Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json)
Hash identifier: NqJrplhYjqs5ZvkslQ7YVgmLLRW2WMieFWGb/Dk5/Xg=
Subject key identifier: 08:3D:BC:BC:4D:BE:58:78:78:D2:55:A2:7B:15:1D:88:E3:EB:02:7C
Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Certificate serial: 0199FFC829642FD6450067C1317C1BCB2087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:02:11 +0000
Manifest this update: Mon 20 Oct 2025 04:02:11 +0000
Manifest next update: Tue 21 Oct 2025 04:02:11 +0000
Files and hashes: 1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=)
2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: fWmQtU4u2R3/g+jdnhXn2pI5KKqmiMe7D92NdPj75Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:29:64:2f:d6:45:00:67:c1:31:7c:1b:cb:20:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b
Validity
Not Before: Oct 20 04:02:11 2025 GMT
Not After : Oct 21 04:02:11 2025 GMT
Subject: CN=083dbcbc4dbe587878d255a27b151d88e3eb027c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:06:90:93:cd:f8:59:d9:6c:77:cb:04:77:
78:85:d2:6c:73:21:5a:6d:55:75:01:62:fb:90:5f:
6d:cb:e0:e2:ed:14:1b:41:a8:c3:ec:7f:c9:cf:52:
43:b6:d0:1f:06:8a:8c:06:8a:71:00:07:4f:44:a4:
8c:58:09:39:f8:53:c1:03:a6:c3:a2:04:f7:30:a0:
99:13:94:d9:7c:30:17:42:15:7f:81:51:ae:ab:7e:
9d:31:3a:31:8d:1c:26:2e:b9:6e:b6:ac:1d:3d:c5:
16:e3:38:0d:52:84:45:04:e6:2e:22:8b:dc:95:8d:
da:6e:2e:15:66:5d:cc:83:7e:8d:fe:52:a3:af:9b:
ec:a2:c3:94:bb:92:79:0a:9f:82:da:a4:22:a1:02:
72:d3:c1:b9:1e:f5:70:50:25:5a:89:db:82:98:a3:
38:74:e9:5e:b4:4c:e5:4c:7b:34:bd:c3:6b:24:69:
91:1b:2f:aa:ed:7b:03:3b:21:71:d2:3d:9b:bf:84:
45:8b:b8:ce:a6:5a:82:63:ce:c0:29:61:11:fe:ad:
b4:2d:fa:1e:10:f3:dc:e6:3e:89:a9:36:9d:6d:cc:
26:29:a1:f2:06:a9:af:72:53:f4:1b:6e:85:f6:56:
c8:3d:8b:64:95:3f:db:65:5a:88:db:6b:35:88:8c:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3D:BC:BC:4D:BE:58:78:78:D2:55:A2:7B:15:1D:88:E3:EB:02:7C
X509v3 Authority Key Identifier:
keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ef:b2:f7:49:90:9c:8e:18:76:8c:f7:d7:1f:bf:f7:e3:46:
f8:d5:c0:d6:52:3b:6e:ba:cd:77:c5:38:54:d9:8f:ff:a2:a9:
dc:95:2b:8e:68:2b:4f:c3:ea:f0:31:70:b9:64:70:ce:b5:cd:
75:e9:54:d5:f8:e2:75:46:61:37:c0:f8:6c:fc:69:44:d1:53:
7d:66:12:8c:03:6e:ee:9d:ed:98:1b:a8:d1:8f:ba:bd:84:43:
9d:67:ed:7b:71:47:15:36:d4:9b:01:33:ce:c4:cc:c8:a6:64:
3a:96:9b:fe:8a:6c:c0:a6:7c:de:98:0f:a4:d2:eb:6b:9c:cd:
13:74:30:41:4e:df:5e:f8:7a:e6:a9:57:5b:23:51:c3:a4:5f:
7e:12:d3:67:38:ff:c0:e7:d5:9e:be:0b:73:1d:19:0e:61:7f:
52:09:e9:b7:40:e1:f6:84:92:84:b1:56:f4:7d:0d:0b:02:69:
ea:9e:e8:ac:11:ba:76:ed:a7:4f:72:f4:c7:5a:b7:7b:e1:32:
0f:49:1e:5e:a1:8c:82:bf:d6:9c:4f:5e:de:04:be:ac:35:44:
6b:eb:20:e1:fb:cc:78:6d:cb:f5:4f:e6:96:50:33:6d:81:16:
c1:44:26:60:bc:86:11:fd:c2:ad:89:10:67:15:fb:86:5f:3e:
de:28:09:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yClkL9ZFAGfBMXwbyyCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OGU5Y2IyN2YzZDFhYmNjNGNjNjFjM2MxYmJmZGM3MjYy
OGU1N2IwHhcNMjUxMDIwMDQwMjExWhcNMjUxMDIxMDQwMjExWjAzMTEwLwYDVQQD
EygwODNkYmNiYzRkYmU1ODc4NzhkMjU1YTI3YjE1MWQ4OGUzZWIwMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hcGkJPN+FnZbHfLBHd4hdJscyFa
bVV1AWL7kF9ty+Di7RQbQajD7H/Jz1JDttAfBoqMBopxAAdPRKSMWAk5+FPBA6bD
ogT3MKCZE5TZfDAXQhV/gVGuq36dMToxjRwmLrlutqwdPcUW4zgNUoRFBOYuIovc
lY3abi4VZl3Mg36N/lKjr5vsosOUu5J5Cp+C2qQioQJy08G5HvVwUCVaiduCmKM4
dOletEzlTHs0vcNrJGmRGy+q7XsDOyFx0j2bv4RFi7jOplqCY87AKWER/q20Lfoe
EPPc5j6JqTadbcwmKaHyBqmvclP0G26F9lbIPYtklT/bZVqI22s1iIyNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg9vLxNvlh4eNJVonsVHYjj6wJ8MB8GA1UdIwQY
MBaAFJmOnLJ/PRq8xMxhw8G7/ccmKOV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODct
NTJkNmIzZTQ3ODlmLzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODctNTJkNmIzZTQ3ODlm
LzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoe+y90mQ
nI4Ydoz31x+/9+NG+NXA1lI7brrNd8U4VNmP/6Kp3JUrjmgrT8Pq8DFwuWRwzrXN
delU1fjidUZhN8D4bPxpRNFTfWYSjANu7p3tmBuo0Y+6vYRDnWfte3FHFTbUmwEz
zsTMyKZkOpab/opswKZ83pgPpNLra5zNE3QwQU7fXvh65qlXWyNRw6RffhLTZzj/
wOfVnr4Lcx0ZDmF/Ugnpt0Dh9oSShLFW9H0NCwJp6p7orBG6du2nT3L0x1q3e+Ey
D0keXqGMgr/WnE9e3gS+rDVEa+sg4fvMeG3L9U/mllAzbYEWwUQmYLyGEf3CrYkQ
ZxX7hl8+3igJ+A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:08:22 2025 by rpki-client