Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: zFvJQlLVsP0qgLsVnzNX4PGubon8lWSUfoiAcFo9z9c=
Subject key identifier: 55:14:CC:CD:FA:A8:49:97:C7:EB:AE:24:FF:6C:B6:02:04:90:EC:F2
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 0199288E6B2F3C46220252BBC44BBF11F8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 07CC
Signing time: Mon 08 Sep 2025 09:00:46 +0000
Manifest this update: Mon 08 Sep 2025 09:00:46 +0000
Manifest next update: Tue 09 Sep 2025 09:00:46 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: 9uU67EyWZLBxDkeXXWNJq2psX2uFRVHPwFVJKJy29bw=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8e:6b:2f:3c:46:22:02:52:bb:c4:4b:bf:11:f8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Sep 8 09:00:46 2025 GMT
Not After : Sep 9 09:00:46 2025 GMT
Subject: CN=5514cccdfaa84997c7ebae24ff6cb6020490ecf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2b:59:ac:ab:14:72:2b:75:6d:6e:9c:23:73:
23:d8:af:94:3b:08:90:36:6e:cd:59:ec:7b:34:c0:
1e:17:44:d6:cd:08:fe:a1:29:aa:d7:70:25:b6:f8:
d8:13:c3:90:82:5f:41:8a:66:70:94:21:70:0f:0c:
a3:17:5c:63:82:ef:a4:ef:dd:b1:bf:44:63:32:15:
80:3e:60:da:bd:25:65:aa:45:68:bf:d4:dc:45:7d:
02:1a:20:26:70:3f:a8:b9:bf:40:af:79:65:f4:a9:
00:b5:0b:5f:85:1d:8a:59:a9:b7:a0:99:be:f6:1c:
64:49:28:e1:da:be:60:f5:1f:2b:af:2f:0f:aa:13:
31:70:91:35:1a:30:b8:b8:e0:46:52:a1:6d:51:96:
f7:d0:85:cb:cc:e6:22:d1:f1:b5:8c:c6:19:86:cd:
18:b6:c7:d8:84:58:43:4b:24:1d:8f:e9:2f:58:6e:
7f:77:d7:e1:5e:c1:4a:77:35:12:36:c6:77:c0:4d:
1f:f1:82:a4:da:a7:fb:1e:d7:dd:1c:62:75:41:35:
25:24:49:cb:68:31:29:22:a9:95:0b:d8:0f:39:e4:
de:3c:75:a8:01:1a:b4:46:09:2f:34:e5:73:1d:12:
a9:5c:49:f9:70:7d:22:a9:9f:95:c3:a2:33:c7:fa:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:14:CC:CD:FA:A8:49:97:C7:EB:AE:24:FF:6C:B6:02:04:90:EC:F2
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:aa:87:63:33:56:b9:15:46:33:90:27:48:28:2c:31:57:
72:a6:f2:54:e2:b9:2a:44:40:c4:2c:89:7d:1f:22:6e:5a:e9:
b4:04:13:af:09:c9:b4:b5:50:43:0b:e8:29:c2:05:00:73:7a:
05:3c:31:ff:1f:ed:62:e0:c3:ee:5b:ab:a7:60:ef:6f:53:d3:
64:5c:47:bc:74:e3:65:87:06:2f:7f:8e:87:7f:58:5e:70:2f:
bd:9e:6c:64:be:9c:ab:ed:a7:b2:05:cb:2e:17:ee:43:b9:a3:
83:0a:a4:ba:cc:5b:a8:3c:f3:d2:24:85:f2:25:d9:8f:08:e5:
5b:be:72:64:ab:44:26:97:66:6b:62:8e:93:bf:c4:6a:12:6a:
b6:18:27:13:6f:4e:0c:0d:42:84:69:8f:e9:f2:27:3e:90:b0:
f5:e7:b1:6b:55:b0:ae:e3:75:92:2a:79:d7:64:83:97:d0:a5:
38:31:e7:45:a3:b7:01:fe:ec:34:f3:36:8c:59:50:33:88:b2:
fd:ba:59:4e:bd:fc:3d:1f:23:f3:3e:ac:82:66:22:1d:75:f4:
84:06:cf:5d:6c:7b:2b:fb:2d:44:45:d6:76:b5:24:26:3b:ce:
d0:20:73:e7:ee:22:14:70:33:e4:f6:58:cb:f2:21:9b:c7:d5:
8f:4a:03:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkojmsvPEYiAlK7xEu/EfjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OGNjNTJhMDcwN2NjMzQwYWM5YzdmNmU5MDI4YjY0Yjcw
MjY3YmMwHhcNMjUwOTA4MDkwMDQ2WhcNMjUwOTA5MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg1NTE0Y2NjZGZhYTg0OTk3YzdlYmFlMjRmZjZjYjYwMjA0OTBlY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9StZrKsUcit1bW6cI3Mj2K+UOwiQ
Nm7NWex7NMAeF0TWzQj+oSmq13AltvjYE8OQgl9BimZwlCFwDwyjF1xjgu+k792x
v0RjMhWAPmDavSVlqkVov9TcRX0CGiAmcD+oub9Ar3ll9KkAtQtfhR2KWam3oJm+
9hxkSSjh2r5g9R8rry8PqhMxcJE1GjC4uOBGUqFtUZb30IXLzOYi0fG1jMYZhs0Y
tsfYhFhDSyQdj+kvWG5/d9fhXsFKdzUSNsZ3wE0f8YKk2qf7HtfdHGJ1QTUlJEnL
aDEpIqmVC9gPOeTePHWoARq0RgkvNOVzHRKpXEn5cH0iqZ+Vw6Izx/qUjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUUzM36qEmXx+uuJP9stgIEkOzyMB8GA1UdIwQY
MBaAFEWMxSoHB8w0CsnH9ukCi2S3Ame8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81YTdkMmYtNTE2OC00NzIwLThjZTAt
NzA0MTQ5NjE5YzQ2LzEvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81YTdkMmYtNTE2OC00NzIwLThjZTAtNzA0MTQ5NjE5YzQ2
LzEvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqCqh2Mz
VrkVRjOQJ0goLDFXcqbyVOK5KkRAxCyJfR8iblrptAQTrwnJtLVQQwvoKcIFAHN6
BTwx/x/tYuDD7lurp2Dvb1PTZFxHvHTjZYcGL3+Oh39YXnAvvZ5sZL6cq+2nsgXL
LhfuQ7mjgwqkusxbqDzz0iSF8iXZjwjlW75yZKtEJpdma2KOk7/EahJqthgnE29O
DA1ChGmP6fInPpCw9eexa1WwruN1kip512SDl9ClODHnRaO3Af7sNPM2jFlQM4iy
/bpZTr38PR8j8z6sgmYiHXX0hAbPXWx7K/stREXWdrUkJjvO0CBz5+4iFHAz5PZY
y/Ihm8fVj0oDVg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:25:17 2025 by rpki-client