Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier: tmVtMKn/sOJ2FyJOu+GktM6qIjy6lt3hr4SCohtalKU=
Subject key identifier: E4:7E:45:15:9C:49:0B:68:DC:2F:50:84:DE:07:4E:2F:BB:44:2C:80
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 01992E59BBA3EDE84D0D54D087A0852176B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number: 06F3
Signing time: Tue 09 Sep 2025 12:00:56 +0000
Manifest this update: Tue 09 Sep 2025 12:00:56 +0000
Manifest next update: Wed 10 Sep 2025 12:00:56 +0000
Files and hashes: 1: yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa (hash: /0wnIB5zXFdR7lKXtpV7vbYLWJWmyCiIhUGInpg7xqg=)
2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: 2+HpFQT9LegNugRerOibto2uXJP3lMeo2nJ+UUvztL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:59:bb:a3:ed:e8:4d:0d:54:d0:87:a0:85:21:76:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: Sep 9 12:00:56 2025 GMT
Not After : Sep 10 12:00:56 2025 GMT
Subject: CN=e47e45159c490b68dc2f5084de074e2fbb442c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:8f:ac:f7:bc:94:1e:9d:38:cb:f1:fe:fa:
a2:40:f7:98:cb:3f:f9:11:67:b5:9d:d1:7c:88:16:
46:5c:da:25:91:58:57:fd:be:1c:51:9e:cb:26:8d:
ea:14:87:72:df:35:4d:31:27:3d:ee:c1:fd:6e:87:
c3:4b:4a:c7:80:dc:ef:8c:89:62:0f:f7:86:36:5c:
a6:e6:ea:26:da:91:6c:5b:df:14:d7:19:23:1f:9f:
33:f6:f8:c7:44:2c:2b:bf:dd:4b:9c:df:fc:05:98:
fa:d4:a0:02:49:bd:a1:0a:8c:b6:4e:9b:96:00:c4:
3d:b8:65:6b:8a:cd:7f:8e:e9:5d:89:df:6f:70:76:
8a:12:7f:d2:a0:e4:30:d5:49:1c:50:55:c9:1f:7f:
0b:74:d3:45:2e:39:e9:72:4e:26:5e:e2:bb:26:8d:
2a:0e:8d:c7:84:29:95:f0:89:6c:08:b3:a9:2c:23:
81:cf:27:bd:f1:d9:8e:ce:c2:8e:f3:ae:68:a0:a7:
9b:a6:20:b6:c0:ee:d6:e6:14:9a:6d:7c:46:49:70:
92:f4:ab:62:25:75:ec:ca:13:c3:05:8a:d2:35:0c:
c0:60:46:aa:61:df:3d:af:a1:7b:4d:44:32:8b:9f:
bd:c7:9e:6a:0f:16:80:c5:bb:e5:c7:26:40:8d:73:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7E:45:15:9C:49:0B:68:DC:2F:50:84:DE:07:4E:2F:BB:44:2C:80
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:41:0c:42:ea:26:4c:8c:b5:f0:33:66:bb:bd:97:be:3d:a2:
ed:9a:71:3a:10:9c:92:b7:f2:7f:f4:27:cb:d2:7d:01:98:79:
44:56:29:7d:73:e5:eb:b4:c0:00:f6:1a:00:73:f7:03:ee:68:
f8:54:eb:dd:c0:30:93:de:1b:f9:85:e8:ea:f8:8b:01:e5:ff:
a8:db:16:e6:2d:4d:01:6d:2b:dc:cc:45:f8:25:cd:31:12:75:
b5:b0:0f:84:5e:62:14:30:c2:b4:b4:4d:bc:f9:07:02:66:4b:
62:aa:e8:8d:e4:a1:00:21:f3:1e:97:41:e3:72:5d:d2:4f:be:
b1:51:30:21:8b:75:8e:8f:40:af:49:8b:03:24:92:80:d8:14:
f3:6f:eb:e8:ec:c6:7e:44:0a:5b:35:c9:32:60:36:c1:6b:ce:
59:77:e6:c2:1b:48:b8:85:56:80:83:2b:19:ad:bc:45:63:c4:
bc:bd:6f:d9:aa:0e:f7:85:ba:dd:66:28:52:1a:91:e4:0d:9a:
ea:97:81:b1:dc:54:13:ef:e6:36:82:c3:c4:71:bf:b9:47:a2:
bb:ae:14:d0:d6:0b:24:c7:6b:90:df:97:f7:06:8f:e1:49:7f:
97:86:a0:96:6e:91:c5:db:6f:c9:3c:a6:8a:b4:eb:a2:11:2f:
e1:27:0d:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkuWbuj7ehNDVTQh6CFIXa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NzY1NTY5MDIxZThkYjQ3OWNiZDY0YTVhMGIyYmFmYmUy
YThlYWMwHhcNMjUwOTA5MTIwMDU2WhcNMjUwOTEwMTIwMDU2WjAzMTEwLwYDVQQD
EyhlNDdlNDUxNTljNDkwYjY4ZGMyZjUwODRkZTA3NGUyZmJiNDQyYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF2PrPe8lB6dOMvx/vqiQPeYyz/5
EWe1ndF8iBZGXNolkVhX/b4cUZ7LJo3qFIdy3zVNMSc97sH9bofDS0rHgNzvjIli
D/eGNlym5uom2pFsW98U1xkjH58z9vjHRCwrv91LnN/8BZj61KACSb2hCoy2TpuW
AMQ9uGVris1/juldid9vcHaKEn/SoOQw1UkcUFXJH38LdNNFLjnpck4mXuK7Jo0q
Do3HhCmV8IlsCLOpLCOBzye98dmOzsKO865ooKebpiC2wO7W5hSabXxGSXCS9Kti
JXXsyhPDBYrSNQzAYEaqYd89r6F7TUQyi5+9x55qDxaAxbvlxyZAjXOWMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR+RRWcSQto3C9QhN4HTi+7RCyAMB8GA1UdIwQY
MBaAFMl2VWkCHo20ecvWSloLK6++Ko6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDct
ZjQ4NGRhOGU2N2MzLzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDctZjQ4NGRhOGU2N2Mz
LzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkEMQuom
TIy18DNmu72Xvj2i7ZpxOhCckrfyf/Qny9J9AZh5RFYpfXPl67TAAPYaAHP3A+5o
+FTr3cAwk94b+YXo6viLAeX/qNsW5i1NAW0r3MxF+CXNMRJ1tbAPhF5iFDDCtLRN
vPkHAmZLYqrojeShACHzHpdB43Jd0k++sVEwIYt1jo9Ar0mLAySSgNgU82/r6OzG
fkQKWzXJMmA2wWvOWXfmwhtIuIVWgIMrGa28RWPEvL1v2aoO94W63WYoUhqR5A2a
6peBsdxUE+/mNoLDxHG/uUeiu64U0NYLJMdrkN+X9waP4Ul/l4aglm6RxdtvyTym
irTrohEv4ScN4A==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:59:55 2025 by rpki-client