Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
File: y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft (raw, json)
Hash identifier: DeNeqaTfBT1L69xJLyE7bwdhPVIow0gx+OQIMZT/wqY=
Subject key identifier: 2D:5C:C7:2F:85:0C:D0:F9:A7:FF:3D:C2:1C:2D:5D:29:EF:92:52:19
Authority key identifier: CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06
Certificate issuer: /CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06
Certificate serial: 019A7225F3F8B83F38D054CCC27E463A1859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
Manifest number: 0437
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl (hash: erEqD9wvQo9E39GuZXZDWLAumHvchiENdeUvVa+2fhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f3:f8:b8:3f:38:d0:54:cc:c2:7e:46:3a:18:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=2d5cc72f850cd0f9a7ff3dc21c2d5d29ef925219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:68:9b:a5:88:a3:24:b3:45:9d:2a:2f:0b:
eb:5a:e1:97:e4:47:20:a6:b7:17:9b:f9:5e:ac:96:
12:bf:8a:0b:80:24:c2:88:68:a4:4a:00:47:19:36:
26:e0:7e:cc:67:1f:56:5f:3d:1b:cf:fc:ec:36:77:
ac:0c:40:7f:2c:87:51:4c:da:fc:ab:f0:f7:4f:34:
ac:da:6e:34:6d:78:15:6d:b4:ff:12:48:b6:c6:3d:
f3:e8:04:0c:d3:5f:44:ff:e6:48:44:80:f4:5a:92:
38:6e:2d:ad:c2:1b:5f:e2:e0:e5:9f:9d:07:43:dc:
00:a3:3e:23:c5:ac:de:04:c1:cb:b5:be:63:bd:7d:
93:da:b5:04:3e:51:e9:10:a6:a1:9b:96:9c:86:d1:
ef:88:bc:0f:f2:f5:34:a3:c4:44:81:e8:b9:6a:0f:
68:97:4c:5e:74:d1:f3:f8:00:c3:8d:05:1e:4f:26:
8c:f8:6b:2c:00:cb:8d:e3:4c:00:01:a6:7e:93:6a:
27:97:b1:50:a3:f9:7b:c9:02:65:fd:1a:a4:5e:2b:
a2:9b:3d:0c:75:c2:d8:59:3d:98:bc:00:d7:a8:a6:
bb:bb:e0:07:a9:7c:4b:c3:f8:19:44:48:d9:07:20:
1b:5a:e3:31:c6:f1:9d:f3:d7:b1:fc:ec:f8:0b:57:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5C:C7:2F:85:0C:D0:F9:A7:FF:3D:C2:1C:2D:5D:29:EF:92:52:19
X509v3 Authority Key Identifier:
keyid:CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ff:f2:6a:7b:db:2d:2e:f7:8c:09:73:5e:ab:e3:35:94:74:
81:77:2b:0b:fd:32:46:46:1f:11:5e:87:7b:29:a5:f6:4c:8a:
21:d2:59:6b:1b:bb:d7:04:8b:e8:b0:a1:7d:e7:40:ba:0a:74:
06:b9:24:d3:a7:90:a1:9f:ba:f9:f9:62:47:40:96:b2:ef:77:
5c:fe:ad:14:a3:f0:af:44:14:be:44:4a:45:60:ed:ce:9c:dc:
cd:81:ad:32:f7:2c:20:ff:8c:25:20:23:d2:33:83:fc:3e:5f:
fa:77:33:f4:ed:26:a3:50:2e:b9:86:55:50:00:df:34:15:19:
f7:02:75:90:5e:89:d6:51:55:4c:56:32:0d:89:ac:3a:44:55:
73:f1:40:2d:62:fd:4a:87:68:4e:f8:34:ca:3e:7e:f5:b2:d9:
f4:b5:b7:5c:90:b9:ed:67:3e:6e:ad:41:db:2e:ed:64:c1:7f:
a1:59:e6:9c:dd:3d:ea:d8:e7:66:ed:b1:67:73:d5:70:85:61:
ae:e1:02:f3:64:f9:a9:90:d5:3d:16:39:cb:be:b9:63:cc:9e:
e6:6f:78:34:78:20:dd:27:3f:26:6f:a9:2c:42:de:01:1f:e7:
1c:e0:7b:aa:a6:91:e9:dc:03:86:43:44:20:25:92:e5:29:5f:
dc:42:18:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJfP4uD840FTMwn5GOhhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOWExY2I4MGZiNjM3MzJlNTMwMDQ3YTFlYzU1MjlmOGM4
YjFhMDYwHhcNMjUxMTExMDkwMTIxWhcNMjUxMTEyMDkwMTIxWjAzMTEwLwYDVQQD
EygyZDVjYzcyZjg1MGNkMGY5YTdmZjNkYzIxYzJkNWQyOWVmOTI1MjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP5om6WIoySzRZ0qLwvrWuGX5Ecg
prcXm/lerJYSv4oLgCTCiGikSgBHGTYm4H7MZx9WXz0bz/zsNnesDEB/LIdRTNr8
q/D3TzSs2m40bXgVbbT/Eki2xj3z6AQM019E/+ZIRID0WpI4bi2twhtf4uDln50H
Q9wAoz4jxazeBMHLtb5jvX2T2rUEPlHpEKahm5achtHviLwP8vU0o8REgei5ag9o
l0xedNHz+ADDjQUeTyaM+GssAMuN40wAAaZ+k2onl7FQo/l7yQJl/RqkXiuimz0M
dcLYWT2YvADXqKa7u+AHqXxLw/gZREjZByAbWuMxxvGd89ex/Oz4C1f6WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1cxy+FDND5p/89whwtXSnvklIZMB8GA1UdIwQY
MBaAFMuaHLgPtjcy5TAEeh7FUp+MixoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVvY3VBLTJOekxsTUFSNkhzVlNuNHlMR2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNWJiNDMtNGFlOC00YjZkLWI0NmMt
MTEzZWRlM2FmZjc5LzEveTVvY3VBLTJOekxsTUFSNkhzVlNuNHlMR2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wNWJiNDMtNGFlOC00YjZkLWI0NmMtMTEzZWRlM2FmZjc5
LzEveTVvY3VBLTJOekxsTUFSNkhzVlNuNHlMR2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsv/yanvb
LS73jAlzXqvjNZR0gXcrC/0yRkYfEV6Heyml9kyKIdJZaxu71wSL6LChfedAugp0
Brkk06eQoZ+6+fliR0CWsu93XP6tFKPwr0QUvkRKRWDtzpzczYGtMvcsIP+MJSAj
0jOD/D5f+ncz9O0mo1AuuYZVUADfNBUZ9wJ1kF6J1lFVTFYyDYmsOkRVc/FALWL9
SodoTvg0yj5+9bLZ9LW3XJC57Wc+bq1B2y7tZMF/oVnmnN096tjnZu2xZ3PVcIVh
ruEC82T5qZDVPRY5y765Y8ye5m94NHgg3Sc/Jm+pLELeAR/nHOB7qqaR6dwDhkNE
ICWS5Slf3EIY4w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:55 2025 by rpki-client