Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: qPAjSM7Bw0OJ1SvIdKKEymQkZhoq5YKQjJdbNK0DH2s=
Subject key identifier: 24:0B:CF:3F:02:86:17:FA:0B:53:57:C5:0D:A8:73:3B:2D:DB:BE:BB
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 019A71EEE3F71D191E9C9190CE3D1F2E35F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: EYOyIZEtGAmsO0m+9oZ6265L30ZjomA7yHMIy89TjcE=)
3: Rd3HOWCgIifcE20uT6ZwMTd010E.roa (hash: Iyh7ZN8yRmO6xUm0HuFbl9LY6LaOBla7JBeUoV6oKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e3:f7:1d:19:1e:9c:91:90:ce:3d:1f:2e:35:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=240bcf3f028617fa0b5357c50da8733b2ddbbebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:86:eb:cb:76:82:ca:95:e1:64:6e:fe:7f:
9b:c5:0e:f4:c1:cf:f4:bd:47:25:42:7c:94:da:dd:
06:fb:ab:54:d9:b6:37:1c:bf:9f:80:7d:23:ab:a9:
99:3b:eb:51:15:03:12:a6:23:f1:36:d8:64:db:0e:
44:f5:41:e5:64:2a:53:2d:92:bd:00:19:da:7e:d9:
0a:0a:d8:0b:9b:16:68:fe:96:68:2c:1a:e1:67:b5:
c5:57:98:34:5f:62:f8:a8:c9:b7:94:70:c7:ee:18:
56:e9:74:29:66:05:0b:20:06:27:50:e2:79:4e:2c:
0d:69:4d:7c:a3:07:ad:41:4f:b8:8b:c4:d1:5c:c0:
93:6d:98:3b:0e:e7:c3:13:b2:f1:84:e2:8f:3b:fa:
a7:e2:ad:22:f3:1c:f6:83:9f:29:6f:1b:25:35:9a:
80:2c:e7:64:af:bb:61:fe:cf:48:b4:d8:56:91:c3:
b1:e3:f3:43:d0:58:82:13:b9:ec:dc:76:73:dd:6a:
9c:b7:28:6e:14:1d:61:38:05:58:12:ed:a5:d6:8c:
7f:b3:b9:be:49:2c:6a:f0:26:b1:7a:10:62:6c:e4:
fd:ad:96:d4:c2:32:3a:3c:d6:84:00:c7:f6:4b:40:
b9:bb:ea:d1:5a:fb:36:06:f0:32:f0:8a:43:71:e3:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0B:CF:3F:02:86:17:FA:0B:53:57:C5:0D:A8:73:3B:2D:DB:BE:BB
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8e:7b:60:47:0d:4a:18:b3:70:40:65:1c:16:dd:b7:4f:25:
98:35:cd:a1:66:cc:9f:03:1d:28:52:0e:26:07:8a:ed:4e:b9:
6c:31:5b:fa:26:46:1b:91:5c:97:2d:41:55:b0:e9:67:83:4b:
b4:fc:43:cd:db:82:aa:8b:2a:ab:d2:44:ba:32:1f:72:fc:23:
6a:35:86:b8:c4:76:7c:59:9e:5a:c8:bf:69:d5:aa:92:a4:f6:
0b:32:f3:ba:02:d8:a4:73:8c:b9:41:67:81:57:d3:dd:4f:3e:
4e:83:9c:4f:07:ae:52:e5:10:2f:88:a3:2f:f5:bd:81:6a:c5:
74:3a:1e:ee:c1:af:45:2f:1a:24:ca:38:45:a2:8a:53:a9:a8:
6e:8e:7b:7f:a5:a0:0a:53:9e:05:65:c1:d7:7f:c0:44:cb:d6:
ba:7c:3d:41:fd:eb:b0:aa:f4:13:b9:d2:78:19:63:e1:fe:17:
99:2d:06:04:03:b9:42:93:d5:f2:2e:2e:f4:c5:6f:a5:3e:f1:
e7:05:8b:9b:9b:aa:6b:d0:fa:45:4a:75:3e:3b:80:3a:b8:dc:
cc:a2:3b:2f:63:a4:05:e5:0f:5e:ea:c9:e2:7a:da:06:39:6a:
95:7d:b1:2e:24:95:f9:89:7a:20:e4:5d:a9:93:e4:ac:aa:d1:
1b:3c:04:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7uP3HRkenJGQzj0fLjXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ODgzNGM1MmFiZTMwNDI3ZjBhMjJhYTQ2ZmQzZDA4MDll
ZDQ1ODUwHhcNMjUxMTExMDgwMTEyWhcNMjUxMTEyMDgwMTEyWjAzMTEwLwYDVQQD
EygyNDBiY2YzZjAyODYxN2ZhMGI1MzU3YzUwZGE4NzMzYjJkZGJiZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri+G68t2gsqV4WRu/n+bxQ70wc/0
vUclQnyU2t0G+6tU2bY3HL+fgH0jq6mZO+tRFQMSpiPxNthk2w5E9UHlZCpTLZK9
ABnaftkKCtgLmxZo/pZoLBrhZ7XFV5g0X2L4qMm3lHDH7hhW6XQpZgULIAYnUOJ5
TiwNaU18owetQU+4i8TRXMCTbZg7DufDE7LxhOKPO/qn4q0i8xz2g58pbxslNZqA
LOdkr7th/s9ItNhWkcOx4/ND0FiCE7ns3HZz3WqctyhuFB1hOAVYEu2l1ox/s7m+
SSxq8CaxehBibOT9rZbUwjI6PNaEAMf2S0C5u+rRWvs2BvAy8IpDceOtDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQLzz8Chhf6C1NXxQ2oczst2767MB8GA1UdIwQY
MBaAFEWINMUqvjBCfwoiqkb9PQgJ7UWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGIt
YTMxMTQzNDYzYmU5LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGItYTMxMTQzNDYzYmU5
LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW457YEcN
ShizcEBlHBbdt08lmDXNoWbMnwMdKFIOJgeK7U65bDFb+iZGG5Fcly1BVbDpZ4NL
tPxDzduCqosqq9JEujIfcvwjajWGuMR2fFmeWsi/adWqkqT2CzLzugLYpHOMuUFn
gVfT3U8+ToOcTweuUuUQL4ijL/W9gWrFdDoe7sGvRS8aJMo4RaKKU6mobo57f6Wg
ClOeBWXB13/ARMvWunw9Qf3rsKr0E7nSeBlj4f4XmS0GBAO5QpPV8i4u9MVvpT7x
5wWLm5uqa9D6RUp1PjuAOrjczKI7L2OkBeUPXurJ4nraBjlqlX2xLiSV+Yl6IORd
qZPkrKrRGzwETA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:18 2025 by rpki-client