Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: cm8PLffpu8ITqY+moKb1DZmA5IxN0FjzmXgtOq5gya4=
Subject key identifier: 7F:2A:40:33:16:E5:97:AA:00:FD:01:EC:8C:D4:B5:94:E9:08:42:8D
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 019A2A43537253CCEE2D0E7845DAC312ABA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0A6A
Signing time: Tue 28 Oct 2025 10:00:46 +0000
Manifest this update: Tue 28 Oct 2025 10:00:46 +0000
Manifest next update: Wed 29 Oct 2025 10:00:46 +0000
Files and hashes: 1: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (hash: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: NsJ+NgTH2zCjEQeO+2s9RTvp7xV4rEMP0nXGb6g4hbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:53:72:53:cc:ee:2d:0e:78:45:da:c3:12:ab:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Oct 28 10:00:46 2025 GMT
Not After : Oct 29 10:00:46 2025 GMT
Subject: CN=7f2a403316e597aa00fd01ec8cd4b594e908428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:c5:3d:c6:23:ac:a3:9d:35:2c:e2:d2:28:
90:78:55:84:46:5f:5f:ae:01:c4:0d:c5:cb:27:35:
2b:3f:a7:0f:83:48:6f:68:b5:fa:41:b6:e4:72:fb:
ac:c8:69:be:4b:f4:3e:8d:6f:35:2e:5c:e5:cb:05:
03:2f:b8:b0:03:23:d3:09:83:7a:e8:a0:93:e1:7e:
9b:28:19:ad:7f:c2:89:0a:93:26:99:e9:b7:a7:95:
e4:b5:04:b8:e4:ad:7f:0f:fb:05:49:25:fc:7d:69:
4f:0f:95:6c:1e:56:66:7a:28:68:c4:1b:08:c4:2a:
f9:55:b6:83:30:ac:30:af:28:85:54:aa:47:1e:e0:
b0:70:d3:1a:f6:f2:3d:ad:4f:49:f4:5d:57:5d:2e:
d8:f2:e8:df:df:13:c5:31:fb:95:28:65:28:23:a3:
40:92:48:8f:d7:06:c3:4b:1e:95:22:0b:f9:f1:1f:
d9:2c:6d:29:0c:9a:6a:7e:7c:b9:e1:11:a3:52:cf:
10:8e:ae:df:9a:6f:5c:eb:70:33:71:8b:70:8c:fb:
a4:e2:8d:9e:82:e1:e1:5f:cc:25:38:0b:fb:e6:08:
7f:40:33:e2:6e:da:4f:6e:e2:e0:a5:5a:32:80:a0:
38:7a:1f:cc:a1:a7:51:30:02:6e:55:9f:4d:09:f2:
eb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2A:40:33:16:E5:97:AA:00:FD:01:EC:8C:D4:B5:94:E9:08:42:8D
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a3:48:d3:28:1b:ca:60:e6:13:e2:e2:7f:4d:62:ea:76:54:
1a:d3:a2:8d:3e:5a:d5:77:56:fd:d4:a3:db:05:40:ce:9f:20:
84:87:f8:cf:23:fe:ac:8e:27:6f:a3:61:f2:08:00:8a:a1:f0:
d6:3c:3f:07:a2:f0:86:ed:96:44:6f:77:41:eb:58:4b:c3:f7:
44:eb:21:21:a2:0e:b1:d8:26:1b:92:f7:34:55:62:4c:09:a7:
49:c8:37:e9:d1:3c:14:13:52:d3:a3:2d:1e:d2:64:7a:21:82:
8b:75:b1:b2:b7:82:9d:24:9a:57:4d:b1:42:f4:12:04:49:94:
57:a5:db:7d:56:76:16:43:a6:ec:88:11:ed:28:c0:f3:94:9b:
2c:89:ce:a5:08:3e:9b:84:e9:b7:d8:d0:59:1d:99:8d:3b:ae:
1c:aa:ce:8a:11:46:90:29:ce:eb:64:6d:6d:5b:29:fe:48:de:
89:ff:4d:7c:4a:f9:39:47:61:cb:aa:be:f4:86:96:cb:be:46:
d9:7c:d1:6e:82:80:da:bb:8e:44:85:93:36:3a:47:ce:25:84:
8b:4b:05:6a:80:cf:f9:99:41:a4:8d:fd:79:e3:c6:e2:02:a4:
15:80:1f:2e:06:e0:42:ee:ff:5d:35:4a:77:54:c2:07:9f:dd:
d9:59:46:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQ1NyU8zuLQ54RdrDEquoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGZkYTIxZWRlMDE4ZWRmZjU0OTgxMTYzNTdhOGM2MTUy
ZWM3ZWYwHhcNMjUxMDI4MTAwMDQ2WhcNMjUxMDI5MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg3ZjJhNDAzMzE2ZTU5N2FhMDBmZDAxZWM4Y2Q0YjU5NGU5MDg0MjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKbFPcYjrKOdNSzi0iiQeFWERl9f
rgHEDcXLJzUrP6cPg0hvaLX6QbbkcvusyGm+S/Q+jW81LlzlywUDL7iwAyPTCYN6
6KCT4X6bKBmtf8KJCpMmmem3p5XktQS45K1/D/sFSSX8fWlPD5VsHlZmeihoxBsI
xCr5VbaDMKwwryiFVKpHHuCwcNMa9vI9rU9J9F1XXS7Y8ujf3xPFMfuVKGUoI6NA
kkiP1wbDSx6VIgv58R/ZLG0pDJpqfny54RGjUs8Qjq7fmm9c63AzcYtwjPuk4o2e
guHhX8wlOAv75gh/QDPibtpPbuLgpVoygKA4eh/MoadRMAJuVZ9NCfLrwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8qQDMW5ZeqAP0B7IzUtZTpCEKNMB8GA1UdIwQY
MBaAFMvf2iHt4Bjt/1SYEWNXqMYVLsfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlfYUllM2dHTzNfVkpnUlkxZW94aFV1eC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hYzdkNWEtMDJiZi00ODAzLTg2ZmUt
ZTY1ZDM1ODgzMDkzLzEveTlfYUllM2dHTzNfVkpnUlkxZW94aFV1eC04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hYzdkNWEtMDJiZi00ODAzLTg2ZmUtZTY1ZDM1ODgzMDkz
LzEveTlfYUllM2dHTzNfVkpnUlkxZW94aFV1eC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6NI0ygb
ymDmE+Lif01i6nZUGtOijT5a1XdW/dSj2wVAzp8ghIf4zyP+rI4nb6Nh8ggAiqHw
1jw/B6Lwhu2WRG93QetYS8P3ROshIaIOsdgmG5L3NFViTAmnScg36dE8FBNS06Mt
HtJkeiGCi3WxsreCnSSaV02xQvQSBEmUV6XbfVZ2FkOm7IgR7SjA85SbLInOpQg+
m4Tpt9jQWR2ZjTuuHKrOihFGkCnO62RtbVsp/kjeif9NfEr5OUdhy6q+9IaWy75G
2XzRboKA2ruORIWTNjpHziWEi0sFaoDP+ZlBpI39eePG4gKkFYAfLgbgQu7/XTVK
d1TCB5/d2VlGuQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:05:46 2025 by rpki-client