRUpsHyCnEP6akjW6GDixwXtDHU8ir2QUCMPwhFkmTOFf
RlCcWXKrZCzixsHcZSPkMbtT49KXjGdPiJcYfTbDr1i3ScebflEuKlqLpIoLIbv1
Mgmp8Me321cfEIC4WbKY3HL6r/vsoP8yKoB9QY741pTjpj1CLWoDA3Ab0cFskeDy
qawvGbW1u/iMceyMFKtoxngqyinaTMqW1dl1Xeir86uMZnvWzyJ8nxV7KB+LhaaL
mrNnTsMDveiOtw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:11:58 2025 by rpki-client