Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
File: S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft (raw, json)
Hash identifier: xu66C9gdSQ2VNd6Z4mf9/CPTKcRC7u4AcuF0a7Ma7Hk=
Subject key identifier: C5:1F:60:5F:9F:98:5D:82:24:51:09:2A:6C:1C:91:80:06:61:70:2D
Authority key identifier: 4B:E3:72:F9:8D:76:65:86:C1:18:B7:96:B7:42:EE:57:52:97:C8:39
Certificate issuer: /CN=4be372f98d766586c118b796b742ee575297c839
Certificate serial: 019A29D570AFD5682A3720DACE0DACE47670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
Manifest number: 01C3
Signing time: Tue 28 Oct 2025 08:00:45 +0000
Manifest this update: Tue 28 Oct 2025 08:00:45 +0000
Manifest next update: Wed 29 Oct 2025 08:00:45 +0000
Files and hashes: 1: Mto4d4IFbeBIsa6qUyocr2jWWK8.roa (hash: hLmX3yT44hxgxojTu+MlPrp+Zl/FamUEdVMXkmwsOEc=)
2: S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl (hash: zRCiP2VXb6dBoEjOOLRJ1tY5ZsHHRrUaW5pubwKekAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:70:af:d5:68:2a:37:20:da:ce:0d:ac:e4:76:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be372f98d766586c118b796b742ee575297c839
Validity
Not Before: Oct 28 08:00:45 2025 GMT
Not After : Oct 29 08:00:45 2025 GMT
Subject: CN=c51f605f9f985d822451092a6c1c91800661702d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:48:b2:39:a5:94:aa:d5:a3:b0:84:ee:4a:
92:1e:22:9c:9c:4b:03:c1:54:92:0b:1a:b5:32:d3:
54:bb:39:75:46:18:87:66:f1:b8:a1:89:0b:21:fa:
e9:88:c9:27:9f:0e:33:e3:9b:d4:ea:f5:d4:0f:36:
28:35:8d:d6:df:37:f8:1b:34:2a:f1:16:f9:39:98:
4a:02:67:b1:ec:bb:49:85:5a:a9:c8:f4:4f:d6:5a:
8b:98:30:29:41:4f:3a:d8:af:c9:84:24:9f:c2:26:
31:f3:58:30:2a:1c:b8:15:3f:30:41:ff:08:f1:2a:
3b:ee:01:78:41:dd:06:3a:99:e6:9b:7f:76:72:d9:
df:f9:67:3a:e1:e5:2d:83:9f:23:39:01:b9:0b:f3:
6f:72:66:0a:db:8e:56:23:1b:7c:7c:b4:ee:2d:ea:
01:53:ea:82:13:04:0e:5e:54:f5:7a:64:f6:2f:36:
25:9c:38:62:4e:de:4b:fc:71:be:78:31:ae:9c:05:
3d:2f:ad:d8:e5:c2:2c:9b:e4:83:a0:30:1a:8c:ab:
73:aa:f1:5b:df:90:65:f1:f5:7d:8b:30:63:f9:87:
fe:76:3c:e4:ea:92:61:f8:2c:85:aa:7e:3a:02:c4:
ba:55:23:ac:e1:bb:2d:19:ec:8e:fd:c0:96:b2:22:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:60:5F:9F:98:5D:82:24:51:09:2A:6C:1C:91:80:06:61:70:2D
X509v3 Authority Key Identifier:
keyid:4B:E3:72:F9:8D:76:65:86:C1:18:B7:96:B7:42:EE:57:52:97:C8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:40:fc:24:12:d1:25:35:fb:7a:1d:eb:26:f2:85:29:37:9b:
b0:2a:b0:95:d2:30:9a:c1:2b:0d:fc:6d:f2:cb:ef:d1:02:36:
fd:3d:ed:13:ae:90:03:7b:9b:2b:51:37:22:e0:e6:21:19:cf:
38:43:ec:4d:07:33:52:46:7b:0a:5e:a0:43:6d:21:01:d1:26:
92:df:88:aa:ae:79:c4:5e:2f:d2:ad:27:d9:70:27:79:a9:c1:
e2:27:83:4b:31:7e:00:a9:bd:1b:e5:b1:98:23:e5:f1:47:82:
12:70:4a:6a:a7:05:31:f1:13:13:a4:dd:84:93:b8:20:f4:e6:
ca:2a:50:1a:5f:3a:06:2b:fc:77:8f:dc:80:4a:da:5e:1d:05:
aa:5a:4e:ba:07:be:b8:9c:ff:7f:21:52:7c:91:19:37:5b:09:
54:03:30:5b:c0:19:34:08:23:9a:71:39:fe:1b:87:eb:91:2b:
c6:65:b0:44:1e:96:78:c3:ee:de:ca:93:66:d5:17:26:1d:bb:
77:66:fd:65:f7:2b:ba:a3:f7:13:9f:11:5a:7f:71:59:ba:62:
0d:7f:d4:43:54:47:85:89:c2:de:79:d8:eb:9e:a9:70:7d:4e:
f2:27:a3:75:f7:6c:28:dc:ca:4b:ab:4a:13:33:10:ea:72:3d:
a2:a6:d4:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZop1XCv1WgqNyDazg2s5HZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTM3MmY5OGQ3NjY1ODZjMTE4Yjc5NmI3NDJlZTU3NTI5
N2M4MzkwHhcNMjUxMDI4MDgwMDQ1WhcNMjUxMDI5MDgwMDQ1WjAzMTEwLwYDVQQD
EyhjNTFmNjA1ZjlmOTg1ZDgyMjQ1MTA5MmE2YzFjOTE4MDA2NjE3MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6pIsjmllKrVo7CE7kqSHiKcnEsD
wVSSCxq1MtNUuzl1RhiHZvG4oYkLIfrpiMknnw4z45vU6vXUDzYoNY3W3zf4GzQq
8Rb5OZhKAmex7LtJhVqpyPRP1lqLmDApQU862K/JhCSfwiYx81gwKhy4FT8wQf8I
8So77gF4Qd0GOpnmm392ctnf+Wc64eUtg58jOQG5C/NvcmYK245WIxt8fLTuLeoB
U+qCEwQOXlT1emT2LzYlnDhiTt5L/HG+eDGunAU9L63Y5cIsm+SDoDAajKtzqvFb
35Bl8fV9izBj+Yf+djzk6pJh+CyFqn46AsS6VSOs4bstGeyO/cCWsiI1hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUfYF+fmF2CJFEJKmwckYAGYXAtMB8GA1UdIwQY
MBaAFEvjcvmNdmWGwRi3lrdC7ldSl8g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1OeS1ZMTJaWWJCR0xlV3QwTHVWMUtYeURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wZWMyZGQtYTk3MS00OWQ2LWI2OGEt
ZGU3YTk2N2JlODEwLzEvUy1OeS1ZMTJaWWJCR0xlV3QwTHVWMUtYeURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wZWMyZGQtYTk3MS00OWQ2LWI2OGEtZGU3YTk2N2JlODEw
LzEvUy1OeS1ZMTJaWWJCR0xlV3QwTHVWMUtYeURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdED8JBLR
JTX7eh3rJvKFKTebsCqwldIwmsErDfxt8svv0QI2/T3tE66QA3ubK1E3IuDmIRnP
OEPsTQczUkZ7Cl6gQ20hAdEmkt+Iqq55xF4v0q0n2XAneanB4ieDSzF+AKm9G+Wx
mCPl8UeCEnBKaqcFMfETE6TdhJO4IPTmyipQGl86Biv8d4/cgEraXh0FqlpOuge+
uJz/fyFSfJEZN1sJVAMwW8AZNAgjmnE5/huH65ErxmWwRB6WeMPu3sqTZtUXJh27
d2b9ZfcruqP3E58RWn9xWbpiDX/UQ1RHhYnC3nnY656pcH1O8iejdfdsKNzKS6tK
EzMQ6nI9oqbUdw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:05:44 2025 by rpki-client