Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: GLo1w/UUJ/HIzgCiJ1BdbjRC+bOXm1oXmsF0DJJooVY=
Subject key identifier: 03:6D:BC:92:97:99:AC:47:1D:FB:93:15:41:3D:81:AE:66:17:8A:AF
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 0199FFC79B07D19B6F467EB628BF3A328CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0D76
Signing time: Mon 20 Oct 2025 04:01:35 +0000
Manifest this update: Mon 20 Oct 2025 04:01:35 +0000
Manifest next update: Tue 21 Oct 2025 04:01:35 +0000
Files and hashes: 1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: I/nTkBp4Aa9JxvMrXv1mMhE98jkymMjvfhi6kJcDCnk=)
3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:9b:07:d1:9b:6f:46:7e:b6:28:bf:3a:32:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Oct 20 04:01:35 2025 GMT
Not After : Oct 21 04:01:35 2025 GMT
Subject: CN=036dbc929799ac471dfb9315413d81ae66178aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:c0:1d:ad:3a:5f:2b:99:65:d7:24:2a:fb:
12:c8:1d:a0:75:d2:06:16:83:15:ab:9e:f4:91:1c:
cc:41:65:ad:fb:5c:45:38:4f:ef:41:30:94:de:ac:
1f:21:ed:be:2f:8b:85:af:74:a1:d0:d2:b4:7d:19:
8f:66:27:d6:a0:c7:c2:b1:dc:91:39:7b:5a:21:52:
41:8c:80:ed:0f:3e:b4:b7:42:a6:cb:58:0b:ce:a8:
dd:37:4c:8d:bf:d5:87:e2:ba:82:03:70:f8:13:9b:
ee:c9:83:52:58:3d:1f:80:9e:63:58:95:f6:7d:98:
73:1b:72:8c:1e:4a:2e:24:89:11:93:fa:94:70:27:
07:e8:16:2e:9c:95:dd:43:6c:ac:5a:4e:10:c6:7b:
e5:5e:85:07:a9:c3:ff:b8:32:0e:95:e1:cc:10:b2:
77:66:50:f7:44:d5:5f:66:31:6c:a8:2e:24:9e:11:
c1:d6:57:88:c3:17:17:70:48:fb:1c:4c:3b:b6:b1:
44:7a:19:3f:c9:bc:3f:de:80:65:90:0f:4e:ae:a4:
26:d7:3f:19:22:04:e3:84:ac:61:29:c2:2b:b2:a7:
3f:1f:cd:2a:1e:65:84:be:0a:c5:1a:57:9b:39:38:
69:cb:06:dd:6d:a1:d5:78:14:39:a9:5a:56:15:e6:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6D:BC:92:97:99:AC:47:1D:FB:93:15:41:3D:81:AE:66:17:8A:AF
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2b:8b:83:68:45:74:ee:25:13:bf:98:d5:bb:65:44:5e:b8:
2e:1c:b5:b0:3f:b9:68:8f:68:37:bb:1d:f3:0e:a3:22:8b:be:
31:70:8a:e1:5c:ac:a8:be:65:e2:4b:5d:2a:a7:d5:a6:21:42:
78:6a:6b:21:0c:ec:0f:58:65:57:cd:02:bb:0d:0e:eb:8f:3b:
91:9e:aa:17:4b:15:25:b6:8b:d7:41:a2:f8:fa:1e:f3:b4:70:
7b:d1:f8:54:27:52:7e:e8:ed:98:45:92:3a:38:b1:d8:84:05:
e7:26:f7:1c:3c:8f:ec:a1:5d:20:61:f5:8f:87:63:4a:ae:19:
a0:23:f4:63:f3:09:4d:1b:76:08:6e:22:f8:a9:4f:dd:4c:b1:
54:dc:d3:64:ff:88:ba:ed:c0:16:1f:78:dc:6a:8a:39:e4:e4:
1c:d5:fb:09:c5:99:84:e0:fe:c2:fd:df:63:04:6c:f5:4b:5e:
01:5e:77:9b:89:48:46:ce:be:e9:98:f9:c9:ad:6e:a4:09:b6:
a9:ea:33:86:d9:3a:db:4a:bb:d9:fb:58:80:0e:a1:98:78:a9:
ac:d2:7b:2a:19:bd:37:2c:e6:49:f3:06:d2:a2:b1:76:a5:42:
e2:5e:0b:2b:48:8a:28:19:f6:68:2d:b2:f6:9b:ff:ed:fb:82:
0c:f0:f0:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x5sH0ZtvRn62KL86MozuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh
NDY0ZWUwHhcNMjUxMDIwMDQwMTM1WhcNMjUxMDIxMDQwMTM1WjAzMTEwLwYDVQQD
EygwMzZkYmM5Mjk3OTlhYzQ3MWRmYjkzMTU0MTNkODFhZTY2MTc4YWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgPAHa06XyuZZdckKvsSyB2gddIG
FoMVq570kRzMQWWt+1xFOE/vQTCU3qwfIe2+L4uFr3Sh0NK0fRmPZifWoMfCsdyR
OXtaIVJBjIDtDz60t0Kmy1gLzqjdN0yNv9WH4rqCA3D4E5vuyYNSWD0fgJ5jWJX2
fZhzG3KMHkouJIkRk/qUcCcH6BYunJXdQ2ysWk4QxnvlXoUHqcP/uDIOleHMELJ3
ZlD3RNVfZjFsqC4knhHB1leIwxcXcEj7HEw7trFEehk/ybw/3oBlkA9OrqQm1z8Z
IgTjhKxhKcIrsqc/H80qHmWEvgrFGlebOThpywbdbaHVeBQ5qVpWFea9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANtvJKXmaxHHfuTFUE9ga5mF4qvMB8GA1UdIwQY
MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt
MzgyMGY3ZWUyY2I4LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4
LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCuLg2hF
dO4lE7+Y1btlRF64Lhy1sD+5aI9oN7sd8w6jIou+MXCK4VysqL5l4ktdKqfVpiFC
eGprIQzsD1hlV80Cuw0O6487kZ6qF0sVJbaL10Gi+Poe87Rwe9H4VCdSfujtmEWS
Ojix2IQF5yb3HDyP7KFdIGH1j4djSq4ZoCP0Y/MJTRt2CG4i+KlP3UyxVNzTZP+I
uu3AFh943GqKOeTkHNX7CcWZhOD+wv3fYwRs9UteAV53m4lIRs6+6Zj5ya1upAm2
qeozhtk620q72ftYgA6hmHiprNJ7Khm9NyzmSfMG0qKxdqVC4l4LK0iKKBn2aC2y
9pv/7fuCDPDwIQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:47 2025 by rpki-client