Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: cN6nEtGE+HQP5aUjhCTLeSk/Lqrsv4CFZlCGBJ1AKx4=
Subject key identifier: A9:A6:01:C0:35:85:1A:C2:D8:7D:29:25:52:7D:C7:C3:C0:05:CB:48
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 019A73388F268FA8283083DEC0602328CB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 09ED
Signing time: Tue 11 Nov 2025 14:01:17 +0000
Manifest this update: Tue 11 Nov 2025 14:01:17 +0000
Manifest next update: Wed 12 Nov 2025 14:01:17 +0000
Files and hashes: 1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: 9+ZgHM4rZ26xeeu8a+tr6No2Mh7hGz0rEuJjJp9yhuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:8f:26:8f:a8:28:30:83:de:c0:60:23:28:cb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Nov 11 14:01:17 2025 GMT
Not After : Nov 12 14:01:17 2025 GMT
Subject: CN=a9a601c035851ac2d87d2925527dc7c3c005cb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f0:7b:55:d7:95:22:76:0f:b2:c7:6b:3c:fa:
33:44:1d:5e:e7:fc:a8:69:b3:50:7c:cc:3b:94:d4:
08:c7:6f:d6:fc:f9:ca:c5:c8:6d:46:7c:86:24:1a:
23:cd:c9:52:69:0b:dc:81:a1:96:35:ae:87:95:0e:
83:2b:60:5c:e7:b6:fb:11:79:2a:ef:60:e2:79:66:
46:84:8d:ad:13:ae:cf:3f:53:d6:07:d6:b7:f9:50:
98:db:73:3a:91:02:ac:fe:f2:08:3f:ad:13:35:95:
a7:87:30:be:02:6d:4c:e8:d0:49:93:5d:a0:69:b0:
20:51:b3:e7:8e:af:7a:59:59:2a:87:70:9a:c0:b3:
e7:b0:b3:ce:99:6a:69:13:89:7b:13:53:df:12:79:
22:2c:85:e9:de:38:06:59:a9:18:cd:63:a9:cd:b4:
64:0e:c5:fc:1f:2f:ab:49:4b:bc:8b:00:5f:63:e0:
be:4d:83:eb:23:3a:c6:de:89:1d:4b:5e:5a:f3:30:
db:dc:bb:7b:dc:b5:10:6a:a1:bd:e4:2b:3f:46:7c:
18:a0:d4:4a:ea:94:8f:28:07:e9:28:97:19:ed:f7:
77:e0:62:f1:e2:40:f1:5f:50:19:0b:c6:3a:ce:1e:
5c:0a:73:de:fb:07:6b:7a:8e:b1:ae:98:94:10:bb:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A6:01:C0:35:85:1A:C2:D8:7D:29:25:52:7D:C7:C3:C0:05:CB:48
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:47:8f:c9:d4:05:4c:70:08:29:af:68:2c:8a:a6:6e:1a:af:
da:7d:da:c0:16:fb:bb:a6:bb:fb:fd:d5:6a:d7:8c:65:95:b0:
5e:97:d9:dc:c9:08:87:f1:fc:42:d5:38:50:0c:2c:2d:5f:9b:
5f:ec:4c:0b:9f:ac:bc:85:9d:eb:33:d2:3e:c5:59:55:af:14:
31:68:1c:ce:80:a4:f0:8c:9b:b8:6d:a5:d2:fa:92:ca:15:e0:
35:68:a4:23:5e:aa:0e:42:72:3a:85:aa:0b:33:e4:0e:e3:30:
dd:36:d2:5c:c4:26:d4:ba:17:43:7c:d3:0a:b2:02:ca:33:bd:
01:ca:50:c3:fe:22:d8:6e:e2:4e:4e:4d:db:79:38:1d:7a:16:
ed:ba:ec:43:c8:4e:d1:c8:47:2e:28:fa:0f:da:ed:66:58:71:
02:33:af:bb:0c:02:c7:b4:66:a3:95:06:fc:04:f1:b0:bd:a3:
94:fc:06:22:6b:f9:26:e7:6e:cf:20:64:f8:80:c6:1b:ac:e7:
b4:fa:52:31:6a:a3:fe:70:3f:32:d3:6e:fa:88:1e:ff:b1:cb:
70:b9:25:6d:40:31:21:b5:95:41:c3:0c:65:f1:c1:a0:5c:75:
d0:3a:e4:2c:8d:a5:08:c6:18:ca:9e:37:36:0f:0d:15:89:76:
07:2f:53:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOI8mj6goMIPewGAjKMsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MjllMTBlMTZiYzc5YmZjNTZjNTM1NTdlNWIxYWE1NTlj
Yzc0MzUwHhcNMjUxMTExMTQwMTE3WhcNMjUxMTEyMTQwMTE3WjAzMTEwLwYDVQQD
EyhhOWE2MDFjMDM1ODUxYWMyZDg3ZDI5MjU1MjdkYzdjM2MwMDVjYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vB7VdeVInYPssdrPPozRB1e5/yo
abNQfMw7lNQIx2/W/PnKxchtRnyGJBojzclSaQvcgaGWNa6HlQ6DK2Bc57b7EXkq
72DieWZGhI2tE67PP1PWB9a3+VCY23M6kQKs/vIIP60TNZWnhzC+Am1M6NBJk12g
abAgUbPnjq96WVkqh3CawLPnsLPOmWppE4l7E1PfEnkiLIXp3jgGWakYzWOpzbRk
DsX8Hy+rSUu8iwBfY+C+TYPrIzrG3okdS15a8zDb3Lt73LUQaqG95Cs/RnwYoNRK
6pSPKAfpKJcZ7fd34GLx4kDxX1AZC8Y6zh5cCnPe+wdreo6xrpiUELsEfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmmAcA1hRrC2H0pJVJ9x8PABctIMB8GA1UdIwQY
MBaAFMgp4Q4WvHm/xWxTVX5bGqVZzHQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEt
Yjg0NTNlZWJiMjY3LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEtYjg0NTNlZWJiMjY3
LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEePydQF
THAIKa9oLIqmbhqv2n3awBb7u6a7+/3VateMZZWwXpfZ3MkIh/H8QtU4UAwsLV+b
X+xMC5+svIWd6zPSPsVZVa8UMWgczoCk8IybuG2l0vqSyhXgNWikI16qDkJyOoWq
CzPkDuMw3TbSXMQm1LoXQ3zTCrICyjO9AcpQw/4i2G7iTk5N23k4HXoW7brsQ8hO
0chHLij6D9rtZlhxAjOvuwwCx7Rmo5UG/ATxsL2jlPwGImv5JuduzyBk+IDGG6zn
tPpSMWqj/nA/MtNu+oge/7HLcLklbUAxIbWVQcMMZfHBoFx10DrkLI2lCMYYyp43
Ng8NFYl2By9TlQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:16 2025 by rpki-client