Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: VpUNdjDxh+pCcH0DOWzBSEJHHB1GqkxIzJS0MzEXRCs=
Subject key identifier: D4:C7:D7:04:4C:E2:6E:18:AB:CE:49:67:54:AB:BD:36:93:CC:5A:8C
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019A5C0BA566119191299AF3A06F146E8056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 07BF
Signing time: Fri 07 Nov 2025 02:00:58 +0000
Manifest this update: Fri 07 Nov 2025 02:00:58 +0000
Manifest next update: Sat 08 Nov 2025 02:00:58 +0000
Files and hashes: 1: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (hash: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=)
2: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (hash: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: VVHSzzUT8A58ip0XXKaFrMhsE1IfYGqmFiuKxr5UxpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:0b:a5:66:11:91:91:29:9a:f3:a0:6f:14:6e:80:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Nov 7 02:00:58 2025 GMT
Not After : Nov 8 02:00:58 2025 GMT
Subject: CN=d4c7d7044ce26e18abce496754abbd3693cc5a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:10:1c:cc:6b:fb:9d:a3:20:ce:ee:35:35:
1b:1d:23:c6:66:8d:e2:87:d0:e7:44:61:f7:e7:c5:
17:73:21:b1:16:b5:8c:eb:af:df:4b:48:ca:ee:80:
90:08:4b:c3:f3:1c:0f:ba:89:2b:79:b3:36:5b:e9:
be:89:8c:14:b8:38:f3:08:d3:35:c0:b8:9f:2c:78:
73:e4:04:89:91:3f:46:c8:45:6a:1e:6e:64:06:28:
98:e3:af:bd:e0:c0:14:b8:d1:53:63:f2:2c:37:71:
b7:9f:77:03:4e:0d:ef:ba:00:19:4d:4e:bb:b7:07:
82:67:0d:73:08:00:6e:e9:de:22:3d:37:03:81:1c:
2a:85:0f:3e:4b:06:0b:7e:99:5e:ea:f7:97:d9:f2:
68:f8:af:a6:5b:99:56:7a:b7:bf:4d:b9:83:0d:9a:
5a:5d:06:43:5f:e5:b7:b7:c1:b0:79:6e:fa:16:90:
39:1e:01:53:d8:00:30:7d:5a:54:e6:54:f8:1d:4b:
8f:82:12:70:b0:69:90:1d:d3:30:69:52:b9:fb:a6:
ce:fd:63:6f:62:2d:99:d8:81:2d:bf:ef:f8:03:88:
13:71:2c:f4:8e:74:a3:66:65:34:31:11:f4:64:c7:
09:76:54:ad:6c:7a:2f:1d:77:b7:ab:40:bf:b0:b7:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C7:D7:04:4C:E2:6E:18:AB:CE:49:67:54:AB:BD:36:93:CC:5A:8C
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f1:92:0a:e8:de:22:9d:2d:bf:33:4e:d9:56:0b:b2:e3:44:
d1:5d:02:7b:f6:bb:b1:dc:61:c7:ed:20:73:a1:27:71:16:55:
f4:af:02:b7:dc:ee:f1:f0:87:8b:61:6f:ef:8d:9f:5a:85:85:
49:43:23:a1:c0:34:4f:33:04:a2:3c:8f:7b:db:1a:f0:a7:34:
d5:79:b3:87:49:df:17:a7:c1:84:bf:a7:ed:14:6e:dd:7e:60:
d7:32:de:a8:c3:7e:26:b9:da:d1:c5:fd:7a:c0:ae:dc:2b:c0:
7f:22:19:97:79:6a:27:ae:ae:2b:28:ce:63:47:97:10:36:f6:
96:6b:94:9f:06:90:d3:d3:6f:0a:6a:70:8c:9a:f7:fc:9c:a5:
4f:97:3f:95:52:44:83:b6:52:f4:ec:09:88:a5:f2:c2:27:48:
e7:8f:8d:70:31:35:22:95:58:56:3a:83:90:45:40:03:28:ca:
ee:d2:e9:91:6d:d4:c7:d5:f0:39:a7:df:6d:a9:0a:6f:6c:41:
0f:12:56:d6:e9:39:db:2b:14:0f:bd:1d:16:68:e8:b5:76:b4:
a3:56:86:f7:7e:53:67:b4:d4:6e:bd:b9:7d:30:73:fe:43:1a:
7f:8e:3b:d3:0b:a6:31:a1:86:72:e3:da:bf:6c:91:61:bd:1d:
1c:49:9e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpcC6VmEZGRKZrzoG8UboBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTQ0Yzc3ODE1MmYwZmQ4NWU1ZGNiNDQ5MDRmMDAxZTU5
ODc0MjQwHhcNMjUxMTA3MDIwMDU4WhcNMjUxMTA4MDIwMDU4WjAzMTEwLwYDVQQD
EyhkNGM3ZDcwNDRjZTI2ZTE4YWJjZTQ5Njc1NGFiYmQzNjkzY2M1YThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufIQHMxr+52jIM7uNTUbHSPGZo3i
h9DnRGH358UXcyGxFrWM66/fS0jK7oCQCEvD8xwPuokrebM2W+m+iYwUuDjzCNM1
wLifLHhz5ASJkT9GyEVqHm5kBiiY46+94MAUuNFTY/IsN3G3n3cDTg3vugAZTU67
tweCZw1zCABu6d4iPTcDgRwqhQ8+SwYLfple6veX2fJo+K+mW5lWere/TbmDDZpa
XQZDX+W3t8GweW76FpA5HgFT2AAwfVpU5lT4HUuPghJwsGmQHdMwaVK5+6bO/WNv
Yi2Z2IEtv+/4A4gTcSz0jnSjZmU0MRH0ZMcJdlStbHovHXe3q0C/sLemmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTH1wRM4m4Yq85JZ1SrvTaTzFqMMB8GA1UdIwQY
MBaAFMhUTHeBUvD9heXctEkE8AHlmHQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMt
ZDk0MDA1MGU1NmNhLzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMtZDk0MDA1MGU1NmNh
LzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfGSCuje
Ip0tvzNO2VYLsuNE0V0Ce/a7sdxhx+0gc6EncRZV9K8Ct9zu8fCHi2Fv742fWoWF
SUMjocA0TzMEojyPe9sa8Kc01Xmzh0nfF6fBhL+n7RRu3X5g1zLeqMN+Jrna0cX9
esCu3CvAfyIZl3lqJ66uKyjOY0eXEDb2lmuUnwaQ09NvCmpwjJr3/JylT5c/lVJE
g7ZS9OwJiKXywidI54+NcDE1IpVYVjqDkEVAAyjK7tLpkW3Ux9XwOaffbakKb2xB
DxJW1uk52ysUD70dFmjotXa0o1aG935TZ7TUbr25fTBz/kMaf4470wumMaGGcuPa
v2yRYb0dHEmeeA==
-----END CERTIFICATE-----
Generated at Fri Nov 7 08:04:16 2025 by rpki-client