Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: 3pUU5FgRpEfEddc7kJ0fY0SX001cn0Es85Sg03VJB6E=
Subject key identifier: C1:1D:2B:A1:51:BB:1A:27:4B:F8:8E:53:73:53:84:5A:B0:EE:8D:EA
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 0199221E8954229A28F6C7C5BC54751C9597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:00:50 +0000
Manifest this update: Sun 07 Sep 2025 03:00:50 +0000
Manifest next update: Mon 08 Sep 2025 03:00:50 +0000
Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: 3FpmwKNc5aZzBWnII7+6+AhtlnYjp3GOHGVipxjCGqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:89:54:22:9a:28:f6:c7:c5:bc:54:75:1c:95:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Sep 7 03:00:50 2025 GMT
Not After : Sep 8 03:00:50 2025 GMT
Subject: CN=c11d2ba151bb1a274bf88e537353845ab0ee8dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:d2:99:d2:07:a3:40:67:d5:52:78:69:d4:
e8:c6:9f:a4:d9:af:65:ca:88:4c:80:a0:45:7a:73:
92:c9:e2:74:ac:96:14:6d:65:cd:6b:79:f1:34:39:
c2:71:9e:db:02:ec:23:7a:3d:01:06:3b:0b:22:65:
2e:47:38:a9:41:c7:fa:44:3b:a6:38:dc:5c:b5:d2:
0b:84:1d:e8:b7:40:3e:67:f4:30:c7:2c:21:bf:09:
53:b5:10:ae:0b:73:7d:04:fe:fe:72:f4:60:8b:3c:
37:7f:69:3d:8b:a3:cb:8e:ce:d8:ed:ba:36:81:a7:
6d:f8:48:e0:d3:1b:81:4f:ac:52:1f:b8:a1:c9:de:
53:f6:6c:99:cb:2c:8d:fc:fc:f4:e3:31:32:2c:39:
04:68:5b:d7:dd:62:af:96:e2:49:f2:97:89:87:3c:
e5:20:0b:36:fa:25:ae:5f:a7:e8:c4:7e:87:f0:4e:
11:a9:96:54:4d:be:af:8f:7b:db:c1:14:0d:aa:e5:
e9:42:cf:c0:03:4e:47:4e:95:b8:57:5d:b5:bd:b0:
a3:92:4e:2e:82:27:dd:cd:59:f8:36:ce:e3:db:11:
03:a4:9e:72:14:de:35:4f:31:1c:57:11:82:72:b0:
1d:dc:13:45:73:50:66:5f:35:d9:4b:20:08:e4:a5:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1D:2B:A1:51:BB:1A:27:4B:F8:8E:53:73:53:84:5A:B0:EE:8D:EA
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0b:4c:44:b8:fa:1d:8a:8e:d2:4d:c5:ee:4c:bb:40:75:17:
2d:eb:b8:9a:f2:98:fd:a1:a9:d2:48:2d:97:99:a3:eb:d7:5b:
3a:85:18:5f:33:b8:30:a4:a4:d7:f0:ea:c2:f7:b4:48:85:78:
86:65:bf:ae:c2:94:25:23:8c:30:3d:bd:9c:4a:44:66:58:0b:
90:0f:9f:9f:6c:fb:cc:29:eb:ee:dd:8f:6c:84:06:a9:37:17:
d0:38:57:02:6e:0c:0f:09:36:b9:f5:d1:1f:cb:7b:3e:17:94:
39:a6:23:b7:6f:f1:2c:0d:3d:20:61:e5:fd:5a:11:f4:e0:6b:
29:35:39:93:fb:49:9c:a6:2a:5a:55:c3:57:53:fc:2f:05:33:
a2:6c:e2:71:93:22:4d:83:70:da:0c:f6:de:2d:2a:c2:be:52:
78:07:ab:97:df:99:79:62:bd:29:05:45:09:4d:60:51:06:e3:
f3:da:dc:fb:82:f5:ee:b4:e4:7f:e3:66:36:91:9a:ec:60:82:
bf:b3:ec:6c:da:8c:98:1e:68:04:ab:54:1b:57:43:22:4f:74:
c0:53:ac:96:7f:ab:21:2f:ed:d5:0e:6d:e0:ec:0f:ab:c6:b2:
87:53:46:73:be:c1:90:8e:af:a5:3b:aa:80:f1:0b:e7:6e:51:
47:38:2f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHolUIpoo9sfFvFR1HJWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGZiYTA5MTkwYjc2ODQ5ZmZmM2QyNmQ1ODA3OTBlNTRm
YWMyZTMwHhcNMjUwOTA3MDMwMDUwWhcNMjUwOTA4MDMwMDUwWjAzMTEwLwYDVQQD
EyhjMTFkMmJhMTUxYmIxYTI3NGJmODhlNTM3MzUzODQ1YWIwZWU4ZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoPSmdIHo0Bn1VJ4adToxp+k2a9l
yohMgKBFenOSyeJ0rJYUbWXNa3nxNDnCcZ7bAuwjej0BBjsLImUuRzipQcf6RDum
ONxctdILhB3ot0A+Z/QwxywhvwlTtRCuC3N9BP7+cvRgizw3f2k9i6PLjs7Y7bo2
gadt+Ejg0xuBT6xSH7ihyd5T9myZyyyN/Pz04zEyLDkEaFvX3WKvluJJ8peJhzzl
IAs2+iWuX6foxH6H8E4RqZZUTb6vj3vbwRQNquXpQs/AA05HTpW4V121vbCjkk4u
gifdzVn4Ns7j2xEDpJ5yFN41TzEcVxGCcrAd3BNFc1BmXzXZSyAI5KW6CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEdK6FRuxonS/iOU3NThFqw7o3qMB8GA1UdIwQY
MBaAFMtPugkZC3aEn/89JtWAeQ5U+sLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1Yjct
Zjg1Y2M1NzQ3ZmJmLzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1YjctZjg1Y2M1NzQ3ZmJm
LzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQtMRLj6
HYqO0k3F7ky7QHUXLeu4mvKY/aGp0kgtl5mj69dbOoUYXzO4MKSk1/Dqwve0SIV4
hmW/rsKUJSOMMD29nEpEZlgLkA+fn2z7zCnr7t2PbIQGqTcX0DhXAm4MDwk2ufXR
H8t7PheUOaYjt2/xLA09IGHl/VoR9OBrKTU5k/tJnKYqWlXDV1P8LwUzomzicZMi
TYNw2gz23i0qwr5SeAerl9+ZeWK9KQVFCU1gUQbj89rc+4L17rTkf+NmNpGa7GCC
v7PsbNqMmB5oBKtUG1dDIk90wFOsln+rIS/t1Q5t4OwPq8ayh1NGc77BkI6vpTuq
gPEL525RRzgvgA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:14 2025 by rpki-client