Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: t15pFEvMJyAT4UhIMQ8TTkD2y2c+ZXrhKQnm/x/pHsM=
Subject key identifier: 22:67:7A:1C:9D:5F:99:09:65:CE:07:B9:35:70:C9:20:69:B4:FE:70
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 019A28554C111C46E33E2BDE889294A523D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 090A
Signing time: Tue 28 Oct 2025 01:01:09 +0000
Manifest this update: Tue 28 Oct 2025 01:01:09 +0000
Manifest next update: Wed 29 Oct 2025 01:01:09 +0000
Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: wbvgfpuR7O16H8zW3mDJxoLlppemFzYwgiRnAkU3eS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:4c:11:1c:46:e3:3e:2b:de:88:92:94:a5:23:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Oct 28 01:01:09 2025 GMT
Not After : Oct 29 01:01:09 2025 GMT
Subject: CN=22677a1c9d5f990965ce07b93570c92069b4fe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:4f:0a:db:6c:18:a1:a4:91:e7:d0:a3:92:
d5:70:4a:ea:09:76:93:b6:93:ad:bb:c3:c8:2c:0c:
cc:81:30:02:a9:fd:14:73:42:e2:03:d7:58:86:8c:
30:89:c4:81:4d:d9:4e:68:72:b7:2d:9b:80:36:6e:
42:a7:c1:c7:55:f0:6d:55:0d:b9:b9:3b:c5:11:df:
33:ab:c6:40:81:e8:42:f2:8e:ce:cd:a4:18:fc:e0:
98:df:24:09:ae:d8:cc:76:84:09:fb:f8:ca:40:6e:
51:48:79:ce:0d:85:d8:6c:80:c6:e0:67:a6:42:32:
70:11:41:ba:10:f9:ae:94:50:bd:24:5a:10:8f:cc:
46:37:c3:bb:ae:70:f6:f2:f8:62:5b:fe:7b:c2:e0:
6b:55:c0:97:76:77:6a:2a:e5:b9:6e:56:8f:0e:22:
5d:5c:da:e3:c8:a5:55:ed:e2:b1:55:1e:84:03:48:
9b:21:24:32:76:8e:f7:d3:8c:5d:0a:d0:97:92:cc:
0f:e2:71:64:16:ca:86:b1:6c:34:c8:23:9f:2c:6f:
e6:bc:bc:d5:74:9e:1c:68:48:07:61:d0:5a:c8:7f:
d4:66:36:1d:1c:79:c6:59:f4:4e:c4:74:75:94:d6:
bc:af:cf:a7:fa:a8:54:f1:c2:78:a2:fc:1f:a0:f4:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:67:7A:1C:9D:5F:99:09:65:CE:07:B9:35:70:C9:20:69:B4:FE:70
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a7:0d:1a:78:a7:e2:ba:82:03:42:d7:73:ef:0d:89:91:f2:
fa:dd:cd:c3:41:1a:cc:fe:8d:05:5e:59:3c:e9:ce:b1:51:a9:
06:24:99:3b:a1:fa:30:c8:d1:bd:44:16:78:7c:0c:fe:e0:c9:
ba:d3:62:fd:6a:01:f5:1f:49:2c:76:e5:84:cd:c6:9c:97:bc:
26:93:88:a1:78:3b:de:36:8f:b0:97:f3:9e:bb:54:df:cf:c2:
1f:4b:73:f3:0b:6c:4a:d1:e2:57:40:a6:37:88:c5:15:02:8d:
2a:15:43:33:a2:ca:a7:5c:2d:0e:6f:8c:af:de:87:33:37:3f:
a7:7e:2f:38:94:a1:ef:48:8f:36:d6:8d:38:eb:c5:22:fc:d5:
e0:d4:c1:1e:5b:74:49:a7:77:67:c6:59:09:7a:33:a1:2a:89:
d2:b2:4b:67:9d:2d:79:b9:e5:53:1a:b9:f4:75:60:99:0f:d5:
8b:84:8c:e3:c8:d1:a0:a9:8d:d1:2a:44:9f:b6:1c:ec:bc:60:
85:2e:45:8e:71:e6:c3:a5:6a:c3:85:c4:65:96:8a:30:2d:96:
8f:1a:ef:bb:98:4b:05:23:fc:ad:5f:49:7f:0f:6f:1e:39:d9:
bd:db:f3:d4:88:73:97:df:82:45:b5:10:bd:4c:03:93:1d:4e:
71:e5:7b:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZooVUwRHEbjPiveiJKUpSPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDExYjcwNzg3OGJkNzdmYmZmMTVmMjc3NTJjMDhhNGFh
NTU2ZjQwHhcNMjUxMDI4MDEwMTA5WhcNMjUxMDI5MDEwMTA5WjAzMTEwLwYDVQQD
EygyMjY3N2ExYzlkNWY5OTA5NjVjZTA3YjkzNTcwYzkyMDY5YjRmZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzhPCttsGKGkkefQo5LVcErqCXaT
tpOtu8PILAzMgTACqf0Uc0LiA9dYhowwicSBTdlOaHK3LZuANm5Cp8HHVfBtVQ25
uTvFEd8zq8ZAgehC8o7OzaQY/OCY3yQJrtjMdoQJ+/jKQG5RSHnODYXYbIDG4Gem
QjJwEUG6EPmulFC9JFoQj8xGN8O7rnD28vhiW/57wuBrVcCXdndqKuW5blaPDiJd
XNrjyKVV7eKxVR6EA0ibISQydo7304xdCtCXkswP4nFkFsqGsWw0yCOfLG/mvLzV
dJ4caEgHYdBayH/UZjYdHHnGWfROxHR1lNa8r8+n+qhU8cJ4ovwfoPRmBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJnehydX5kJZc4HuTVwySBptP5wMB8GA1UdIwQY
MBaAFMnRG3B4eL13+/8V8ndSwIpKpVb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDkt
NWVhYmZiMWU1MTMwLzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDktNWVhYmZiMWU1MTMw
LzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6cNGnin
4rqCA0LXc+8NiZHy+t3Nw0EazP6NBV5ZPOnOsVGpBiSZO6H6MMjRvUQWeHwM/uDJ
utNi/WoB9R9JLHblhM3GnJe8JpOIoXg73jaPsJfznrtU38/CH0tz8wtsStHiV0Cm
N4jFFQKNKhVDM6LKp1wtDm+Mr96HMzc/p34vOJSh70iPNtaNOOvFIvzV4NTBHlt0
Sad3Z8ZZCXozoSqJ0rJLZ50tebnlUxq59HVgmQ/Vi4SM48jRoKmN0SpEn7Yc7Lxg
hS5FjnHmw6Vqw4XEZZaKMC2Wjxrvu5hLBSP8rV9Jfw9vHjnZvdvz1Ihzl9+CRbUQ
vUwDkx1OceV7oQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 10:50:55 2025 by rpki-client