Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: Ec8Wj7MBkkMC+f+2UQS9mrYK3s1q7EpKqwUfgdd3/v4=
Subject key identifier: F3:9E:90:E8:C6:71:E7:41:EA:81:8A:0B:92:5C:33:70:40:2E:D0:6A
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 0199312557F81329DDD0D6EC9477FF68D12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 0FFC
Signing time: Wed 10 Sep 2025 01:02:34 +0000
Manifest this update: Wed 10 Sep 2025 01:02:34 +0000
Manifest next update: Thu 11 Sep 2025 01:02:34 +0000
Files and hashes: 1: wDvIF8IUEQhjnYm69O7DnmCZNJY.roa (hash: AHCZUkCpuvskw07HtMA8aALHO5a1ETyk504pdPIdAIc=)
2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: PfeoEgprCVIoY6PH4EsF75lJw37zRsxkPjPzoF3f/I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:25:57:f8:13:29:dd:d0:d6:ec:94:77:ff:68:d1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Sep 10 01:02:34 2025 GMT
Not After : Sep 11 01:02:34 2025 GMT
Subject: CN=f39e90e8c671e741ea818a0b925c3370402ed06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:ea:e0:7f:42:bd:61:dd:97:25:f0:37:5d:
de:8c:64:8c:aa:34:73:d0:76:85:2e:7c:82:fa:0b:
e2:be:2e:dc:ab:23:5a:1b:47:bf:99:a0:98:ea:76:
ef:57:90:3f:cf:ec:24:09:5c:9e:ea:ed:a9:a3:6e:
0d:ce:75:89:b3:5a:b0:b7:1c:28:13:cd:c3:0b:82:
f0:cb:9b:b6:e4:c5:46:8a:68:61:47:e4:f9:3b:b9:
10:18:6d:a5:1b:d6:10:91:d6:67:46:ef:9d:7f:2e:
f7:86:d8:d7:05:1c:c0:c7:c4:ff:07:d6:65:14:39:
91:a9:d6:58:40:13:f3:21:ff:a1:69:a9:64:fb:75:
28:ef:ec:95:78:25:00:b6:80:ee:83:25:8e:4b:bb:
36:09:0d:43:ef:8a:ab:ec:b2:95:ae:c7:20:97:74:
c2:58:cd:a5:6c:5a:7b:db:df:69:30:73:5f:e1:13:
d4:63:5e:3e:3c:6d:60:45:7d:02:37:59:49:68:cb:
8a:76:58:a6:01:c5:a0:7b:b6:88:72:bf:59:92:0b:
03:bf:7a:1f:f4:1d:bc:75:3e:ca:09:5b:09:48:cc:
15:94:77:2a:ef:58:37:06:be:9f:fa:03:21:68:af:
c3:3a:0d:a0:7a:3b:cc:f9:ee:ca:e6:80:ed:63:3c:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9E:90:E8:C6:71:E7:41:EA:81:8A:0B:92:5C:33:70:40:2E:D0:6A
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:72:49:49:65:4a:74:e9:1b:43:c0:55:67:07:1d:14:db:a7:
df:54:69:25:02:26:5f:d9:21:c1:62:a9:12:7f:e0:f8:76:6a:
56:2b:f9:ff:ff:55:83:6d:23:13:68:90:8e:c8:ac:74:3b:f9:
8c:e4:ae:8a:3b:e4:4d:da:ab:a9:31:22:95:00:6a:b1:be:ce:
3f:c7:bd:42:38:02:ad:f3:9b:14:ab:eb:96:bc:f3:29:d0:42:
fa:6b:21:68:a8:b9:32:0d:1c:a8:3b:91:c6:a9:be:89:03:ad:
1d:c2:43:07:f5:6e:8a:9a:f3:b1:ac:a6:48:05:ea:1f:56:34:
a5:2f:76:ce:0a:c8:fd:84:03:84:3a:95:eb:6b:1c:7b:f3:23:
95:39:ae:20:d9:b7:67:84:1b:25:81:d6:3a:21:12:df:91:ef:
56:af:4a:66:da:fe:a4:5e:10:a9:e9:50:a6:84:a3:d2:75:7d:
a6:f5:be:31:d0:d3:a5:91:99:6e:29:62:a4:3a:7d:a3:62:e9:
f8:04:00:68:c6:2a:6c:b4:f7:b4:1e:9e:0c:57:71:72:a9:b8:
e9:7a:c0:44:88:55:7f:5e:0e:bf:4e:65:c7:5c:48:7e:00:1a:
ea:24:ab:a0:f0:b5:6e:86:e5:62:5d:8e:8b:5f:24:5f:41:a3:
4e:cf:28:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJVf4Eynd0NbslHf/aNEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDc0NWViZmNlYzM4MmRmMjUyYzJmNzUwZGI2NDhmNGYw
MzRhYmYwHhcNMjUwOTEwMDEwMjM0WhcNMjUwOTExMDEwMjM0WjAzMTEwLwYDVQQD
EyhmMzllOTBlOGM2NzFlNzQxZWE4MThhMGI5MjVjMzM3MDQwMmVkMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0jq4H9CvWHdlyXwN13ejGSMqjRz
0HaFLnyC+gvivi7cqyNaG0e/maCY6nbvV5A/z+wkCVye6u2po24NznWJs1qwtxwo
E83DC4Lwy5u25MVGimhhR+T5O7kQGG2lG9YQkdZnRu+dfy73htjXBRzAx8T/B9Zl
FDmRqdZYQBPzIf+haalk+3Uo7+yVeCUAtoDugyWOS7s2CQ1D74qr7LKVrscgl3TC
WM2lbFp7299pMHNf4RPUY14+PG1gRX0CN1lJaMuKdlimAcWge7aIcr9ZkgsDv3of
9B28dT7KCVsJSMwVlHcq71g3Br6f+gMhaK/DOg2gejvM+e7K5oDtYzz4OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOekOjGcedB6oGKC5JcM3BALtBqMB8GA1UdIwQY
MBaAFMvXRev87Dgt8lLC91DbZI9PA0q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUt
OTJiNjc5NmM3N2NjLzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUtOTJiNjc5NmM3N2Nj
LzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHJJSWVK
dOkbQ8BVZwcdFNun31RpJQImX9khwWKpEn/g+HZqViv5//9Vg20jE2iQjsisdDv5
jOSuijvkTdqrqTEilQBqsb7OP8e9QjgCrfObFKvrlrzzKdBC+mshaKi5Mg0cqDuR
xqm+iQOtHcJDB/VuiprzsaymSAXqH1Y0pS92zgrI/YQDhDqV62sce/MjlTmuINm3
Z4QbJYHWOiES35HvVq9KZtr+pF4QqelQpoSj0nV9pvW+MdDTpZGZbilipDp9o2Lp
+AQAaMYqbLT3tB6eDFdxcqm46XrARIhVf14Ov05lx1xIfgAa6iSroPC1boblYl2O
i18kX0GjTs8oGQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 07:18:48 2025 by rpki-client