Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier: oZUEPNJsv7xF7i08yczaNeiV1CIGaXBbjn4Z65NPJG8=
Subject key identifier: 3B:CD:7D:65:AC:D5:F9:A3:8E:45:41:82:40:2E:A0:E3:7C:E1:F3:40
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial: 019A7112FAB8191EAE3362E3A4BB5D8115E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number: 22
Signing time: Tue 11 Nov 2025 04:01:00 +0000
Manifest this update: Tue 11 Nov 2025 04:01:00 +0000
Manifest next update: Wed 12 Nov 2025 04:01:00 +0000
Files and hashes: 1: WBSDkIaVRxspnZB85zHlZDMPBvE.roa (hash: dKGj0UbI6Hyodic4ujzyMQO0izNi4N6MDbaDGIVHoXI=)
2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: tBFd69/m6vxe91ANy/TK0fYE7fOYfGWC+3QuN62FBco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:fa:b8:19:1e:ae:33:62:e3:a4:bb:5d:81:15:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Validity
Not Before: Nov 11 04:01:00 2025 GMT
Not After : Nov 12 04:01:00 2025 GMT
Subject: CN=3bcd7d65acd5f9a38e454182402ea0e37ce1f340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:56:7a:28:05:53:74:03:2b:ed:95:00:64:
d9:c1:d3:55:83:8b:0b:e8:c3:7e:5d:68:be:09:f2:
29:c1:3c:5a:5e:1d:b5:3a:63:87:f9:28:9c:60:cf:
2f:0b:2c:6a:93:62:86:20:d5:96:57:22:ef:13:14:
e4:97:13:27:04:4a:1f:71:c0:55:17:b4:1c:d4:29:
0f:f9:50:f3:52:dc:64:5f:a9:fb:b1:73:78:dc:b3:
22:1c:3f:d4:9b:3f:d1:70:a9:10:40:a3:97:2d:2e:
51:0e:b3:38:38:b8:e3:bb:d5:aa:2e:83:66:93:5b:
8f:76:49:44:dc:45:95:fa:6e:b5:b3:83:9d:0c:2c:
59:e4:d0:a4:f2:f4:83:83:6f:5b:6b:c9:16:e3:b4:
04:1d:22:e8:3b:85:7c:e7:36:37:73:db:17:64:65:
3c:fa:17:53:b2:05:cd:9b:e7:75:ec:34:da:9b:e5:
21:2b:0c:e0:91:af:fb:4f:83:4f:38:2c:ab:1f:24:
40:33:db:26:2d:53:90:8b:d4:66:f3:cd:62:9a:a3:
fa:56:47:e7:0b:9a:0c:b7:8b:30:d9:97:6b:54:08:
18:0a:53:e5:ca:e3:77:75:cb:2b:6f:dd:49:e6:d2:
1a:18:ac:12:16:f5:23:cb:f5:52:f5:75:d4:dc:d7:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CD:7D:65:AC:D5:F9:A3:8E:45:41:82:40:2E:A0:E3:7C:E1:F3:40
X509v3 Authority Key Identifier:
keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b3:e6:7c:47:62:e4:54:7c:b7:cf:5a:02:3f:ce:d5:c6:2f:
d0:ab:09:35:b8:f0:da:ea:d3:ef:45:a3:b5:ec:c3:dd:ff:23:
f9:04:f5:86:ad:c5:03:b5:2b:cb:3c:16:5a:a9:17:54:a4:f3:
4a:86:89:5a:6c:a7:50:37:5a:31:df:14:4c:76:77:45:81:27:
bc:ee:03:19:1f:e0:01:2b:83:79:3a:6f:ac:36:0d:8c:9d:34:
2f:91:21:c3:ef:9a:ae:86:70:97:98:6e:57:b6:29:6c:4e:e0:
93:76:b8:a2:3a:c8:fc:37:d7:9f:12:48:dd:b9:33:1f:18:4a:
07:a2:58:1e:9e:b0:dc:98:93:82:3e:e9:a0:96:d8:d2:0c:ca:
ce:6d:7d:fd:4b:09:1b:2d:1c:7e:2e:cc:92:08:df:41:96:8c:
f5:61:61:58:43:6b:86:b4:c2:dc:46:fe:fa:8c:24:79:86:0e:
e1:62:33:d4:d7:b3:30:79:0a:ec:89:6c:fd:6c:5c:c1:0d:8d:
61:1c:a5:75:ac:66:4f:f1:84:30:39:8d:08:55:ef:53:7f:6a:
0a:37:92:de:f5:91:54:bd:a6:0d:ae:10:45:47:0e:bf:fe:be:
16:38:e9:22:74:4f:8f:27:dd:50:f2:38:34:ca:51:2a:82:83:
84:f7:e0:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEvq4GR6uM2LjpLtdgRXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxODY1NGNiOGVkM2Y1NWQ1YzYwOTcyZDMxMGY1ZWQ2MjA0
YjRmZTUwHhcNMjUxMTExMDQwMTAwWhcNMjUxMTEyMDQwMTAwWjAzMTEwLwYDVQQD
EygzYmNkN2Q2NWFjZDVmOWEzOGU0NTQxODI0MDJlYTBlMzdjZTFmMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAZWeigFU3QDK+2VAGTZwdNVg4sL
6MN+XWi+CfIpwTxaXh21OmOH+SicYM8vCyxqk2KGINWWVyLvExTklxMnBEofccBV
F7Qc1CkP+VDzUtxkX6n7sXN43LMiHD/Umz/RcKkQQKOXLS5RDrM4OLjju9WqLoNm
k1uPdklE3EWV+m61s4OdDCxZ5NCk8vSDg29ba8kW47QEHSLoO4V85zY3c9sXZGU8
+hdTsgXNm+d17DTam+UhKwzgka/7T4NPOCyrHyRAM9smLVOQi9Rm881imqP6Vkfn
C5oMt4sw2ZdrVAgYClPlyuN3dcsrb91J5tIaGKwSFvUjy/VS9XXU3NfylQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvNfWWs1fmjjkVBgkAuoON84fNAMB8GA1UdIwQY
MBaAFHGGVMuO0/VdXGCXLTEPXtYgS0/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQt
YTI4YmNlNWQ1ZGE1LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQtYTI4YmNlNWQ1ZGE1
LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbPmfEdi
5FR8t89aAj/O1cYv0KsJNbjw2urT70WjtezD3f8j+QT1hq3FA7UryzwWWqkXVKTz
SoaJWmynUDdaMd8UTHZ3RYEnvO4DGR/gASuDeTpvrDYNjJ00L5Ehw++aroZwl5hu
V7YpbE7gk3a4ojrI/DfXnxJI3bkzHxhKB6JYHp6w3JiTgj7poJbY0gzKzm19/UsJ
Gy0cfi7MkgjfQZaM9WFhWENrhrTC3Eb++owkeYYO4WIz1NezMHkK7Ils/WxcwQ2N
YRyldaxmT/GEMDmNCFXvU39qCjeS3vWRVL2mDa4QRUcOv/6+FjjpInRPjyfdUPI4
NMpRKoKDhPfgkA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:30 2025 by rpki-client