Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
File: S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft (raw, json)
Hash identifier: TVEmFh+c9Tksx9PMtRUBoEHuUcxnvw1fmUYgrhScj/8=
Subject key identifier: 29:02:78:56:F5:5E:33:A8:7A:C0:C1:65:F9:03:B0:14:10:A8:96:42
Authority key identifier: 4B:E3:72:F9:8D:76:65:86:C1:18:B7:96:B7:42:EE:57:52:97:C8:39
Certificate issuer: /CN=4be372f98d766586c118b796b742ee575297c839
Certificate serial: 01992330FFEDC528953C039EDCD3FC675EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
Manifest number: 013B
Signing time: Sun 07 Sep 2025 08:00:37 +0000
Manifest this update: Sun 07 Sep 2025 08:00:37 +0000
Manifest next update: Mon 08 Sep 2025 08:00:37 +0000
Files and hashes: 1: Mto4d4IFbeBIsa6qUyocr2jWWK8.roa (hash: hLmX3yT44hxgxojTu+MlPrp+Zl/FamUEdVMXkmwsOEc=)
2: S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl (hash: HDR3HhcKAI0tsHDlrHc0jcu/XSax7iPkOBKuxm7ViLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ff:ed:c5:28:95:3c:03:9e:dc:d3:fc:67:5e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be372f98d766586c118b796b742ee575297c839
Validity
Not Before: Sep 7 08:00:37 2025 GMT
Not After : Sep 8 08:00:37 2025 GMT
Subject: CN=29027856f55e33a87ac0c165f903b01410a89642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:51:2a:ee:4e:57:2c:39:d9:88:f4:8f:5f:04:
46:58:da:89:da:93:40:16:fa:ef:43:4f:1f:ff:11:
0c:6e:3b:6f:07:ff:b0:da:62:2e:50:5f:63:2e:43:
30:9a:13:85:6c:4a:a3:61:22:58:da:7c:50:f1:b0:
dd:14:03:15:54:09:cf:c6:ab:b8:4e:25:76:16:ab:
c8:5d:57:0c:43:b3:3d:fc:1d:ce:ee:2a:62:63:07:
52:b7:64:a8:05:37:ac:41:9c:a5:a5:ce:3e:df:42:
3b:d3:e8:4c:ed:9b:55:d2:52:2c:0a:52:28:e7:a1:
f2:02:7d:f0:18:97:89:10:57:2d:1b:b4:95:7d:df:
05:16:2c:6e:64:4f:04:b2:fd:17:62:84:92:5e:6e:
ce:9e:50:23:86:94:88:fc:b0:42:38:88:3f:e0:f3:
56:d8:a0:f0:bd:db:e5:1c:87:4b:5e:90:af:41:08:
bd:b5:a0:6d:53:f1:f5:9a:f2:77:02:aa:59:c8:23:
4a:39:c3:7c:17:fd:1a:c9:8d:ae:7e:6f:ad:e0:58:
94:f1:1e:fe:32:0c:d8:3f:12:5d:83:38:39:9f:54:
63:03:f5:d0:b1:65:f3:fd:1f:e0:29:1e:82:bb:8b:
8e:db:54:3a:67:c1:1c:f6:12:e8:bb:e3:67:72:60:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:02:78:56:F5:5E:33:A8:7A:C0:C1:65:F9:03:B0:14:10:A8:96:42
X509v3 Authority Key Identifier:
keyid:4B:E3:72:F9:8D:76:65:86:C1:18:B7:96:B7:42:EE:57:52:97:C8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8c:b3:38:c2:11:8e:33:ce:4d:17:82:f8:57:32:71:79:39:
b6:0f:5c:94:54:4c:93:00:07:c9:14:21:5e:9e:62:e1:04:91:
f6:50:ad:03:6f:73:f7:86:e3:5a:ee:1c:c6:56:e7:34:e4:3e:
89:a9:15:42:d9:f3:41:54:7f:fd:5c:42:e9:39:f5:79:67:ab:
2c:68:d0:32:03:f8:9a:79:19:c9:bb:99:d6:2a:7b:46:fb:39:
cc:46:b4:e0:39:d9:c5:af:2c:70:2e:b3:b0:0a:8b:0f:29:02:
6d:96:2d:43:78:0a:f4:10:e8:4b:06:47:72:a9:25:70:71:3c:
bb:ec:cb:c8:65:c3:ac:5a:68:c5:08:6e:35:b0:5a:81:02:63:
af:a2:fb:11:50:a7:57:a8:c2:fa:d5:5e:bd:ef:91:ea:37:a6:
94:cb:43:9f:1e:e4:d0:b3:d1:79:3d:01:4a:2e:65:16:e5:4d:
0b:2e:96:6e:ec:c0:c8:f3:d5:5c:6a:34:38:b7:c8:92:28:4d:
ff:02:87:e4:9e:e0:07:42:d6:3d:60:fc:a0:2e:79:4e:98:ca:
87:65:d4:b0:de:72:ac:47:73:16:88:5a:a1:03:d3:d8:a9:a3:
d4:07:01:60:11:4c:a7:22:86:27:e2:e0:92:1d:03:7d:f8:e0:
9b:e8:1b:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMP/txSiVPAOe3NP8Z179MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTM3MmY5OGQ3NjY1ODZjMTE4Yjc5NmI3NDJlZTU3NTI5
N2M4MzkwHhcNMjUwOTA3MDgwMDM3WhcNMjUwOTA4MDgwMDM3WjAzMTEwLwYDVQQD
EygyOTAyNzg1NmY1NWUzM2E4N2FjMGMxNjVmOTAzYjAxNDEwYTg5NjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VEq7k5XLDnZiPSPXwRGWNqJ2pNA
FvrvQ08f/xEMbjtvB/+w2mIuUF9jLkMwmhOFbEqjYSJY2nxQ8bDdFAMVVAnPxqu4
TiV2FqvIXVcMQ7M9/B3O7ipiYwdSt2SoBTesQZylpc4+30I70+hM7ZtV0lIsClIo
56HyAn3wGJeJEFctG7SVfd8FFixuZE8Esv0XYoSSXm7OnlAjhpSI/LBCOIg/4PNW
2KDwvdvlHIdLXpCvQQi9taBtU/H1mvJ3AqpZyCNKOcN8F/0ayY2ufm+t4FiU8R7+
MgzYPxJdgzg5n1RjA/XQsWXz/R/gKR6Cu4uO21Q6Z8Ec9hLou+NncmDdQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkCeFb1XjOoesDBZfkDsBQQqJZCMB8GA1UdIwQY
MBaAFEvjcvmNdmWGwRi3lrdC7ldSl8g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1OeS1ZMTJaWWJCR0xlV3QwTHVWMUtYeURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wZWMyZGQtYTk3MS00OWQ2LWI2OGEt
ZGU3YTk2N2JlODEwLzEvUy1OeS1ZMTJaWWJCR0xlV3QwTHVWMUtYeURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wZWMyZGQtYTk3MS00OWQ2LWI2OGEtZGU3YTk2N2JlODEw
LzEvUy1OeS1ZMTJaWWJCR0xlV3QwTHVWMUtYeURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4yzOMIR
jjPOTReC+FcycXk5tg9clFRMkwAHyRQhXp5i4QSR9lCtA29z94bjWu4cxlbnNOQ+
iakVQtnzQVR//VxC6Tn1eWerLGjQMgP4mnkZybuZ1ip7Rvs5zEa04DnZxa8scC6z
sAqLDykCbZYtQ3gK9BDoSwZHcqklcHE8u+zLyGXDrFpoxQhuNbBagQJjr6L7EVCn
V6jC+tVeve+R6jemlMtDnx7k0LPReT0BSi5lFuVNCy6WbuzAyPPVXGo0OLfIkihN
/wKH5J7gB0LWPWD8oC55TpjKh2XUsN5yrEdzFohaoQPT2Kmj1AcBYBFMpyKGJ+Lg
kh0Dffjgm+gbBA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:29 2025 by rpki-client