Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: F/vaCmgeHA1IZcmlTD8TMeUlc1E3CYxsunb8rRLVn6k=
Subject key identifier: D3:8E:ED:70:F4:EA:74:BB:9E:2D:2C:87:4B:53:6C:33:02:26:B1:BA
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 019A71B8059B2B2D49B2D973D7617B159279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0CA3
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: ZptDz+82sE6TvhH3lO8aHpF7RqGEYaCZ7WVr/LRXDsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:05:9b:2b:2d:49:b2:d9:73:d7:61:7b:15:92:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=d38eed70f4ea74bb9e2d2c874b536c330226b1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:77:7e:bc:0a:9c:77:08:c2:79:4d:21:c4:
d1:0b:c0:7d:34:ca:25:36:52:2e:41:bc:41:d3:56:
48:4a:7e:b2:3b:97:55:62:9d:cb:bd:78:0d:7b:50:
66:ef:16:3e:ab:c3:75:59:86:b6:ba:53:9b:6a:ff:
47:96:73:fc:36:c6:89:16:ce:17:c1:fc:44:1e:0b:
b2:ee:7d:cc:a8:82:21:8c:90:7d:7c:3f:50:3a:e8:
1c:8d:83:cf:fa:a4:cb:86:ee:63:b1:e5:76:51:a2:
1c:64:1c:af:88:1b:bb:7e:b5:ec:01:a5:1d:a3:de:
32:1a:a4:b2:5c:05:80:f1:e1:fa:3a:32:de:7b:75:
2b:e1:67:21:7f:30:61:20:6c:5c:ee:4a:b0:e3:ea:
20:3d:4a:d8:be:6e:41:90:c0:a1:31:76:f2:c0:3c:
3b:af:87:94:1c:96:c2:9c:19:52:cf:ed:bf:4a:77:
ad:eb:4d:38:73:59:ca:24:8e:be:fd:71:5a:3b:aa:
31:f4:9a:0f:3f:e4:ac:fb:cf:6d:b2:40:79:3c:07:
dc:c9:cb:0f:48:ab:04:57:f3:22:e4:d7:fd:81:30:
95:8b:84:d5:e4:e5:9e:94:4b:ce:0e:a8:1b:e7:4f:
6a:2e:bb:24:a6:bc:3d:01:8b:b1:76:a4:25:07:39:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:ED:70:F4:EA:74:BB:9E:2D:2C:87:4B:53:6C:33:02:26:B1:BA
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:75:3d:f8:d6:27:58:8f:e8:e8:bc:52:9c:12:c6:37:72:25:
60:d5:f3:9d:27:d5:70:e9:1e:71:6d:8f:5f:64:d1:c6:33:ec:
db:64:d2:be:e5:76:4f:ae:17:4f:65:bb:35:99:2e:58:94:e3:
c4:16:18:b8:54:40:a1:cc:d6:95:99:d4:45:49:3e:f3:48:af:
fe:8a:ab:3c:e2:ce:75:7f:1b:ae:ac:69:f9:76:4d:b5:27:4b:
58:c1:a8:71:a8:36:15:f9:7c:ce:5c:f7:44:10:6c:43:69:1e:
30:95:10:0f:9f:1d:3c:c4:02:d1:07:96:cc:3f:bb:29:ab:88:
06:e1:0d:3c:e5:fe:ca:bb:3e:a7:4e:40:d8:8f:ab:cd:e3:a6:
14:62:ac:2a:e8:6f:93:fe:f2:4d:90:94:62:41:c4:88:c0:0f:
69:bd:c2:41:cf:ef:fc:9d:5e:25:3f:d7:51:03:c6:3f:e5:36:
51:ae:ef:ce:cc:56:c6:c0:93:21:5c:18:f8:17:4f:f9:f3:db:
38:79:ef:18:75:d6:ac:2b:44:4f:4c:d8:20:a4:ce:a5:e3:72:
0b:38:06:c8:7c:10:e1:c7:52:e2:66:e5:e3:2b:c0:88:22:01:
d2:c3:9a:18:a6:8a:18:6c:11:5a:e4:0e:a6:e1:a3:03:d9:65:
3f:01:0d:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuAWbKy1Jstlz12F7FZJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODIyMjYzYTg3MDdjNzZmM2RiM2I2YmU3MTIyMjY5Yzgy
N2FlNTUwHhcNMjUxMTExMDcwMTE2WhcNMjUxMTEyMDcwMTE2WjAzMTEwLwYDVQQD
EyhkMzhlZWQ3MGY0ZWE3NGJiOWUyZDJjODc0YjUzNmMzMzAyMjZiMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7l3frwKnHcIwnlNIcTRC8B9NMol
NlIuQbxB01ZISn6yO5dVYp3LvXgNe1Bm7xY+q8N1WYa2ulObav9HlnP8NsaJFs4X
wfxEHguy7n3MqIIhjJB9fD9QOugcjYPP+qTLhu5jseV2UaIcZByviBu7frXsAaUd
o94yGqSyXAWA8eH6OjLee3Ur4WchfzBhIGxc7kqw4+ogPUrYvm5BkMChMXbywDw7
r4eUHJbCnBlSz+2/Snet6004c1nKJI6+/XFaO6ox9JoPP+Ss+89tskB5PAfcycsP
SKsEV/Mi5Nf9gTCVi4TV5OWelEvODqgb509qLrskprw9AYuxdqQlBzkPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOO7XD06nS7ni0sh0tTbDMCJrG6MB8GA1UdIwQY
MBaAFNGCImOocHx289s7a+cSImnIJ65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjIt
NGE3OTA0MTA2ZTNiLzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjItNGE3OTA0MTA2ZTNi
LzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHU9+NYn
WI/o6LxSnBLGN3IlYNXznSfVcOkecW2PX2TRxjPs22TSvuV2T64XT2W7NZkuWJTj
xBYYuFRAoczWlZnURUk+80iv/oqrPOLOdX8brqxp+XZNtSdLWMGocag2Ffl8zlz3
RBBsQ2keMJUQD58dPMQC0QeWzD+7KauIBuENPOX+yrs+p05A2I+rzeOmFGKsKuhv
k/7yTZCUYkHEiMAPab3CQc/v/J1eJT/XUQPGP+U2Ua7vzsxWxsCTIVwY+BdP+fPb
OHnvGHXWrCtET0zYIKTOpeNyCzgGyHwQ4cdS4mbl4yvAiCIB0sOaGKaKGGwRWuQO
puGjA9llPwEN7A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:55 2025 by rpki-client