Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier: EA8lJkMZyj8Wq4yJBvEILgod6CEAVX0Y0j3CfVTDE6A=
Subject key identifier: B8:2A:DC:BC:7D:02:A3:61:64:5A:A3:C8:30:C2:25:3E:EF:2B:B8:CD
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 019A300F2225F45E8193FEE0D254C9D96B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number: 1707
Signing time: Wed 29 Oct 2025 13:01:29 +0000
Manifest this update: Wed 29 Oct 2025 13:01:29 +0000
Manifest next update: Thu 30 Oct 2025 13:01:29 +0000
Files and hashes: 1: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: 18QqPbbBuJameDnlafASIfEn0tcsUYbGe8ZUCED1Dpk=)
2: kmLiHNRRpwOnM7rn20oNf2vg9Dc.roa (hash: 3Uo+lrCMzfAdaBvj61plQUI9wF4wWfccEoe9UjEWqq8=)
3: pxrczszu4gk7oPsVsfTnGAHE-EY.roa (hash: e7fxLeat8zBves10MZjMVqSmM3nHW7bHuvHyNqARg3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0f:22:25:f4:5e:81:93:fe:e0:d2:54:c9:d9:6b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Oct 29 13:01:29 2025 GMT
Not After : Oct 30 13:01:29 2025 GMT
Subject: CN=b82adcbc7d02a361645aa3c830c2253eef2bb8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:f1:f4:fc:2e:ec:dd:ba:de:14:ac:35:ae:
5a:72:cd:df:c8:78:b0:fe:77:c3:e8:58:24:3a:84:
19:91:b9:e3:b8:45:2d:2d:b6:c3:38:f2:87:16:a7:
43:f0:86:cc:11:5f:2d:af:b5:4e:9a:fc:06:af:7f:
55:1e:37:ca:6b:64:23:bb:cb:4a:e2:83:ea:25:51:
f9:05:5c:d6:f6:74:91:35:f1:cd:8f:6f:a7:6f:26:
9f:d3:07:82:f0:1e:66:29:40:41:a6:bd:3b:bd:08:
a9:f3:2d:4f:a9:1b:be:12:06:c5:f3:9e:cb:b8:4b:
45:38:a6:bc:6f:cd:c4:36:99:9a:77:f1:09:74:f6:
6c:8f:8d:dc:e4:9f:f9:10:74:c4:ae:2f:9d:ea:ac:
c7:8d:e9:37:fd:a1:c0:3f:4b:79:bf:da:3b:87:6b:
5f:f7:e3:8f:6f:3e:4c:b7:ba:7f:1a:a9:28:13:4b:
42:61:bf:b5:4e:e0:9b:25:bf:9c:b3:17:03:1e:c8:
c1:cc:05:fd:12:5b:fb:f0:3e:7f:c0:50:7f:32:c9:
c8:4a:ee:26:16:15:88:aa:9c:ff:54:0e:19:f6:22:
30:8e:b9:4b:5a:73:7a:cf:c2:e2:55:41:f9:88:70:
8b:53:fc:39:39:92:92:cd:48:67:8d:24:dd:8a:30:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2A:DC:BC:7D:02:A3:61:64:5A:A3:C8:30:C2:25:3E:EF:2B:B8:CD
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:56:3c:57:cf:b7:82:52:ee:38:8a:ff:49:f5:d2:5e:ec:04:
05:fc:63:90:e2:82:f0:5d:ee:e5:82:de:12:de:cb:48:fc:32:
c9:c3:5f:4f:e5:74:33:f6:9e:9f:73:6c:09:4d:4a:29:7e:80:
e1:b3:4a:1b:77:f4:11:37:f3:5a:e9:60:88:10:7a:c4:fd:c9:
b1:51:91:36:11:52:11:d3:cd:18:04:a8:99:bc:50:7c:98:1a:
67:ba:04:39:fe:34:0c:49:d8:2a:5d:d1:60:4b:80:bd:f3:bb:
62:df:e1:a3:01:89:44:05:21:17:6f:ba:ce:5e:ed:16:23:4a:
40:59:54:5d:15:4c:c7:bd:92:da:23:e1:44:40:92:e6:6d:3e:
fd:4d:92:cb:79:b7:9a:45:af:bb:aa:ac:f0:fc:c5:05:e5:5b:
91:cc:e0:ea:81:9d:1a:db:fb:5a:b2:51:63:1c:e2:9a:14:6a:
ad:0a:7e:45:dd:6b:08:0b:a6:2f:a2:fe:aa:bc:fa:f5:c4:a3:
4b:7b:b1:60:59:20:62:c4:b2:07:b0:d0:72:af:47:26:ad:2f:
41:69:7c:5d:16:ba:06:5e:39:d4:ca:da:e2:3d:83:d4:c5:2c:
24:e8:e0:cd:a3:a6:c2:91:c9:ae:9d:f2:ed:b5:91:2f:bc:f5:
7d:b0:13:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZowDyIl9F6Bk/7g0lTJ2Wt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZjE0ZjhlMTQ0YzZkNTBjMzhhYjRmYWZmNWFjNmU1NDdm
ZTFkNDcwHhcNMjUxMDI5MTMwMTI5WhcNMjUxMDMwMTMwMTI5WjAzMTEwLwYDVQQD
EyhiODJhZGNiYzdkMDJhMzYxNjQ1YWEzYzgzMGMyMjUzZWVmMmJiOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzTx9Pwu7N263hSsNa5acs3fyHiw
/nfD6FgkOoQZkbnjuEUtLbbDOPKHFqdD8IbMEV8tr7VOmvwGr39VHjfKa2Qju8tK
4oPqJVH5BVzW9nSRNfHNj2+nbyaf0weC8B5mKUBBpr07vQip8y1PqRu+EgbF857L
uEtFOKa8b83ENpmad/EJdPZsj43c5J/5EHTEri+d6qzHjek3/aHAP0t5v9o7h2tf
9+OPbz5Mt7p/GqkoE0tCYb+1TuCbJb+csxcDHsjBzAX9Elv78D5/wFB/MsnISu4m
FhWIqpz/VA4Z9iIwjrlLWnN6z8LiVUH5iHCLU/w5OZKSzUhnjSTdijAYAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgq3Lx9AqNhZFqjyDDCJT7vK7jNMB8GA1UdIwQY
MBaAFGPxT44UTG1Qw4q0+v9axuVH/h1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YjBhYWUtOWQyNy00OTUxLWJhYjct
ZGEzOTQzODRlOTI1LzEvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YjBhYWUtOWQyNy00OTUxLWJhYjctZGEzOTQzODRlOTI1
LzEvWV9GUGpoUk1iVkREaXJUNl8xckc1VWYtSFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVY8V8+3
glLuOIr/SfXSXuwEBfxjkOKC8F3u5YLeEt7LSPwyycNfT+V0M/aen3NsCU1KKX6A
4bNKG3f0ETfzWulgiBB6xP3JsVGRNhFSEdPNGASombxQfJgaZ7oEOf40DEnYKl3R
YEuAvfO7Yt/howGJRAUhF2+6zl7tFiNKQFlUXRVMx72S2iPhRECS5m0+/U2Sy3m3
mkWvu6qs8PzFBeVbkczg6oGdGtv7WrJRYxzimhRqrQp+Rd1rCAumL6L+qrz69cSj
S3uxYFkgYsSyB7DQcq9HJq0vQWl8XRa6Bl451Mra4j2D1MUsJOjgzaOmwpHJrp3y
7bWRL7z1fbATLQ==
-----END CERTIFICATE-----
Generated at Wed Oct 29 15:46:51 2025 by rpki-client