Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier: wsqWy+Ugdkmxm+v8E3LKZm9mbg8oYZQAENJwvY/iA0Y=
Subject key identifier: 77:8F:8C:B8:F0:25:7B:2E:F6:68:B6:CA:BC:E7:AA:2E:0F:33:93:15
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer: /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial: 0199FAD859E08F1525C795E1865B508FBA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number: 063D
Signing time: Sun 19 Oct 2025 05:01:46 +0000
Manifest this update: Sun 19 Oct 2025 05:01:46 +0000
Manifest next update: Mon 20 Oct 2025 05:01:46 +0000
Files and hashes: 1: meIfpWGWvt-OCR5hELolYg558lc.roa (hash: b6ypOtwfgJ3TZwPfNgJCJZ3JwL1dV4492jTSEMjG2cE=)
2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: wUKefrxweTwEWurkM63uavUStD672JJtBgZ2bJE1930=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:59:e0:8f:15:25:c7:95:e1:86:5b:50:8f:ba:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Validity
Not Before: Oct 19 05:01:46 2025 GMT
Not After : Oct 20 05:01:46 2025 GMT
Subject: CN=778f8cb8f0257b2ef668b6cabce7aa2e0f339315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:b4:29:dd:30:5a:5a:b9:22:ba:90:29:3f:
df:5e:d8:19:c8:4d:3a:c5:db:a1:22:59:f1:83:8b:
ae:86:8c:f7:5a:95:85:e6:69:fc:db:cd:58:dd:b6:
25:b9:4f:c6:6d:f6:61:93:14:b8:1c:c4:59:9b:4f:
e5:51:01:2c:a0:df:03:74:75:df:b4:68:f6:2c:4a:
b2:39:4c:80:12:35:68:2b:17:20:51:01:c0:77:38:
06:53:cf:c7:d0:a4:19:4f:11:90:a6:d4:83:44:13:
bb:66:b0:fa:cb:83:18:03:75:dd:bf:90:3b:a5:e6:
d3:35:19:f9:cd:93:ab:9c:9e:7e:e5:c0:d8:36:d4:
98:48:86:68:3d:5e:f3:6e:6d:9b:0e:50:17:9b:f3:
56:83:3e:31:89:43:cb:29:df:33:4d:bb:73:ab:36:
75:d4:5c:06:c6:6b:f7:b8:90:6c:84:df:e3:69:75:
ae:e6:9c:89:91:27:2c:e2:96:e5:f2:41:02:e9:84:
dd:e8:da:da:38:fe:1c:5c:e4:5a:0a:9b:5f:ae:c9:
3b:a8:ce:1c:a5:b6:dd:6c:e7:74:2f:07:c6:22:34:
f9:0d:d5:a6:85:0a:33:1f:ef:c8:74:2a:00:19:c5:
a1:3a:e5:35:d4:36:35:f1:f9:49:0e:f0:8f:13:ba:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8F:8C:B8:F0:25:7B:2E:F6:68:B6:CA:BC:E7:AA:2E:0F:33:93:15
X509v3 Authority Key Identifier:
keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:69:6d:0c:13:08:57:e5:16:12:6e:7b:51:c5:e0:e0:a1:91:
df:2d:93:8f:77:e8:67:b4:5b:fc:ab:02:7d:26:55:22:11:eb:
7c:21:8f:0b:83:9f:c1:1e:9d:91:27:a0:85:5b:43:3a:58:ad:
34:1f:c1:d6:7c:87:0c:6c:b3:dd:5b:99:5f:c7:68:03:6c:b8:
76:c1:66:c4:25:94:9a:3f:bc:95:3a:13:45:3a:14:6d:c6:d9:
64:eb:9c:18:b6:4e:4c:ef:d2:c8:36:b1:08:1b:00:8a:db:9b:
7b:1a:43:da:67:62:b5:dd:59:90:68:b0:d4:9b:f1:3e:cb:07:
63:d9:b4:87:a3:f3:31:8f:e1:16:bd:16:1b:32:2a:5d:02:32:
d9:30:08:27:96:42:3c:66:1a:e2:0f:ae:0f:30:dd:ac:68:f5:
03:70:47:83:ad:75:dd:36:82:c3:f0:8a:86:7f:6e:1c:ae:c8:
15:f1:be:de:1a:4c:0d:24:04:10:09:2f:32:27:60:bb:6a:4b:
36:d4:f1:ce:f7:91:b2:7c:15:e0:3e:80:18:14:c1:5d:50:d1:
98:c1:a5:78:9b:22:00:b3:81:51:70:a5:f5:10:ef:20:df:24:
83:85:8b:98:01:12:13:ec:21:86:bf:3b:5a:c3:51:7c:98:88:
6c:8c:5a:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62FngjxUlx5XhhltQj7pPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmY3ZmQ3ZWUxMWVmZjg5MTRhMzE1MGZjZDE2YTY0OGEz
YzdmMzAwHhcNMjUxMDE5MDUwMTQ2WhcNMjUxMDIwMDUwMTQ2WjAzMTEwLwYDVQQD
Eyg3NzhmOGNiOGYwMjU3YjJlZjY2OGI2Y2FiY2U3YWEyZTBmMzM5MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrO0Kd0wWlq5IrqQKT/fXtgZyE06
xduhIlnxg4uuhoz3WpWF5mn8281Y3bYluU/GbfZhkxS4HMRZm0/lUQEsoN8DdHXf
tGj2LEqyOUyAEjVoKxcgUQHAdzgGU8/H0KQZTxGQptSDRBO7ZrD6y4MYA3Xdv5A7
pebTNRn5zZOrnJ5+5cDYNtSYSIZoPV7zbm2bDlAXm/NWgz4xiUPLKd8zTbtzqzZ1
1FwGxmv3uJBshN/jaXWu5pyJkScs4pbl8kEC6YTd6NraOP4cXORaCptfrsk7qM4c
pbbdbOd0LwfGIjT5DdWmhQozH+/IdCoAGcWhOuU11DY18flJDvCPE7rH+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHePjLjwJXsu9mi2yrznqi4PM5MVMB8GA1UdIwQY
MBaAFMv/f9fuEe/4kUoxUPzRamSKPH8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NTgxNDMtYWYwYy00OTNlLThlZDEt
OWY1Zjc4MDU2OWExLzEveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NTgxNDMtYWYwYy00OTNlLThlZDEtOWY1Zjc4MDU2OWEx
LzEveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWltDBMI
V+UWEm57UcXg4KGR3y2Tj3foZ7Rb/KsCfSZVIhHrfCGPC4OfwR6dkSeghVtDOlit
NB/B1nyHDGyz3VuZX8doA2y4dsFmxCWUmj+8lToTRToUbcbZZOucGLZOTO/SyDax
CBsAitubexpD2mditd1ZkGiw1JvxPssHY9m0h6PzMY/hFr0WGzIqXQIy2TAIJ5ZC
PGYa4g+uDzDdrGj1A3BHg6113TaCw/CKhn9uHK7IFfG+3hpMDSQEEAkvMidgu2pL
NtTxzveRsnwV4D6AGBTBXVDRmMGleJsiALOBUXCl9RDvIN8kg4WLmAESE+whhr87
WsNRfJiIbIxaSA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:06 2025 by rpki-client