Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: 4IMTNh0l6ti0nWqeyR7cD5Uxahq2BYWlAz03Yy0SSPE=
Subject key identifier: 24:57:AD:00:6B:42:26:CB:F9:9E:9C:9D:C0:36:C1:D7:D2:57:92:2B
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 0199FBEBBE8B1F37290172C85719CB61B7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:34 +0000
Manifest this update: Sun 19 Oct 2025 10:02:34 +0000
Manifest next update: Mon 20 Oct 2025 10:02:34 +0000
Files and hashes: 1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: uyuZKkFq/tR1L4ezhxLyAimuwu/gPmWYu/bZqqrdNA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:be:8b:1f:37:29:01:72:c8:57:19:cb:61:b7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Oct 19 10:02:34 2025 GMT
Not After : Oct 20 10:02:34 2025 GMT
Subject: CN=2457ad006b4226cbf99e9c9dc036c1d7d257922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:18:e9:ca:3e:ec:2a:6b:1e:4f:a3:9e:32:
42:92:c1:1d:70:54:b9:f1:6f:86:33:98:b3:39:4d:
1c:f0:01:05:46:99:d7:0a:8f:f3:63:1c:21:27:41:
3b:ef:91:da:98:de:23:6c:ca:62:48:1b:ce:d2:34:
1e:e2:89:67:cd:c7:8b:16:38:40:f3:3e:a5:29:61:
12:3c:05:4e:9d:6b:7a:35:0d:8b:a0:14:b2:67:2e:
df:09:73:36:e2:91:e7:36:e5:09:17:25:d2:db:78:
8b:1d:be:d7:86:d6:32:6d:f0:02:f2:44:53:22:4c:
ab:33:0d:a1:02:38:87:79:bd:de:4e:60:ce:b8:0d:
93:fa:7b:49:8c:89:87:c1:81:7d:98:0a:49:b6:b7:
a7:e3:cd:6a:28:0f:47:56:87:59:c4:0f:e1:3b:28:
ba:49:4a:12:5c:cb:78:a7:98:42:5a:79:bb:54:b6:
55:24:55:80:e2:58:23:ae:3b:ea:f5:9b:32:5c:c3:
8e:a1:72:cf:39:0a:f7:76:23:6b:ea:35:db:fc:07:
ee:0d:96:f7:6d:23:11:ab:b6:4f:c9:14:a2:87:3a:
82:b3:1f:d4:5c:c4:64:f9:60:26:79:ac:64:16:92:
bf:29:dd:82:76:8e:e2:70:a9:97:fd:17:7f:0a:18:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:AD:00:6B:42:26:CB:F9:9E:9C:9D:C0:36:C1:D7:D2:57:92:2B
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:24:03:86:a5:c9:12:f4:b6:41:39:98:d9:e2:8a:1d:8f:c9:
cd:6e:91:f2:e7:db:9e:fb:0f:6d:15:56:c0:8a:0b:8d:c1:6c:
a8:18:70:f5:8f:9a:16:28:0a:f4:ed:d1:7f:a0:32:1c:dc:bb:
c7:9d:56:8e:eb:f8:0e:12:27:19:70:30:4f:d4:e3:b0:0e:18:
92:5a:f6:a8:6c:bc:07:37:b1:83:f7:5c:d7:51:23:90:86:18:
f5:f2:c2:7c:dd:63:c6:73:b8:eb:65:12:7b:aa:58:ca:95:ad:
7b:db:fc:be:0e:04:91:cc:8a:b6:1c:4c:db:b3:ae:91:dd:92:
0f:14:75:f1:79:1d:63:9f:62:c9:5e:8c:dc:b4:eb:41:30:1b:
d0:46:68:78:7c:77:be:44:38:f1:8b:0f:fe:17:17:9e:13:a4:
9a:02:5d:92:17:60:f6:87:2c:75:de:73:70:6d:5f:82:60:63:
df:69:07:c0:1f:25:69:c7:90:ed:b6:62:d4:4c:4e:43:f4:8f:
5e:e8:49:88:0a:7b:f2:d3:e9:b6:55:30:49:da:a7:e2:99:d7:
c6:ce:82:7d:c4:06:50:73:a1:8d:4d:8f:3e:6b:89:3a:f9:0f:
5e:e9:0f:bc:f2:7e:75:f2:1a:da:04:6d:bd:6c:36:da:d4:35:
56:cc:d4:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7676LHzcpAXLIVxnLYbe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTEwNmRhYWQzYTk3M2ZkZTk4OTE0ZjdjYzFjY2QzNWQ4
Y2MzYzMwHhcNMjUxMDE5MTAwMjM0WhcNMjUxMDIwMTAwMjM0WjAzMTEwLwYDVQQD
EygyNDU3YWQwMDZiNDIyNmNiZjk5ZTljOWRjMDM2YzFkN2QyNTc5MjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArasY6co+7CprHk+jnjJCksEdcFS5
8W+GM5izOU0c8AEFRpnXCo/zYxwhJ0E775HamN4jbMpiSBvO0jQe4olnzceLFjhA
8z6lKWESPAVOnWt6NQ2LoBSyZy7fCXM24pHnNuUJFyXS23iLHb7XhtYybfAC8kRT
IkyrMw2hAjiHeb3eTmDOuA2T+ntJjImHwYF9mApJtren481qKA9HVodZxA/hOyi6
SUoSXMt4p5hCWnm7VLZVJFWA4lgjrjvq9ZsyXMOOoXLPOQr3diNr6jXb/AfuDZb3
bSMRq7ZPyRSihzqCsx/UXMRk+WAmeaxkFpK/Kd2Cdo7icKmX/Rd/Chjx+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRXrQBrQibL+Z6cncA2wdfSV5IrMB8GA1UdIwQY
MBaAFMhRBtqtOpc/3piRT3zBzNNdjMPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUt
ZmVmNDg3MTJhY2FiLzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84Yzg4YmItNDRkYy00ZjA4LWJlZWUtZmVmNDg3MTJhY2Fi
LzEveUZFRzJxMDZsel9lbUpGUGZNSE0wMTJNdzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSQDhqXJ
EvS2QTmY2eKKHY/JzW6R8ufbnvsPbRVWwIoLjcFsqBhw9Y+aFigK9O3Rf6AyHNy7
x51Wjuv4DhInGXAwT9TjsA4Yklr2qGy8Bzexg/dc11EjkIYY9fLCfN1jxnO462US
e6pYypWte9v8vg4EkcyKthxM27Oukd2SDxR18XkdY59iyV6M3LTrQTAb0EZoeHx3
vkQ48YsP/hcXnhOkmgJdkhdg9ocsdd5zcG1fgmBj32kHwB8laceQ7bZi1ExOQ/SP
XuhJiAp78tPptlUwSdqn4pnXxs6CfcQGUHOhjU2PPmuJOvkPXukPvPJ+dfIa2gRt
vWw22tQ1VszU6w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:10:48 2025 by rpki-client