Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File: A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier: BVCUx9bTY/JLitooYcq82BDch4BRlMWMrjGKsBaNNaA=
Subject key identifier: 20:A8:95:1D:00:A3:DE:DF:13:50:8F:F8:50:42:EB:74:B0:31:F0:9F
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 019A729356B8B1173BE59DA052F0F4ADC93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: 0bZLxyLvsuTXELVQC+FUpeU2vHiQlp29aCSLqo3ieF0=)
2: KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa (hash: 3gljbk7M1fRChLX3eXWg8UNcaSKjRzvlcThXCcbYJEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:56:b8:b1:17:3b:e5:9d:a0:52:f0:f4:ad:c9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=20a8951d00a3dedf13508ff85042eb74b031f09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:e4:c5:ce:25:04:cc:ca:66:ad:41:00:7d:
6b:8e:ff:c1:9b:c2:44:8f:48:44:dc:0f:37:6d:3f:
8a:72:ac:3a:f2:5b:88:1d:ba:26:6f:e0:26:7c:d1:
91:bb:38:0f:bc:77:b8:f4:9c:e0:66:36:72:ce:76:
60:fd:3c:04:e2:9e:32:e2:f2:93:28:9c:c1:df:a7:
7f:f1:0b:fe:39:7d:aa:c5:25:9e:36:66:cf:2f:1f:
d8:d6:af:a8:43:bb:f7:b7:01:80:2c:0f:48:0c:1c:
7d:d9:8f:12:1d:aa:b7:1a:fa:55:1b:dd:63:f4:b6:
19:c8:b0:d5:71:f8:a6:a2:72:db:fe:29:a1:74:e5:
a9:c9:81:9a:0b:90:b5:ab:f0:0a:8d:1b:73:d9:17:
82:16:15:4d:45:47:a0:99:ac:3c:be:8c:9b:7f:e9:
f9:6d:93:21:ef:92:ee:39:13:93:46:37:46:2d:7d:
58:1b:8f:f6:89:80:e3:b8:99:cd:d3:b7:01:83:07:
99:9d:66:cd:80:a6:5e:f1:a3:36:6a:0c:16:e3:66:
0d:18:78:21:22:d5:44:ad:e1:11:51:57:55:3a:65:
4c:15:91:0b:b3:d8:ec:0c:3a:07:af:9c:77:16:39:
37:61:d9:69:53:16:89:e1:06:8f:af:c3:0b:ec:3f:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:95:1D:00:A3:DE:DF:13:50:8F:F8:50:42:EB:74:B0:31:F0:9F
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cc:28:4a:35:9c:6f:30:09:3b:bd:cb:c2:93:96:01:30:1c:
b4:b6:e9:ab:5c:8a:7e:ab:89:58:6a:d7:64:d5:72:b0:bc:fd:
b0:92:3e:37:fc:b1:bc:82:06:8b:8d:dd:6c:05:34:8b:12:09:
fd:71:ff:10:ea:73:7f:9f:85:1b:48:7a:fd:82:b6:0b:45:41:
0c:40:8b:17:25:e7:dc:a1:54:d5:af:34:be:e7:8b:f1:c6:28:
54:78:1f:12:7b:5b:37:99:63:f4:0f:1e:8f:a0:6d:75:4c:b5:
06:9d:9e:81:57:1f:25:18:bc:08:b8:78:a4:59:28:fe:8b:39:
2f:54:b9:90:2d:0f:c4:29:19:3d:36:18:ac:f7:e7:b8:8d:b3:
6b:92:7f:9a:1c:58:56:89:73:59:f2:ac:e7:be:c9:58:a2:f9:
72:3b:fa:38:86:f9:89:96:96:90:d4:29:d6:39:1a:5d:20:f9:
3d:db:11:9c:ae:28:30:d8:e9:f5:c6:9e:2b:11:3d:80:e6:66:
34:9c:14:d4:ae:68:50:02:e8:fb:0e:51:a1:cd:47:21:5e:da:
d7:f0:ca:23:d9:75:88:3d:31:1a:4f:1e:1a:e5:76:e6:52:c8:
cd:55:69:77:3f:83:ef:5b:18:15:18:d0:b5:03:d5:6f:9d:f6:
a3:7a:fc:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk1a4sRc75Z2gUvD0rck8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWNhNzkzMjQ1NzUyYjY3YTg4MWY3OGUzNWFiOGZmNDlk
ZDNlYzEwHhcNMjUxMTExMTEwMDQ5WhcNMjUxMTEyMTEwMDQ5WjAzMTEwLwYDVQQD
EygyMGE4OTUxZDAwYTNkZWRmMTM1MDhmZjg1MDQyZWI3NGIwMzFmMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0jkxc4lBMzKZq1BAH1rjv/Bm8JE
j0hE3A83bT+Kcqw68luIHbomb+AmfNGRuzgPvHe49JzgZjZyznZg/TwE4p4y4vKT
KJzB36d/8Qv+OX2qxSWeNmbPLx/Y1q+oQ7v3twGALA9IDBx92Y8SHaq3GvpVG91j
9LYZyLDVcfimonLb/imhdOWpyYGaC5C1q/AKjRtz2ReCFhVNRUegmaw8voybf+n5
bZMh75LuOROTRjdGLX1YG4/2iYDjuJnN07cBgweZnWbNgKZe8aM2agwW42YNGHgh
ItVEreERUVdVOmVMFZELs9jsDDoHr5x3Fjk3YdlpUxaJ4QaPr8ML7D/GNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCColR0Ao97fE1CP+FBC63SwMfCfMB8GA1UdIwQY
MBaAFAPsp5MkV1K2eogfeONauP9J3T7BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wM2JlYjQtMjQwYi00Y2JmLWFhM2Yt
OWZkYzEwNmM4MTUzLzEvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wM2JlYjQtMjQwYi00Y2JmLWFhM2YtOWZkYzEwNmM4MTUz
LzEvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMwoSjWc
bzAJO73LwpOWATActLbpq1yKfquJWGrXZNVysLz9sJI+N/yxvIIGi43dbAU0ixIJ
/XH/EOpzf5+FG0h6/YK2C0VBDECLFyXn3KFU1a80vueL8cYoVHgfEntbN5lj9A8e
j6BtdUy1Bp2egVcfJRi8CLh4pFko/os5L1S5kC0PxCkZPTYYrPfnuI2za5J/mhxY
VolzWfKs577JWKL5cjv6OIb5iZaWkNQp1jkaXSD5PdsRnK4oMNjp9caeKxE9gOZm
NJwU1K5oUALo+w5Roc1HIV7a1/DKI9l1iD0xGk8eGuV25lLIzVVpdz+D71sYFRjQ
tQPVb532o3r8ng==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:04 2025 by rpki-client