Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier: sosbPZR95zyAVtOLGL01aARKTMOF1o0rA49Ud17zDMI=
Subject key identifier: 7A:D2:1C:43:5D:FA:30:D6:FB:9E:53:81:98:52:07:86:8F:F5:D1:BD
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial: 0199FC8F387ABE54CF3ED7F4A7555657C3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number: 0442
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: q46mhqb037SisDm5N4bZ1WyfVUE.roa (hash: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=)
2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: DTxQwNkcvhMcQ46fJ4NN9I0YyJvcr8Ed3ObWSr1JVkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:38:7a:be:54:cf:3e:d7:f4:a7:55:56:57:c3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=7ad21c435dfa30d6fb9e5381985207868ff5d1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:a9:77:60:79:b2:4a:8f:4a:fd:a4:ac:18:
21:50:2e:3f:a3:b0:85:e0:8c:6a:5d:7c:22:6a:e4:
50:52:04:a2:71:c4:7a:03:a5:a5:1d:01:8e:09:9d:
08:8c:d1:54:b0:9c:22:83:57:5c:62:72:9a:f4:98:
da:83:0d:fb:3d:68:e3:9b:d5:10:d2:51:ac:20:3c:
d8:6f:ec:94:6f:a7:28:f5:bb:e3:06:df:f7:6f:ff:
e2:3d:a7:39:07:9d:bf:2b:34:f2:e5:80:5e:aa:36:
c1:40:e2:3a:9d:6e:93:96:61:17:75:ac:c1:e2:b1:
2e:a2:3a:06:0f:2f:de:55:99:ff:35:18:4a:04:79:
05:54:ed:28:62:ea:3b:cb:3b:07:4f:35:17:8b:ea:
dc:d9:1a:60:e8:87:6f:74:d6:db:5f:2d:a2:f1:a0:
f1:94:14:40:85:a8:15:61:23:58:22:9c:ab:38:d3:
3c:cd:c4:7f:f4:4a:0d:78:83:76:29:54:e4:4d:a4:
9a:79:ac:ea:3f:f9:e9:82:b6:bc:19:d5:d6:8a:d2:
da:6e:cb:e4:24:b7:24:95:17:53:9d:75:3d:f7:c8:
f6:10:a1:45:1f:71:39:05:25:f5:b2:d1:7f:39:74:
32:c9:42:46:df:b2:d4:d0:af:19:13:52:ed:0c:4a:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:1C:43:5D:FA:30:D6:FB:9E:53:81:98:52:07:86:8F:F5:D1:BD
X509v3 Authority Key Identifier:
keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:30:d8:2c:58:78:b7:f8:65:42:5d:6f:98:d8:7f:c5:d5:6a:
4a:85:c0:81:be:2f:94:8b:16:c5:46:5b:bd:eb:4c:70:fd:9b:
ad:22:5e:ad:09:ce:39:d6:7a:91:68:11:27:4f:02:8c:5a:75:
e4:ec:90:0c:2d:96:25:55:d0:84:cf:83:9a:d0:eb:9a:11:8f:
c1:3a:cb:4e:c3:f3:0f:48:30:45:32:f6:8b:a1:d8:6f:9a:ba:
b5:d6:75:6b:1d:1a:89:d0:07:64:83:7a:23:63:c2:c8:38:d5:
9b:12:65:e0:36:3e:49:fd:ba:81:08:94:1e:ce:b6:db:86:d0:
0c:55:74:38:97:57:b1:a8:2b:95:30:78:e4:a6:6b:78:22:eb:
e2:53:55:d0:fa:09:65:86:a6:b8:a4:e5:78:d4:59:95:6c:25:
4d:34:dd:39:60:92:e3:20:9b:33:7e:47:c3:18:25:9b:ad:64:
86:66:96:c6:b4:33:47:f9:eb:ae:82:c9:ac:65:d0:a2:50:be:
ab:1f:3a:29:fc:f9:eb:7a:64:60:6a:b4:a5:de:cf:39:68:c9:
dd:be:22:3e:e9:95:54:e6:15:85:83:45:1a:72:b4:76:54:85:
c0:52:ec:e5:58:33:61:af:76:c8:40:b7:f5:29:1b:ce:d4:af:
08:cf:37:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzh6vlTPPtf0p1VWV8PaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTlmYzcyNWIwYzNlZjEwMzczNDYwZjliZjU5YmNlM2Vk
NTBhMzQwHhcNMjUxMDE5MTMwMTA4WhcNMjUxMDIwMTMwMTA4WjAzMTEwLwYDVQQD
Eyg3YWQyMWM0MzVkZmEzMGQ2ZmI5ZTUzODE5ODUyMDc4NjhmZjVkMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpGpd2B5skqPSv2krBghUC4/o7CF
4IxqXXwiauRQUgSiccR6A6WlHQGOCZ0IjNFUsJwig1dcYnKa9Jjagw37PWjjm9UQ
0lGsIDzYb+yUb6co9bvjBt/3b//iPac5B52/KzTy5YBeqjbBQOI6nW6TlmEXdazB
4rEuojoGDy/eVZn/NRhKBHkFVO0oYuo7yzsHTzUXi+rc2Rpg6IdvdNbbXy2i8aDx
lBRAhagVYSNYIpyrONM8zcR/9EoNeIN2KVTkTaSaeazqP/npgra8GdXWitLabsvk
JLcklRdTnXU998j2EKFFH3E5BSX1stF/OXQyyUJG37LU0K8ZE1LtDEpSoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrSHENd+jDW+55TgZhSB4aP9dG9MB8GA1UdIwQY
MBaAFMvp/HJbDD7xA3NGD5v1m84+1Qo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDIt
NTVhNTRkZjE0MzRlLzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDItNTVhNTRkZjE0MzRl
LzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTDYLFh4
t/hlQl1vmNh/xdVqSoXAgb4vlIsWxUZbvetMcP2brSJerQnOOdZ6kWgRJ08CjFp1
5OyQDC2WJVXQhM+DmtDrmhGPwTrLTsPzD0gwRTL2i6HYb5q6tdZ1ax0aidAHZIN6
I2PCyDjVmxJl4DY+Sf26gQiUHs6224bQDFV0OJdXsagrlTB45KZreCLr4lNV0PoJ
ZYamuKTleNRZlWwlTTTdOWCS4yCbM35Hwxglm61khmaWxrQzR/nrroLJrGXQolC+
qx86Kfz563pkYGq0pd7POWjJ3b4iPumVVOYVhYNFGnK0dlSFwFLs5VgzYa92yEC3
9SkbztSvCM83sg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:04 2025 by rpki-client