Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier: VLmycvhyBtEjKGaFmn1y07Unlu0WxOgu6U7XWXCqinM=
Subject key identifier: 94:7F:8A:C6:8D:A4:9D:8F:E2:9B:D4:1E:B5:CA:DA:F3:35:E8:A9:53
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer: /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial: 019A725CE2DB9B168DAE06C8E089FFDFFA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number: 09EA
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: bLsxHxYo1+paHIKIfVw5LgefiQVWYKsbqo4lOA9atXU=)
2: hyeaa7WHUt2Rcq_9qyU3ynO8FJA.roa (hash: 1lxOMkF/m/0MqdFiTX81zywF3SRcX+JuIQEJSNJChMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e2:db:9b:16:8d:ae:06:c8:e0:89:ff:df:fa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=947f8ac68da49d8fe29bd41eb5cadaf335e8a953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:56:85:15:6a:66:c5:fd:d9:5f:0d:f7:b2:
8a:37:11:7b:ec:1b:ee:48:da:5b:db:f1:7f:60:d9:
c1:da:d3:ca:3b:c9:67:98:b2:1c:38:54:ef:0a:4f:
dc:d2:18:14:8c:11:32:d1:6a:7f:0d:eb:13:42:d9:
6c:28:0c:28:0b:43:93:04:35:b0:13:37:3f:9a:d5:
ee:03:a9:14:e1:a9:e0:e4:f3:a1:be:7e:db:f2:2f:
f0:35:72:93:0a:61:b8:a4:35:db:a8:f8:f3:01:55:
3b:a8:c8:69:5c:02:09:e1:a7:92:a2:16:ec:6c:b9:
fd:31:8d:04:9d:f2:43:99:5e:81:2c:d6:ed:e4:80:
b7:2e:53:43:a8:a4:12:12:ed:97:bb:46:bc:74:41:
96:3c:c6:8e:06:b5:91:c8:61:53:17:39:5b:8d:f0:
be:ec:5e:01:b4:bd:06:53:1f:47:92:a2:78:37:1b:
22:bf:1e:9e:c8:42:95:f8:03:3e:00:d7:16:76:5d:
1b:bc:f9:31:5c:a4:a5:7c:36:d0:a6:55:03:06:27:
70:84:60:a8:92:b2:ec:2a:ae:7e:06:1c:07:3a:23:
ee:5d:4e:f7:d6:07:de:3e:12:a1:07:57:a8:9e:ae:
52:aa:6c:3c:05:00:f1:f2:a4:46:cb:a8:ad:dd:95:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7F:8A:C6:8D:A4:9D:8F:E2:9B:D4:1E:B5:CA:DA:F3:35:E8:A9:53
X509v3 Authority Key Identifier:
keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7a:2d:68:2d:2a:6c:7f:a5:ac:b9:cc:87:5f:a7:dd:c2:50:
fd:46:cb:f9:4f:72:52:49:dc:c1:15:a1:d8:07:23:0e:bf:59:
4a:0f:de:54:17:a5:44:4b:1b:2b:2a:2e:1a:8a:18:62:02:ec:
48:51:d9:5d:05:a2:38:a7:2f:c6:08:1a:20:f5:ac:46:9b:74:
fe:d4:8b:bb:01:bf:ea:eb:d6:47:31:37:f5:11:4a:b1:7b:0c:
bd:c2:76:7e:12:94:9c:47:2a:b4:45:cb:39:57:14:c2:91:5f:
07:02:bb:8e:e3:59:4a:28:91:97:64:06:5b:d3:fb:f3:c3:8d:
7f:cf:90:4b:7e:4d:3e:be:1b:12:11:27:16:20:ea:39:92:0e:
2d:0d:23:f6:8a:b4:cf:4e:4e:77:c0:3e:52:9b:6c:38:65:6a:
8c:f7:74:9a:df:b0:df:e7:d7:5c:42:04:d6:8e:c2:17:4b:c2:
17:61:93:86:df:a9:a2:e5:91:18:b0:d2:57:c8:ad:76:6c:44:
be:9a:e7:4d:53:49:bd:7c:70:bf:ca:dc:0f:b0:f0:90:d1:dd:
62:1d:ff:3e:9a:56:ed:3e:ae:21:84:1a:ea:7e:e8:ec:e2:b9:
c7:c3:fc:70:01:47:fe:98:20:9e:f1:ba:8e:6f:db:0f:f5:2d:
b1:ae:d6:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXOLbmxaNrgbI4In/3/piMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxODRjODA1ZDRlNTNjMmExMzJjNzM5YzRlMzc1MmFmYzM1
YWU5OTUwHhcNMjUxMTExMTAwMTIxWhcNMjUxMTEyMTAwMTIxWjAzMTEwLwYDVQQD
Eyg5NDdmOGFjNjhkYTQ5ZDhmZTI5YmQ0MWViNWNhZGFmMzM1ZThhOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIVWhRVqZsX92V8N97KKNxF77Bvu
SNpb2/F/YNnB2tPKO8lnmLIcOFTvCk/c0hgUjBEy0Wp/DesTQtlsKAwoC0OTBDWw
Ezc/mtXuA6kU4ang5POhvn7b8i/wNXKTCmG4pDXbqPjzAVU7qMhpXAIJ4aeSohbs
bLn9MY0EnfJDmV6BLNbt5IC3LlNDqKQSEu2Xu0a8dEGWPMaOBrWRyGFTFzlbjfC+
7F4BtL0GUx9HkqJ4Nxsivx6eyEKV+AM+ANcWdl0bvPkxXKSlfDbQplUDBidwhGCo
krLsKq5+BhwHOiPuXU731gfePhKhB1eonq5Sqmw8BQDx8qRGy6it3ZV+JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR/isaNpJ2P4pvUHrXK2vM16KlTMB8GA1UdIwQY
MBaAFHGEyAXU5TwqEyxznE43Uq/DWumVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83MjZhNTItNWM3My00OTA1LWExOWQt
OWY3MmY4ZGVjNDY4LzEvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83MjZhNTItNWM3My00OTA1LWExOWQtOWY3MmY4ZGVjNDY4
LzEvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHotaC0q
bH+lrLnMh1+n3cJQ/UbL+U9yUkncwRWh2AcjDr9ZSg/eVBelREsbKyouGooYYgLs
SFHZXQWiOKcvxggaIPWsRpt0/tSLuwG/6uvWRzE39RFKsXsMvcJ2fhKUnEcqtEXL
OVcUwpFfBwK7juNZSiiRl2QGW9P788ONf8+QS35NPr4bEhEnFiDqOZIOLQ0j9oq0
z05Od8A+UptsOGVqjPd0mt+w3+fXXEIE1o7CF0vCF2GTht+pouWRGLDSV8itdmxE
vprnTVNJvXxwv8rcD7DwkNHdYh3/PppW7T6uIYQa6n7o7OK5x8P8cAFH/pggnvG6
jm/bD/Utsa7WnQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:59 2025 by rpki-client