Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: uScRbZy/8Y2pTIaTFqt5yvRCE66PQRFzdqbS0MJ+sUU=
Subject key identifier: 77:ED:76:29:9B:54:96:43:37:0B:20:5C:25:C2:17:27:06:8F:D4:C8
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 0199FDD929A8DE5F2394C052B12A07DCB182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 06AC
Signing time: Sun 19 Oct 2025 19:01:31 +0000
Manifest this update: Sun 19 Oct 2025 19:01:31 +0000
Manifest next update: Mon 20 Oct 2025 19:01:31 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: tE4nd0y2ki4BxaeI4TiP8566gHFvwzmA4BKoV5hOG0E=)
2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:29:a8:de:5f:23:94:c0:52:b1:2a:07:dc:b1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Oct 19 19:01:31 2025 GMT
Not After : Oct 20 19:01:31 2025 GMT
Subject: CN=77ed76299b549643370b205c25c21727068fd4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:2e:77:c8:99:47:01:45:11:79:15:b2:aa:
a6:99:8b:56:15:0c:3a:e2:52:de:4e:d7:18:7e:1f:
3f:e7:96:7c:d6:1b:ad:13:50:64:5b:23:cd:0c:4f:
d3:a9:f6:9c:0f:88:ff:f9:ef:7d:6c:2b:a1:5c:4f:
04:c9:3d:e4:c7:28:f3:3a:02:29:3f:62:49:4b:ee:
10:b7:cb:42:bb:96:6b:ec:0f:b9:00:24:51:56:35:
da:02:3b:25:e0:11:fa:91:7b:de:65:db:57:94:0a:
08:6f:b5:0b:39:5f:c2:63:56:4d:d5:75:70:20:de:
fb:ea:88:11:03:1b:e4:a1:fe:98:50:a9:7d:f9:c5:
30:00:3d:86:fe:51:4d:4b:6b:20:bd:b3:56:b5:ee:
e3:e4:4c:2f:18:63:86:ef:b4:34:53:83:13:cf:49:
f2:c1:ab:51:3b:22:2f:bd:e2:60:27:7b:7e:51:ba:
02:29:e2:b3:86:fb:17:44:ff:87:8b:a2:e1:7d:f4:
a5:69:78:73:59:52:72:c8:27:c8:76:39:4b:b6:88:
fa:33:9f:9f:b8:c3:84:a5:e1:6c:34:87:80:59:17:
ab:1d:a8:e1:ef:0c:54:b4:bc:ae:74:1b:f6:ad:0f:
5f:bb:85:5e:7f:ed:85:a7:5a:2f:99:24:2a:c4:6e:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:76:29:9B:54:96:43:37:0B:20:5C:25:C2:17:27:06:8F:D4:C8
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:52:6c:b7:e8:a0:79:1d:ab:76:a5:35:88:64:10:bb:8b:09:
28:39:76:ae:87:b8:f5:8d:62:02:87:bd:6e:79:d6:0c:ae:c8:
58:6f:5d:f9:46:1c:79:28:d1:42:a8:21:72:ee:46:51:8f:43:
0f:f9:da:61:2f:49:79:2a:1f:7f:db:da:46:26:41:11:ab:57:
cc:08:bc:51:99:68:17:ab:f3:10:45:e0:9b:dc:50:4c:51:48:
be:5b:26:a2:84:81:ab:c8:f5:61:88:41:6c:f5:fb:fa:f9:09:
0e:d8:0b:f9:0a:f8:4a:f2:fc:8c:5b:85:7c:12:41:ce:9a:d4:
09:70:0e:d0:23:87:da:d0:21:23:6c:19:72:60:0c:c8:c0:1c:
53:38:a1:55:0f:c1:49:f1:5e:81:1d:9a:de:ef:a5:27:22:5e:
7e:f5:12:6b:1a:c6:60:fa:96:06:32:bc:74:0a:86:07:ca:4f:
06:8b:1c:b4:e5:d5:a8:fb:dc:ad:08:28:09:67:28:5f:f7:a9:
fa:20:a7:48:04:73:fb:35:c4:ab:a8:22:73:35:6b:7c:b9:ac:
ad:3e:9b:3e:fd:b5:58:60:27:0a:2d:15:53:85:b7:8b:38:49:
d1:00:b2:7a:f5:2d:f3:f4:0e:eb:c2:17:f9:c3:72:d3:fd:77:
0c:9e:91:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Smo3l8jlMBSsSoH3LGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjUwNzJhMDcwMTIyMWUxZDI5MWYwMmRlYjhjZDUxNjll
NmFjMzIwHhcNMjUxMDE5MTkwMTMxWhcNMjUxMDIwMTkwMTMxWjAzMTEwLwYDVQQD
Eyg3N2VkNzYyOTliNTQ5NjQzMzcwYjIwNWMyNWMyMTcyNzA2OGZkNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzIud8iZRwFFEXkVsqqmmYtWFQw6
4lLeTtcYfh8/55Z81hutE1BkWyPNDE/TqfacD4j/+e99bCuhXE8EyT3kxyjzOgIp
P2JJS+4Qt8tCu5Zr7A+5ACRRVjXaAjsl4BH6kXveZdtXlAoIb7ULOV/CY1ZN1XVw
IN776ogRAxvkof6YUKl9+cUwAD2G/lFNS2sgvbNWte7j5EwvGGOG77Q0U4MTz0ny
watROyIvveJgJ3t+UboCKeKzhvsXRP+Hi6LhffSlaXhzWVJyyCfIdjlLtoj6M5+f
uMOEpeFsNIeAWRerHajh7wxUtLyudBv2rQ9fu4Vef+2Fp1ovmSQqxG781QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHftdimbVJZDNwsgXCXCFycGj9TIMB8GA1UdIwQY
MBaAFGO1ByoHASIeHSkfAt64zVFp5qwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEt
ZjM5MWRjMTE3ZmU5LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEtZjM5MWRjMTE3ZmU5
LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFJst+ig
eR2rdqU1iGQQu4sJKDl2roe49Y1iAoe9bnnWDK7IWG9d+UYceSjRQqghcu5GUY9D
D/naYS9JeSoff9vaRiZBEatXzAi8UZloF6vzEEXgm9xQTFFIvlsmooSBq8j1YYhB
bPX7+vkJDtgL+Qr4SvL8jFuFfBJBzprUCXAO0COH2tAhI2wZcmAMyMAcUzihVQ/B
SfFegR2a3u+lJyJefvUSaxrGYPqWBjK8dAqGB8pPBosctOXVqPvcrQgoCWcoX/ep
+iCnSARz+zXEq6giczVrfLmsrT6bPv21WGAnCi0VU4W3izhJ0QCyevUt8/QO68IX
+cNy0/13DJ6RAw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:08 2025 by rpki-client