Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: 88lmzVeS3bM3BUqkmzxIZdLuACkhBGEteMdRoUPPI08=
Subject key identifier: D1:99:FE:7A:BE:9D:F1:23:01:F8:B5:27:CB:3F:F2:AA:FB:B9:1E:76
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 0199FF225E6FF0BE8E3BE9D9E527A6C50E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0D88
Signing time: Mon 20 Oct 2025 01:01:06 +0000
Manifest this update: Mon 20 Oct 2025 01:01:06 +0000
Manifest next update: Tue 21 Oct 2025 01:01:06 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=)
3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: 2W8+TyfsV3DRvyA3IwNn+bvqmS8HyeHmfm1JiueBcjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:5e:6f:f0:be:8e:3b:e9:d9:e5:27:a6:c5:0e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Oct 20 01:01:06 2025 GMT
Not After : Oct 21 01:01:06 2025 GMT
Subject: CN=d199fe7abe9df12301f8b527cb3ff2aafbb91e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:98:e7:83:f3:85:f7:8a:22:e9:f0:da:7c:
05:86:88:15:e5:67:13:08:04:1c:60:a4:ed:83:3d:
32:81:7b:6a:74:0e:3e:56:03:eb:0d:16:1b:73:da:
b4:20:c9:ae:f7:c0:44:d8:52:8e:b8:dc:79:05:52:
b2:14:d3:42:13:38:5a:e5:74:8b:fc:98:eb:11:3e:
3c:00:13:8a:22:b5:be:b6:01:59:9b:28:cd:3f:99:
63:c7:ce:b7:0c:8a:64:06:df:2b:7c:e9:cb:67:08:
50:4a:01:88:dc:24:c9:6c:95:3b:8e:bb:5a:9c:3d:
af:e5:82:cc:12:8c:87:27:a6:cf:d6:35:df:1b:bf:
68:73:28:db:fa:26:ba:f7:fb:1c:51:f0:b4:4f:90:
ce:e2:90:ec:ba:0f:c2:bd:c1:4b:b2:4b:f6:22:8d:
06:ee:c2:57:10:b5:fa:cd:03:ca:3a:a4:9d:23:c9:
4b:14:33:cd:98:e6:81:c9:fc:8d:ff:47:28:68:d4:
c1:8c:d7:87:b5:b7:9e:c1:4f:3c:93:d1:de:e3:12:
b1:65:5d:77:f6:63:b0:67:db:5b:45:9b:b9:63:ab:
35:4b:32:f7:38:fa:64:de:c7:1d:e5:bd:3f:c3:a7:
34:59:43:fd:fb:87:c4:d0:35:90:54:03:f8:4d:14:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:FE:7A:BE:9D:F1:23:01:F8:B5:27:CB:3F:F2:AA:FB:B9:1E:76
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:30:2f:c8:48:1e:fb:39:4d:2f:d7:be:75:26:8a:f4:78:38:
e9:42:3b:8e:6c:f5:e3:c5:e2:41:35:37:90:bd:70:38:ef:15:
f0:b0:56:87:e6:f4:ef:00:96:5d:ea:20:73:5a:ea:39:30:2b:
30:e3:ce:e1:d4:3e:56:b6:e3:66:98:1e:58:f6:b8:20:54:55:
91:42:34:31:4c:eb:55:05:13:6e:e0:32:67:f9:fe:c5:8b:1c:
2a:09:8e:ab:a3:ef:e4:ac:7e:d5:a4:dc:45:38:ac:4f:7f:c8:
d0:a0:34:73:74:79:97:b2:5a:45:a9:ee:cf:f1:28:d4:b5:58:
2d:ae:8d:1a:7e:8c:32:d6:38:49:41:d8:7e:68:38:4b:00:d6:
77:67:cd:dc:a8:4d:ef:4b:97:ab:4b:8b:71:58:9d:66:43:14:
7e:a6:a9:6d:1e:fd:f0:d2:fb:2e:90:6e:45:44:f3:5b:05:63:
fd:4e:0b:3a:5f:ac:ab:d5:46:c4:31:6f:36:92:cf:3a:ea:18:
f7:ca:fa:fd:f8:72:9a:10:b0:1d:33:8c:fe:43:68:e0:ea:6a:
96:da:d5:92:0d:ea:48:a0:f0:95:8e:cc:19:79:c6:75:da:93:
9b:78:81:b0:c6:d9:56:40:b6:51:b4:4b:fd:e0:bf:32:e4:b6:
6b:7b:6a:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Il5v8L6OO+nZ5SemxQ4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk
NTNiNGQwHhcNMjUxMDIwMDEwMTA2WhcNMjUxMDIxMDEwMTA2WjAzMTEwLwYDVQQD
EyhkMTk5ZmU3YWJlOWRmMTIzMDFmOGI1MjdjYjNmZjJhYWZiYjkxZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NKY54PzhfeKIunw2nwFhogV5WcT
CAQcYKTtgz0ygXtqdA4+VgPrDRYbc9q0IMmu98BE2FKOuNx5BVKyFNNCEzha5XSL
/JjrET48ABOKIrW+tgFZmyjNP5ljx863DIpkBt8rfOnLZwhQSgGI3CTJbJU7jrta
nD2v5YLMEoyHJ6bP1jXfG79ocyjb+ia69/scUfC0T5DO4pDsug/CvcFLskv2Io0G
7sJXELX6zQPKOqSdI8lLFDPNmOaByfyN/0coaNTBjNeHtbeewU88k9He4xKxZV13
9mOwZ9tbRZu5Y6s1SzL3OPpk3scd5b0/w6c0WUP9+4fE0DWQVAP4TRTcbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGZ/nq+nfEjAfi1J8s/8qr7uR52MB8GA1UdIwQY
MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt
MzAwOTdhMjQ2YTljLzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj
LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzAvyEge
+zlNL9e+dSaK9Hg46UI7jmz148XiQTU3kL1wOO8V8LBWh+b07wCWXeogc1rqOTAr
MOPO4dQ+VrbjZpgeWPa4IFRVkUI0MUzrVQUTbuAyZ/n+xYscKgmOq6Pv5Kx+1aTc
RTisT3/I0KA0c3R5l7JaRanuz/Eo1LVYLa6NGn6MMtY4SUHYfmg4SwDWd2fN3KhN
70uXq0uLcVidZkMUfqapbR798NL7LpBuRUTzWwVj/U4LOl+sq9VGxDFvNpLPOuoY
98r6/fhymhCwHTOM/kNo4OpqltrVkg3qSKDwlY7MGXnGddqTm3iBsMbZVkC2UbRL
/eC/MuS2a3tqBQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:55 2025 by rpki-client