Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: 96/XYBp2ct535tGX1rvrWNWOXTV27Z+3c5QccP2lQ0I=
Subject key identifier: EB:DD:A2:22:67:E4:A1:C8:62:3F:C9:E9:AF:A4:4F:B3:AC:BE:6A:BC
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019A02FE4C1E2E27118D30D8C49108C77E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0AA2
Signing time: Mon 20 Oct 2025 19:00:11 +0000
Manifest this update: Mon 20 Oct 2025 19:00:11 +0000
Manifest next update: Tue 21 Oct 2025 19:00:11 +0000
Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: RRUyqSqIMATwuw51oGyGpk2H86Hcfr4LeRObd/pibBw=)
3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:4c:1e:2e:27:11:8d:30:d8:c4:91:08:c7:7e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Oct 20 19:00:11 2025 GMT
Not After : Oct 21 19:00:11 2025 GMT
Subject: CN=ebdda22267e4a1c8623fc9e9afa44fb3acbe6abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:de:62:0a:36:79:f3:f2:fb:bf:a2:36:b4:
b6:61:e4:c2:c9:54:bd:05:e0:86:6d:09:1e:5c:3c:
d5:89:db:e2:51:a2:0d:2f:81:0f:58:f4:12:d3:e2:
a4:ea:da:c5:1a:5b:2e:e7:87:b0:e1:8a:f6:f5:a3:
c9:c2:ac:aa:4f:cc:77:ee:bb:f9:83:3b:76:d9:d6:
47:5c:41:a2:5b:16:f0:47:6f:77:5c:12:f2:5d:b9:
da:57:7e:ea:cd:52:0b:58:21:f1:d7:5e:51:41:cf:
f8:5b:a3:77:c9:20:4b:99:66:d4:dc:50:f6:47:3c:
f9:2b:4a:eb:c8:df:6e:34:2a:d8:17:cc:13:eb:db:
9f:63:9b:fc:ec:5b:3d:d9:24:78:a5:56:70:92:4a:
19:8c:8a:a8:fe:68:39:cc:2b:4a:36:be:15:f2:63:
69:c5:4b:cc:7e:ea:fb:cf:37:2a:2c:17:f4:82:cf:
77:19:2f:ec:e2:44:a1:90:85:57:ae:d4:6c:f7:94:
26:73:45:5e:1f:e7:fd:08:c8:fb:b5:6b:62:a2:f1:
d9:26:32:be:42:8f:a4:27:1c:5e:ce:39:05:00:57:
cd:59:17:20:9e:d2:d2:a6:c3:bb:d5:0b:78:aa:31:
fd:f5:eb:2f:69:27:d1:42:46:12:55:d0:6c:8e:62:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DD:A2:22:67:E4:A1:C8:62:3F:C9:E9:AF:A4:4F:B3:AC:BE:6A:BC
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c7:01:70:6d:99:31:6e:9f:fc:94:4a:22:d8:af:55:70:45:
8a:9c:4d:07:1a:9f:bb:ef:27:67:66:85:ba:76:4f:a7:a6:17:
38:15:85:6d:58:2a:e6:f8:ef:47:06:27:d4:1d:fd:09:83:0b:
16:60:3c:22:6c:f7:96:b5:4e:ac:7b:a4:a2:f1:80:2a:b9:20:
c0:8c:03:e7:83:cb:e2:ea:e4:ce:14:51:eb:08:04:80:0f:18:
f1:d6:5c:72:1d:27:08:61:11:f4:1e:a8:4a:37:86:b4:aa:8c:
70:6a:fd:e3:41:fc:85:e4:3c:d2:05:d3:ff:85:14:83:c6:f4:
0b:1c:0f:ad:08:f9:f4:65:bb:c8:3e:1a:2b:c1:55:55:2c:b4:
2d:53:7e:50:09:31:bf:33:b1:30:31:e9:96:c4:dc:66:34:d8:
5f:ff:7d:fd:94:cf:bd:1b:bc:88:57:75:ea:48:43:b5:b6:a6:
9f:92:c8:57:1e:31:b2:6d:8e:83:ba:ad:43:63:83:ee:7b:56:
7c:cd:29:82:e5:b8:ab:af:91:39:8f:42:17:30:52:18:83:39:
d6:4d:80:2a:e0:51:37:f1:58:bf:99:8a:93:8a:2c:f7:0e:90:
4d:23:39:48:73:5e:7a:3a:b6:b6:28:34:16:20:03:7a:32:58:
0a:e4:8d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoC/kweLicRjTDYxJEIx34iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzM2U3NTJjYTBkYzQyM2M3NGY1MDg0MDViYTUyMjhhOGMy
ZTUxNTcwHhcNMjUxMDIwMTkwMDExWhcNMjUxMDIxMTkwMDExWjAzMTEwLwYDVQQD
EyhlYmRkYTIyMjY3ZTRhMWM4NjIzZmM5ZTlhZmE0NGZiM2FjYmU2YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc/eYgo2efPy+7+iNrS2YeTCyVS9
BeCGbQkeXDzVidviUaINL4EPWPQS0+Kk6trFGlsu54ew4Yr29aPJwqyqT8x37rv5
gzt22dZHXEGiWxbwR293XBLyXbnaV37qzVILWCHx115RQc/4W6N3ySBLmWbU3FD2
Rzz5K0rryN9uNCrYF8wT69ufY5v87Fs92SR4pVZwkkoZjIqo/mg5zCtKNr4V8mNp
xUvMfur7zzcqLBf0gs93GS/s4kShkIVXrtRs95Qmc0VeH+f9CMj7tWtiovHZJjK+
Qo+kJxxezjkFAFfNWRcgntLSpsO71Qt4qjH99esvaSfRQkYSVdBsjmL6IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvdoiJn5KHIYj/J6a+kT7Osvmq8MB8GA1UdIwQY
MBaAFGM+dSyg3EI8dPUIQFulIoqMLlFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzkt
ZGU2MTg3YjcyOThhLzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzktZGU2MTg3YjcyOThh
LzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8cBcG2Z
MW6f/JRKItivVXBFipxNBxqfu+8nZ2aFunZPp6YXOBWFbVgq5vjvRwYn1B39CYML
FmA8Imz3lrVOrHukovGAKrkgwIwD54PL4urkzhRR6wgEgA8Y8dZcch0nCGER9B6o
SjeGtKqMcGr940H8heQ80gXT/4UUg8b0CxwPrQj59GW7yD4aK8FVVSy0LVN+UAkx
vzOxMDHplsTcZjTYX/99/ZTPvRu8iFd16khDtbamn5LIVx4xsm2Og7qtQ2OD7ntW
fM0pguW4q6+ROY9CFzBSGIM51k2AKuBRN/FYv5mKk4os9w6QTSM5SHNeejq2tig0
FiADejJYCuSNKw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:45 2025 by rpki-client