Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: ImQqRJiy/gIPCv7O/YVTIPCvgdhLeXlp1fhB4szKCmM=
Subject key identifier: 88:0B:68:4C:3D:45:93:D7:87:1D:D7:D3:31:93:C2:5E:4B:26:6B:05
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 0199FA69D55F1A88AEE7A93F68345134C755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 03:01:03 +0000
Manifest this update: Sun 19 Oct 2025 03:01:03 +0000
Manifest next update: Mon 20 Oct 2025 03:01:03 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: cFbmTNGKArk3UL/e7/++Bjyp8YAO82wBub0G0K66Mxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:d5:5f:1a:88:ae:e7:a9:3f:68:34:51:34:c7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Oct 19 03:01:03 2025 GMT
Not After : Oct 20 03:01:03 2025 GMT
Subject: CN=880b684c3d4593d7871dd7d33193c25e4b266b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:fa:b0:47:b3:cb:78:e5:9f:3b:05:b1:bc:
85:f7:16:1b:1b:42:c6:d8:28:98:12:ca:0f:f2:7e:
72:23:2a:ba:e4:df:7a:78:42:1b:94:0f:3d:be:d1:
a0:1b:f4:8f:f3:2f:e4:31:2b:b6:19:82:29:77:be:
25:16:c3:23:26:23:28:1d:2e:48:81:51:8b:db:42:
15:9c:82:fb:f7:be:fe:6b:a7:52:5b:21:be:0f:8b:
c6:1d:32:8b:c0:41:8e:c1:af:83:25:7d:03:ba:4e:
dc:00:11:cd:67:10:50:ad:34:bf:04:c1:9a:c1:5d:
dc:1b:7b:65:f8:c6:0f:ee:8d:ca:c6:66:49:63:9a:
9d:f1:12:63:a6:e7:1f:62:f4:3a:d8:75:75:5e:9f:
aa:f8:2c:d4:09:25:02:94:e2:ab:33:68:54:e1:5f:
30:a2:e0:9d:08:51:09:d5:4d:58:51:08:5b:79:0b:
bd:e8:82:de:a8:0c:2c:9e:e9:8b:ee:70:59:9f:51:
7d:de:0a:bf:10:f0:ac:9a:c1:b0:5a:f4:ae:01:2d:
0b:65:bc:c2:62:99:e0:be:2c:18:02:02:05:40:5a:
ae:28:2f:6d:d1:e8:7a:7a:6b:eb:49:25:64:a9:48:
82:eb:f7:a7:7f:cd:90:8a:5f:0d:eb:7d:6b:8e:4e:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0B:68:4C:3D:45:93:D7:87:1D:D7:D3:31:93:C2:5E:4B:26:6B:05
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6f:73:a1:08:62:74:33:f7:fc:32:f5:ae:df:14:64:25:61:
b4:7f:7c:39:eb:b8:7b:2a:60:1f:27:e5:ca:67:0c:01:32:b1:
39:b0:e8:5c:f7:43:73:e3:a0:3d:51:4c:7b:5c:c2:a5:2e:40:
84:54:bd:5e:a7:e3:3e:4e:63:ce:eb:3d:9b:45:46:5d:93:2c:
88:dc:05:66:7b:b0:5a:22:fb:6e:e5:c1:fc:35:6b:7e:38:89:
52:48:c5:fa:56:f0:54:aa:f3:2d:fc:28:1b:7a:e5:aa:92:b4:
8c:bd:50:41:cd:da:ee:95:33:1b:27:1f:96:23:f3:9c:9c:d3:
b6:50:75:90:67:7a:bd:2a:7d:d3:d0:ba:4c:ad:db:37:1a:e0:
df:57:2f:da:f5:db:da:a1:69:58:79:c6:28:88:e2:ac:f3:b7:
65:47:be:c9:b9:53:83:2f:a4:fe:5c:3e:e3:e2:47:a7:c1:a0:
1e:5c:4e:cd:e5:9d:69:fe:cc:2d:4c:c9:a6:95:c7:f3:76:eb:
c1:a3:9d:61:f1:20:c1:d2:bc:1c:1f:c6:5b:76:cf:4f:f6:2d:
25:51:2f:dd:71:f7:c9:0c:b1:56:3a:05:bc:3f:17:25:98:bc:
07:04:37:9b:57:15:1d:a5:e3:35:0b:05:d2:9e:25:bd:79:a4:
85:31:b6:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6adVfGoiu56k/aDRRNMdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw
MjhlOTEwHhcNMjUxMDE5MDMwMTAzWhcNMjUxMDIwMDMwMTAzWjAzMTEwLwYDVQQD
Eyg4ODBiNjg0YzNkNDU5M2Q3ODcxZGQ3ZDMzMTkzYzI1ZTRiMjY2YjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29z6sEezy3jlnzsFsbyF9xYbG0LG
2CiYEsoP8n5yIyq65N96eEIblA89vtGgG/SP8y/kMSu2GYIpd74lFsMjJiMoHS5I
gVGL20IVnIL7977+a6dSWyG+D4vGHTKLwEGOwa+DJX0Duk7cABHNZxBQrTS/BMGa
wV3cG3tl+MYP7o3KxmZJY5qd8RJjpucfYvQ62HV1Xp+q+CzUCSUClOKrM2hU4V8w
ouCdCFEJ1U1YUQhbeQu96ILeqAwsnumL7nBZn1F93gq/EPCsmsGwWvSuAS0LZbzC
YpngviwYAgIFQFquKC9t0eh6emvrSSVkqUiC6/enf82Qil8N631rjk5+nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgLaEw9RZPXhx3X0zGTwl5LJmsFMB8GA1UdIwQY
MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt
ODg1NGM4MmI1NDVkLzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk
LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq29zoQhi
dDP3/DL1rt8UZCVhtH98Oeu4eypgHyflymcMATKxObDoXPdDc+OgPVFMe1zCpS5A
hFS9XqfjPk5jzus9m0VGXZMsiNwFZnuwWiL7buXB/DVrfjiJUkjF+lbwVKrzLfwo
G3rlqpK0jL1QQc3a7pUzGycfliPznJzTtlB1kGd6vSp909C6TK3bNxrg31cv2vXb
2qFpWHnGKIjirPO3ZUe+yblTgy+k/lw+4+JHp8GgHlxOzeWdaf7MLUzJppXH83br
waOdYfEgwdK8HB/GW3bPT/YtJVEv3XH3yQyxVjoFvD8XJZi8BwQ3m1cVHaXjNQsF
0p4lvXmkhTG2QA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:59 2025 by rpki-client