Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: vhvlj6LIiIHY2rriOXQvcQ82dkT/iohZulgZFdUwuq0=
Subject key identifier: 6F:37:C7:5E:49:23:7E:99:68:F7:71:63:B4:02:0A:8A:E4:B0:D6:7D
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 0199FC2192D1F2458A0C7C7B6D158A421295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 0FCF
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=)
2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=)
3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: awRPH3K/uOGHiTGGe11WYoWiIjAXDFoKu1aDUkcvkfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:92:d1:f2:45:8a:0c:7c:7b:6d:15:8a:42:12:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=6f37c75e49237e9968f77163b4020a8ae4b0d67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:db:cf:8c:63:ee:7b:8c:0d:e5:ab:86:65:
d0:46:4f:4b:f4:f9:c0:60:b8:5e:27:80:7f:e3:5a:
33:0b:9b:cf:40:ed:8b:ba:da:39:7b:c6:77:b1:5e:
b2:c5:12:4f:94:2a:bf:f9:b5:ce:6f:80:e0:0c:ab:
f6:ce:88:e0:a0:6c:67:39:62:8f:28:0e:76:56:66:
88:78:87:60:ed:d2:64:80:2a:03:d5:f5:66:87:b1:
8d:13:0c:79:3a:ea:7d:61:c8:39:79:18:15:c5:9d:
37:9f:0f:53:27:79:b7:7c:8e:50:28:9c:96:b9:d9:
6c:79:bc:3a:1a:5e:0d:c8:b3:87:1d:f6:0c:e1:a3:
ac:70:a0:9e:61:01:ec:9e:a9:34:88:48:3c:f8:21:
a0:c5:df:4a:fb:8e:b3:4d:31:bd:4c:bc:1e:6e:e2:
de:9d:88:e5:36:7c:f6:35:fa:d7:5f:b7:c3:cd:a6:
c3:a5:a0:81:6b:d4:58:f1:e9:9a:93:6a:a3:47:cc:
a9:cc:db:b3:90:79:af:95:77:29:cd:3c:72:e1:aa:
64:c4:0c:0e:b2:97:09:76:d3:e2:a9:2f:1b:80:fb:
3f:52:0b:f3:85:eb:a2:14:a7:0c:ff:b7:9d:17:58:
a0:39:a6:b2:9e:2d:fc:85:58:d9:fc:fa:7a:fb:3e:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:37:C7:5E:49:23:7E:99:68:F7:71:63:B4:02:0A:8A:E4:B0:D6:7D
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0c:5c:05:46:b5:7a:38:d7:58:ca:0c:e8:73:82:e2:5d:c6:
09:d2:84:84:54:d9:a2:d9:9b:8c:fd:41:05:cc:19:5e:5a:3b:
ea:f4:e2:3d:9f:30:bd:87:37:fa:07:de:54:3c:64:b0:02:63:
d0:ad:9b:cf:15:8d:15:d1:98:cc:7e:7b:ab:21:39:b0:d2:18:
44:df:f2:87:30:a4:fe:a2:de:4c:49:7e:7e:75:58:49:0b:1c:
0b:ee:64:87:45:a6:45:3e:af:5b:61:de:ea:01:9e:ce:1a:b5:
6e:73:81:3e:9f:42:e7:bf:d4:3a:ee:0d:97:ed:68:41:02:06:
63:b8:8c:9d:b7:f8:15:15:ab:bd:ef:89:70:7c:e1:6d:69:85:
1a:fb:d4:68:3c:d1:12:07:10:c3:73:36:3c:a4:e1:42:4f:a1:
a7:a3:98:b1:56:e8:43:b1:ec:14:92:a5:17:4e:c8:5e:4d:9f:
8e:e3:a3:69:b6:ce:6c:97:c9:d6:3f:fb:fc:46:e6:dc:c2:50:
74:c8:09:4b:5a:27:fa:f0:01:36:7e:9a:53:61:27:af:bc:51:
79:13:bf:38:04:af:64:35:55:89:43:9f:e2:c9:ac:4a:61:8c:
55:19:3b:45:a4:21:d8:e2:b6:05:45:cc:a5:72:4b:d6:e4:59:
f8:a3:70:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZLR8kWKDHx7bRWKQhKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj
MzlmMzQwHhcNMjUxMDE5MTEwMTIyWhcNMjUxMDIwMTEwMTIyWjAzMTEwLwYDVQQD
Eyg2ZjM3Yzc1ZTQ5MjM3ZTk5NjhmNzcxNjNiNDAyMGE4YWU0YjBkNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H7bz4xj7nuMDeWrhmXQRk9L9PnA
YLheJ4B/41ozC5vPQO2Luto5e8Z3sV6yxRJPlCq/+bXOb4DgDKv2zojgoGxnOWKP
KA52VmaIeIdg7dJkgCoD1fVmh7GNEwx5Oup9Ycg5eRgVxZ03nw9TJ3m3fI5QKJyW
udlsebw6Gl4NyLOHHfYM4aOscKCeYQHsnqk0iEg8+CGgxd9K+46zTTG9TLwebuLe
nYjlNnz2NfrXX7fDzabDpaCBa9RY8emak2qjR8ypzNuzkHmvlXcpzTxy4apkxAwO
spcJdtPiqS8bgPs/UgvzheuiFKcM/7edF1igOaayni38hVjZ/Pp6+z7irwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG83x15JI36ZaPdxY7QCCorksNZ9MB8GA1UdIwQY
MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt
MjU2MzM5NzM2YzJiLzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi
LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwxcBUa1
ejjXWMoM6HOC4l3GCdKEhFTZotmbjP1BBcwZXlo76vTiPZ8wvYc3+gfeVDxksAJj
0K2bzxWNFdGYzH57qyE5sNIYRN/yhzCk/qLeTEl+fnVYSQscC+5kh0WmRT6vW2He
6gGezhq1bnOBPp9C57/UOu4Nl+1oQQIGY7iMnbf4FRWrve+JcHzhbWmFGvvUaDzR
EgcQw3M2PKThQk+hp6OYsVboQ7HsFJKlF07IXk2fjuOjabbObJfJ1j/7/Ebm3MJQ
dMgJS1on+vABNn6aU2Enr7xReRO/OASvZDVViUOf4smsSmGMVRk7RaQh2OK2BUXM
pXJL1uRZ+KNwSA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:14 2025 by rpki-client