Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: dT0tjDU8sYR35BSw/pxIjKmlhTRHvMx+408ssZEn3Lg=
Subject key identifier: A0:AA:A4:1E:1C:BD:12:C2:9D:5B:42:6E:16:B3:A2:4E:6F:B7:3F:73
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 0199FC2151A7DB061004C336E4D99B1F65E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 08E4
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=)
2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: unXUBIkhP0227w52oWQX2s1Er18GjBeGF30X3gDbGHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:51:a7:db:06:10:04:c3:36:e4:d9:9b:1f:65:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=a0aaa41e1cbd12c29d5b426e16b3a24e6fb73f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:79:b1:95:b3:82:a8:99:a6:ef:b3:12:a0:
00:53:18:25:bf:06:d2:cb:3c:c9:28:c7:d7:68:ed:
3b:64:46:5f:05:78:17:69:08:06:48:68:f0:ad:fc:
0a:3d:49:ab:fb:bc:a9:86:1d:7d:8a:c4:2f:89:bb:
fb:99:22:94:93:60:3e:4b:b7:72:e1:d5:1f:2f:21:
35:58:f7:6d:b5:4b:c0:67:08:4b:f4:be:16:bd:e7:
80:ee:21:00:3d:77:54:f1:09:86:4d:27:96:0c:13:
ff:96:4a:b7:ab:5c:5f:3d:72:95:4b:60:5c:a4:72:
61:90:d3:e7:2d:ca:54:b9:1c:07:42:6d:ea:dd:c3:
74:02:d5:3a:b7:08:7e:f2:09:01:db:6c:f9:2e:6f:
16:d4:84:d0:0a:25:cb:0f:63:3f:00:3f:b1:80:94:
41:aa:3e:3b:4e:04:3c:2c:13:78:30:bd:f4:71:5c:
72:71:5a:60:36:74:ae:66:8f:e5:27:44:d5:47:c4:
7b:2f:cc:9a:f5:26:cb:a4:c1:bb:0e:f7:0c:e1:fe:
38:73:59:11:89:2a:a8:ba:cb:ad:f2:b9:64:7e:a3:
22:49:01:71:f9:70:5f:62:45:83:72:7b:1f:45:88:
d0:d9:7a:a6:fe:a7:a7:ea:0a:cf:3f:af:26:0f:47:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AA:A4:1E:1C:BD:12:C2:9D:5B:42:6E:16:B3:A2:4E:6F:B7:3F:73
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bd:46:ac:d0:cb:3b:c1:6e:a9:c2:47:d6:66:37:a5:33:64:
af:1e:7d:cc:7f:41:50:8d:8c:17:c4:b5:97:0a:e1:06:97:86:
16:47:b3:7a:80:26:8e:e9:d3:98:1c:df:34:a1:be:7e:a8:40:
a1:d9:63:ca:1c:d5:e2:31:f0:3c:f3:53:19:df:ad:5b:97:c2:
15:1a:a0:73:c5:77:47:68:2d:db:03:a4:1c:c9:76:b6:0c:21:
28:f9:1a:58:05:78:49:0d:55:4a:1e:88:7e:5b:29:0f:5e:71:
bd:53:67:aa:32:ff:8a:de:79:fd:e6:0a:06:f0:68:28:51:c5:
80:93:ac:a3:6b:7e:69:d1:40:73:0e:c7:ab:f4:e5:95:ef:4a:
83:23:b1:97:a6:20:86:a8:49:03:8d:df:60:68:6c:c4:68:bd:
bb:74:ed:06:4c:4b:c6:28:4d:70:1a:ee:ff:97:c0:aa:b8:9a:
86:32:a6:30:29:15:13:9f:d4:c4:52:09:20:68:78:37:12:f2:
52:84:03:48:76:c2:86:61:8c:b6:12:09:bf:af:b9:79:00:73:
d5:7b:aa:ef:ca:70:04:98:e2:1d:bb:d0:6f:6f:61:5a:4e:e9:
d0:f6:c4:f9:01:2d:92:cb:63:02:2c:5a:b3:c2:3c:0e:06:6e:
eb:d5:55:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVGn2wYQBMM25NmbH2XoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNTM4MjljMDYxYThhZjI2ZGU5NDZmYzllODE4ODVjNzRj
MTc0YzcwHhcNMjUxMDE5MTEwMTA1WhcNMjUxMDIwMTEwMTA1WjAzMTEwLwYDVQQD
EyhhMGFhYTQxZTFjYmQxMmMyOWQ1YjQyNmUxNmIzYTI0ZTZmYjczZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5J5sZWzgqiZpu+zEqAAUxglvwbS
yzzJKMfXaO07ZEZfBXgXaQgGSGjwrfwKPUmr+7yphh19isQvibv7mSKUk2A+S7dy
4dUfLyE1WPdttUvAZwhL9L4WveeA7iEAPXdU8QmGTSeWDBP/lkq3q1xfPXKVS2Bc
pHJhkNPnLcpUuRwHQm3q3cN0AtU6twh+8gkB22z5Lm8W1ITQCiXLD2M/AD+xgJRB
qj47TgQ8LBN4ML30cVxycVpgNnSuZo/lJ0TVR8R7L8ya9SbLpMG7DvcM4f44c1kR
iSqousut8rlkfqMiSQFx+XBfYkWDcnsfRYjQ2Xqm/qen6grPP68mD0eIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCqpB4cvRLCnVtCbhazok5vtz9zMB8GA1UdIwQY
MBaAFGNTgpwGGorybelG/J6BiFx0wXTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEt
ODE2MjAzZDIxZDEyLzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEtODE2MjAzZDIxZDEy
LzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABL1GrNDL
O8FuqcJH1mY3pTNkrx59zH9BUI2MF8S1lwrhBpeGFkezeoAmjunTmBzfNKG+fqhA
odljyhzV4jHwPPNTGd+tW5fCFRqgc8V3R2gt2wOkHMl2tgwhKPkaWAV4SQ1VSh6I
flspD15xvVNnqjL/it55/eYKBvBoKFHFgJOso2t+adFAcw7Hq/Tlle9KgyOxl6Yg
hqhJA43fYGhsxGi9u3TtBkxLxihNcBru/5fAqriahjKmMCkVE5/UxFIJIGh4NxLy
UoQDSHbChmGMthIJv6+5eQBz1Xuq78pwBJjiHbvQb29hWk7p0PbE+QEtkstjAixa
s8I8DgZu69VVww==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:27 2025 by rpki-client